Edit tour

Windows Analysis Report
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Overview

General Information

Sample URL:	https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda
Analysis ID:	1522762
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on shot match)

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on shot match)

Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched
Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: Number of links: 1
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: Number of links: 0

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ticket/66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/font-awesome-4.4.0/css/font-awesome.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/css/vex.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /auth/forget HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1; _ga_YFMJZ2K9XT=GS1.2.1727705690.1.0.1727705690.0.0.0

Source: chromecache_159.2.dr, chromecache_117.2.dr

String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: customersio.enchant.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_145.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_154.2.dr, chromecache_131.2.dr	String found in binary or memory: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-test
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://tinysort.sjeiti.com/
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#affix
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#alerts
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#buttons
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#carousel
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#collapse
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#dropdowns
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#modals
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#popovers
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#scrollspy
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tabs
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tooltips
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#transitions
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#typeahead
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_147.2.dr, chromecache_132.2.dr	String found in binary or memory: http://viljamis.com/blog/2012/file-upload-support-on-mobile/
Source: chromecache_146.2.dr, chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_125.2.dr	String found in binary or memory: http://www.apple.com/safari/
Source: chromecache_125.2.dr	String found in binary or memory: http://www.enchant.com/images/logo.png
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_123.2.dr, chromecache_128.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: chromecache_125.2.dr	String found in binary or memory: http://www.mozilla.org/firefox
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_117.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=922896
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_125.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/bestiejs/lodash/blob/master/LICENSE.txt
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload/wiki/Setup#content-type-negotiation
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/ftlabs/fastclick/issues/251
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/wycats/handlebars.js/issues/1639
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zaach/jison/issues/291
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access
Source: chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_129.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_117.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_125.2.dr	String found in binary or memory: https://www.google.com/chrome
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_117.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@17/102@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.186.36	true	false	unknown
customersio.enchant.com	54.158.82.124	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://customersio.enchant.com/assets/modernizr/modernizr.custom.js	false	unknown
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda	false	unknown
https://customersio.enchant.com/style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/manifest.json	false	unknown
https://customersio.enchant.com/spa/assets/font-awesome-4.4.0/css/font-awesome.css	false	unknown
https://customersio.enchant.com/spa/assets/moment-2.9.0.min.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery.base64.min.js	false	unknown
https://customersio.enchant.com/spa/assets/autosize-3.0.16/dist/autosize.min.js	false	unknown
https://customersio.enchant.com/android-chrome-192x192.png	false	unknown
https://customersio.enchant.com/assets/jquery.tinysort.min.js	false	unknown
https://customersio.enchant.com/favicon-32x32.png	false	unknown
https://customersio.enchant.com/spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js	false	unknown
https://customersio.enchant.com/images/logotext.svg	false	unknown
https://customersio.enchant.com/spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/images/icons/email_m.svg	false	unknown
https://customersio.enchant.com/assets/jquery-2.1.0.min.js	false	unknown
https://customersio.enchant.com/spa/assets/underscore-1.8.3.min.js	false	unknown
https://customersio.enchant.com/spa/assets/fc-1.0.6/lib/fc.js	false	unknown
https://customersio.enchant.com/images/icons/lock_m.svg	false	unknown
https://customersio.enchant.com/spa/assets/handlebars-v4.7.6.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js	false	unknown
https://customersio.enchant.com/spa/assets/vex-2.3.2/js/vex.combined.min.js	false	unknown
https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	false	unknown
https://customersio.enchant.com/auth/forget	true	unknown
https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/vex-2.3.2/css/vex.css	false	unknown
https://customersio.enchant.com/spa/assets/backbone-1.3.3.min.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_109.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_159.2.dr, chromecache_117.2.dr	false	URL Reputation: safe	unknown
http://twitter.github.com/bootstrap/javascript.html#popovers	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://jquery.org/license	chromecache_114.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
http://twitter.github.com/bootstrap/javascript.html#affix	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://underscorejs.org	chromecache_115.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
http://bugs.jquery.com/ticket/9413	chromecache_114.2.dr, chromecache_145.2.dr	false		unknown
http://jqueryui.com	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_162.2.dr, chromecache_129.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/jQuery.widget/	chromecache_114.2.dr, chromecache_145.2.dr	false		unknown
https://github.com/wycats/handlebars.js/issues/1639	chromecache_161.2.dr, chromecache_142.2.dr	false		unknown
https://www.google.com	chromecache_117.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#transitions	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_150.2.dr, chromecache_152.2.dr	false	URL Reputation: safe	unknown
http://twitter.github.com/bootstrap/javascript.html#scrollspy	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://bugs.jquery.com/ticket/8235	chromecache_114.2.dr, chromecache_145.2.dr	false		unknown
http://www.jacklmoore.com/autosize	chromecache_123.2.dr, chromecache_128.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#collapse	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_129.2.dr	false	URL Reputation: safe	unknown
http://tinysort.sjeiti.com/	chromecache_150.2.dr, chromecache_152.2.dr	false		unknown
https://github.com/ftlabs/fastclick/issues/251	chromecache_130.2.dr, chromecache_112.2.dr	false		unknown
https://github.com/bestiejs/lodash/blob/master/LICENSE.txt	chromecache_161.2.dr, chromecache_142.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#carousel	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_146.2.dr, chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#typeahead	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://github.com/blueimp/jQuery-File-Upload	chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	false		unknown
http://www.enchant.com/images/logo.png	chromecache_125.2.dr	false		unknown
https://github.com/zaach/jison/issues/291	chromecache_161.2.dr, chromecache_142.2.dr	false		unknown
http://www.modernizr.com/)	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#tooltips	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://tagassistant.google.com/	chromecache_162.2.dr, chromecache_129.2.dr	false	URL Reputation: safe	unknown
http://twitter.github.com/bootstrap/javascript.html#buttons	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://viljamis.com/blog/2012/file-upload-support-on-mobile/	chromecache_147.2.dr, chromecache_132.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#dropdowns	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_159.2.dr, chromecache_117.2.dr	false	URL Reputation: safe	unknown
https://blueimp.net	chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	false		unknown
http://fontawesome.io/license	chromecache_109.2.dr	false	URL Reputation: safe	unknown
http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-test	chromecache_154.2.dr, chromecache_131.2.dr	false		unknown
https://www.google.com/chrome	chromecache_125.2.dr	false		unknown
https://www.google.com/ads/ga-audiences	chromecache_162.2.dr, chromecache_129.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_162.2.dr, chromecache_129.2.dr	false		unknown
https://td.doubleclick.net	chromecache_159.2.dr, chromecache_117.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#alerts	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
http://www.opensource.org/licenses/MIT	chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	false		unknown
https://www.merchant-center-analytics.goog	chromecache_159.2.dr, chromecache_117.2.dr	false	URL Reputation: safe	unknown
http://www.gnu.org/licenses/gpl.html	chromecache_150.2.dr, chromecache_152.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=922896	chromecache_130.2.dr, chromecache_112.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#tabs	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://github.com/blueimp/jQuery-File-Upload/wiki/Setup#content-type-negotiation	chromecache_140.2.dr, chromecache_148.2.dr	false		unknown
https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access	chromecache_161.2.dr, chromecache_142.2.dr	false		unknown
http://twitter.github.com/bootstrap/javascript.html#modals	chromecache_146.2.dr, chromecache_133.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/86#issuecomment-115759028	chromecache_161.2.dr, chromecache_142.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_117.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
54.158.82.124	customersio.enchant.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.205.78.181	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.11
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522762
Start date and time:	2024-09-30 16:13:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@17/102@6/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://customersio.enchant.com/auth/forget

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.185.206, 66.102.1.84, 34.104.35.123, 142.250.185.74, 172.217.18.99, 142.250.186.46, 172.217.18.10, 172.217.16.138, 142.250.185.106, 216.58.206.74, 142.250.186.106, 216.58.212.138, 142.250.74.202, 142.250.186.42, 172.217.18.106, 172.217.23.106, 142.250.186.74, 142.250.186.138, 216.58.206.42, 172.217.16.202, 142.250.186.170, 142.250.186.174, 142.250.185.104, 142.250.185.232, 20.114.59.183, 2.16.100.168, 88.221.110.91, 192.229.221.95, 20.3.187.198, 52.165.164.15, 13.85.23.206, 142.250.74.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Model: jbxai	{ "brand":["enchant"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log In", "text_input_field_labels":["Email Address", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Model: jbxai	{ "phishing_score":2, "brands":"enchant", "legit_domain":"enchant.com", "classification":"known", "reasons":["The domain 'enchant.com' matches the brand 'enchant'.", "The URL 'customersio.enchant.com' uses a subdomain which is common for legitimate services.", "No suspicious elements such as misspellings or unusual characters in the URL.", "The input fields 'Email Address' and 'Password' are typical for login pages."], "brand_matches":[false], "url_match":false, "brand_input":"enchant", "input_fields":"Email Address, Password"}

URL: https://customersio.enchant.com/auth/forget Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Send Reset Instructions", "text_input_field_labels":["Email Address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://customersio.enchant.com/auth/forget Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.981123819429827
Encrypted:	false
SSDEEP:	48:8AhdMTU1Z3HyidAKZdA1nehwiZUklqehty+3:8AIMOay
MD5:	2FA7392AB2AE8F718AB9114ED37E740F
SHA1:	6C5EAD35E996463A83089B943C1BC677B90DBF08
SHA-256:	0742A6C50EE33AF7B83274B6530D9359EA97F6A94763942EC66FAA725D5908CF
SHA-512:	6AF40309B0821F91E03A1CA02C0D2462750CD052E51718A29BFFC0562B7F1F4FEF538EB626A4C43F2491487D2831528D98A0E8111FDDDB4B5236786B0D7266D0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... ...C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V>Y.q............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.998428471390415
Encrypted:	false
SSDEEP:	48:80hdMTU1Z3HyidAKZdA1geh/iZUkAQkqehKy+2:80IMK9QLy
MD5:	AD60476EB6E256680A9D7CF7D23BFC0E
SHA1:	62BE929A1812B39FBB3B78AEF283C4A1F428C6ED
SHA-256:	B9446F5AA3A647BCC2411DF2ACFA47AB56CF3470B1A07099EBB0B66144EA9C43
SHA-512:	973980B9804460A75EA702C98E9AE6C6BD7C092DA17C08489550771FFB38F0A4D246C0F30757E35DDEF112290A6D7C3E77ECC9D3B21C536B2032224453374437
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V>Y.q............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.007269062922593
Encrypted:	false
SSDEEP:	48:87hdMTU1ZCHyidAKZdA148eh7sFiZUkmgqeh7sAy+BX:87IMDnWy
MD5:	A8B19BA7B3ACEEF2B0B91EF79D4953FD
SHA1:	2814606E41C4F2A53621B9F0D8F50DC180EDA808
SHA-256:	C88A1A720A52EB0301BFD692A8810DF97F791359ADA4ABA65D255724C0C6CB9C
SHA-512:	F2A9087A2E6A77A3D25916E6CEEAF394D2C21478EE11231E148058728D3737AC0BBD5FC43D2A809631417D3D7105A09F888920CCC6CF943AB3E0AB408ACBCE11
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9938453408009407
Encrypted:	false
SSDEEP:	48:8FkhdMTU1Z3HyidAKZdA1lehDiZUkwqehOy+R:8FkIMnYy
MD5:	C293E181FC95F500D10B0E9A97A57562
SHA1:	4D290581514AB9FE7D4FF47D530E5E73582D069A
SHA-256:	8D5E5715F3E43B7BE43BE16EB59CC1B5147442B628F45F478186D623E5B21E2A
SHA-512:	E1EC017B83B6FE42DF72F3C3CF86095FF853A2E64003C3DB1391359D9AEE4096C11330A24AAF22CB6213C55253B0A3C6DC7B6B60B690E11EA11246EC464E3AF9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....k..C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V>Y.q............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9843758931411646
Encrypted:	false
SSDEEP:	48:88hdMTU1Z3HyidAKZdA17ehBiZUk1W1qeh8y+C:88IMX9cy
MD5:	8EAE08C7C00F867205A636C9ED1C7161
SHA1:	976585B6983AB0532F7012300D4493F523BA06B5
SHA-256:	BD78005EB2101677BB1B5F4886DEBD0B37D2D6464E1855CD68E17C43E2442AF9
SHA-512:	153961E59B9A540C4E810DA6CEC92E5782B93D8D8BE5FF5960C67B105BD44CDEDD9E85CFAC09B277B811155DC5EA30E02F39820ADDF2D853CE35284ECCBF9219
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b...C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V>Y.q............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.993570181531765
Encrypted:	false
SSDEEP:	48:8Y/hdMTU1Z3HyidAKZdA1duTiehOuTbbiZUk5OjqehOuTbWy+yT+:8Y/IM1TLTbxWOvTbWy7T
MD5:	34F01F56C5E9B4369D4869590C24B396
SHA1:	56E95DA4E5C0BDEC7BC15043046119B5E0C6735E
SHA-256:	4CD25CBD24B4FE2C0F58F2FACE73323BE100B410D130EB57F594C28C01BA65D9
SHA-512:	21C29CED228C12BB165C0C37A0F17A48F32AD4C68543717D8ED5F0AB2BAB145BF80CFAE43A66E6E720F03100957CB243C01A462065EF50ECB4385A8CD7F3C0B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....D..C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I>Y.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y.q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V>Y.q....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V>Y.q..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V>Y.q............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............1I.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.544325652580697
Encrypted:	false
SSDEEP:	3:QQinPbDKthz:+PbqV
MD5:	4DE186E7E8B8E27DED242B9BEECEF58F
SHA1:	FF9697F746B7AE6164400393732A572678DF2244
SHA-256:	17433014C9332E3380B2121A1C88263F77F5880CD799B38F983E237ADAB460CA
SHA-512:	39FBA3C0A5D05AB9B6A12D788E292230E8E34801791DB4D2E7E86BEEA5478A40290A0DE528F912BE3943667725E189959F1BC1F375DDE818F9D23237BD31961C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwkfqsyCJtUp9xIFDXhvEhkSBQ3OQUx6EhAJ4PspPL-7q0cSBQ027lMV?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3OQUx6GgAKCQoHDTbuUxUaAA==

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1588
Entropy (8bit):	5.098455684669689
Encrypted:	false
SSDEEP:	24:2dG5AXxGvO7LfmjKdoU0bSMKU3vEtdhatIhDql0L6OKvHrxgrkjqPQ9qiW01U:cKAXQSfgKU3Wdg+MLZvHNQAgL1aU
MD5:	7D314CE15F90CF269C2EB2883D3F482B
SHA1:	3C2AB3AA79B837E26038321E9DDF97BA3A96AAB7
SHA-256:	56CC3F8163B5AAEC6F9524506906BCB3CBBC10B7158F88E45044790AB6483D51
SHA-512:	8324A30B7BB85082F364909F2DD37C4D169B22092D45CDB34552ADC8BFB2570935D772AC80F74ACBF00901CB70D35CB305DEA7A0AA4EBB439BDA606D126E8AD1
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/images/icons/lock_m.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="26px" height="26px" viewBox="0 2 26 26" enable-background="new 0 2 26 26" xml:space="preserve">..<g>...<path fill="#506472" d="M17.244,23.95H8.855c-3.536,0-3.695-3.563-3.754-4.905c-0.102-2.285,0-3.301,0.004-3.343....C5.1,13.471,6.749,11.65,8.855,11.65h8.389c2.084,0,3.656,1.782,3.656,4.145l0,0c0.002,0,0.1,1.278-0.002,3.256....C20.823,20.517,20.646,23.95,17.244,23.95z M8.855,13.45c-1.115,0-1.956,1.008-1.956,2.345c-0.005,0.101-0.096,1.044-0.001,3.17....c0.119,2.664,0.808,3.185,1.957,3.185h8.389c1.281,0,1.732-0.775,1.857-3.19c0.095-1.863,0.002-3.081,0.001-3.094....c-0.003-1.429-0.783-2.416-1.858-2.416H8.855z"/>...<path fill=

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	dropped
Size (bytes):	16410
Entropy (8bit):	5.149743639304422
Encrypted:	false
SSDEEP:	384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOy:kApB5IHtTY5FrX
MD5:	6A3A434A1360CC744341E97DE9177BC6
SHA1:	D110825C3252A677CE8B6FD81CD2EDA0201E4E1B
SHA-256:	4F5B2528815D8B1CD9B68B1A4BB1FE689696F8DCBC2C4A5104343B886EE68828
SHA-512:	A86A62D78D101AA6E8045AE4966604415A808A34D686BA2E0DCD169FA93EA638652B2926FF336186564136973CB3E0870E725CEEDDD23FD8FA40ABD8AA6FFFD0
Malicious:	false
Reputation:	low
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	83615
Entropy (8bit):	5.372319722661032
Encrypted:	false
SSDEEP:	1536:XPpEy5BMibZGOj/bEe8v+/UWf4IhvAQPFZ93E8ud44d+ROvcpbRNkVPEWW9MtXaQ:uIOKpETQRsFrta98HrP
MD5:	5CA7582261C421482436DFDF3AF9BFFE
SHA1:	98884258CBDB0D939FA2C5E74FC7AC9E56D8170F
SHA-256:	F284353A7CC4D97F6FE20A5155131BD43587A0F1C98A56EEAF52CFF72910F47D
SHA-512:	AA9DBB9EE532954830059247B269B75BB925C2E3398247B8A6B4EF3E89375F9CE2E74CB7328F1C8297977A0596ADD7EE5F217651D2D62BF5826F932FEC228770
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/assets/jquery-2.1.0.min.js
Preview:	/! jQuery v2.1.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k="".trim,l={},m=a.document,n="2.1.0",o=function(a,b){return new o.fn.init(a,b)},p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};o.fn=o.prototype={jquery:n,constructor:o,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=o.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return o.each(this,a,b)},map:function(a){return this.pushStack(o.map(this,function(b,c){return a.call(b,c,b)}

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (602)
Category:	downloaded
Size (bytes):	32594
Entropy (8bit):	4.838248744990136
Encrypted:	false
SSDEEP:	768:o0j++A4CSIDqvnI+YTBrQPvVlJjPiRAiK:9j++A4GDUI+Y9rMVLjPiw
MD5:	1E1D5E81CE3EA5DB630596B5BFE971E0
SHA1:	4D5A7FED03AFA86C5245A7799FE59C2CAA043573
SHA-256:	286D0D30EEF94966882381E25EDBCD85F5263AEB8EAC92CE6BD0607D11035A80
SHA-512:	46AE6AD9B4B1E74A6B3A2D3DC436DA0733C2B90F10ADD444586936AE9ED5D91FDF6F2ACE456CFFD577C8222592BDAA4E692AFA17AA2BB3BCBF75D9BC577212ED
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/font-awesome-4.4.0/css/font-awesome.css
Preview:	/!. Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- */.@font-face {. font-family: 'FontAwesome';. src: url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.eot?v=4.4.0');. src: url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.eot?#iefix&v=4.4.0') format('embedded-opentype'), url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0') format('woff2'), url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.woff?v=4.4.0') format('woff'), url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.ttf?v=4.4.0') format('truetype'), url('/cached-assets/4.4.0-20151113/font-awesome-4.4.0/fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular') format('svg');. font-weight: normal;. font-style: nor

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23317)
Category:	downloaded
Size (bytes):	23318
Entropy (8bit):	5.092172139930528
Encrypted:	false
SSDEEP:	384:h3hQ87W+wUYsj/6n90gOPOWlk80YNRw316Jv4o4ZdRENN8oyBKB7ygPzyMjzl4xc:A0W4N5lGw7g9O
MD5:	9263DDBE52F85E7BE13301AC26889C8E
SHA1:	6659D494A0F176E79C772FF1CE444B890E245830
SHA-256:	3616EDD841FFB4C1937A207C787D0D8048E93B4C34A339BED9B9D4F0A1E226A3
SHA-512:	4358990C649EF80B36703F8B05A0A7099B6172767C1B220991AA4EE88DABE164C57852DA3164097B72B4CE02B2E68C61542AB6C8059CD52EDC74F0D7F71D61F8
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/backbone-1.3.3.min.js
Preview:	(function(t){var e=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(i,r,n){e.Backbone=t(e,n,i,r)})}else if(typeof exports!=="undefined"){var i=require("underscore"),r;try{r=require("jquery")}catch(n){}t(e,exports,i,r)}else{e.Backbone=t(e,{},e._,e.jQuery\|\|e.Zepto\|\|e.ender\|\|e.$)}})(function(t,e,i,r){var n=t.Backbone;var s=Array.prototype.slice;e.VERSION="1.3.3";e.$=r;e.noConflict=function(){t.Backbone=n;return this};e.emulateHTTP=false;e.emulateJSON=false;var a=function(t,e,r){switch(t){case 1:return function(){return i[e](this[r])};case 2:return function(t){return i[e](this[r],t)};case 3:return function(t,n){return i[e](this[r],o(t,this),n)};case 4:return function(t,n,s){return i[e](this[r],o(t,this),n,s)};default:return function(){var t=s.call(arguments);t.unshift(this[r]);return i[e].apply(i,t)}}};var h=function(t,e,r){i.each(e,function(e,n

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23317)
Category:	dropped
Size (bytes):	23318
Entropy (8bit):	5.092172139930528
Encrypted:	false
SSDEEP:	384:h3hQ87W+wUYsj/6n90gOPOWlk80YNRw316Jv4o4ZdRENN8oyBKB7ygPzyMjzl4xc:A0W4N5lGw7g9O
MD5:	9263DDBE52F85E7BE13301AC26889C8E
SHA1:	6659D494A0F176E79C772FF1CE444B890E245830
SHA-256:	3616EDD841FFB4C1937A207C787D0D8048E93B4C34A339BED9B9D4F0A1E226A3
SHA-512:	4358990C649EF80B36703F8B05A0A7099B6172767C1B220991AA4EE88DABE164C57852DA3164097B72B4CE02B2E68C61542AB6C8059CD52EDC74F0D7F71D61F8
Malicious:	false
Reputation:	low
Preview:	(function(t){var e=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(i,r,n){e.Backbone=t(e,n,i,r)})}else if(typeof exports!=="undefined"){var i=require("underscore"),r;try{r=require("jquery")}catch(n){}t(e,exports,i,r)}else{e.Backbone=t(e,{},e._,e.jQuery\|\|e.Zepto\|\|e.ender\|\|e.$)}})(function(t,e,i,r){var n=t.Backbone;var s=Array.prototype.slice;e.VERSION="1.3.3";e.$=r;e.noConflict=function(){t.Backbone=n;return this};e.emulateHTTP=false;e.emulateJSON=false;var a=function(t,e,r){switch(t){case 1:return function(){return i[e](this[r])};case 2:return function(t){return i[e](this[r],t)};case 3:return function(t,n){return i[e](this[r],o(t,this),n)};case 4:return function(t,n,s){return i[e](this[r],o(t,this),n,s)};default:return function(){var t=s.call(arguments);t.unshift(this[r]);return i[e].apply(i,t)}}};var h=function(t,e,r){i.each(e,function(e,n

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (382)
Category:	dropped
Size (bytes):	25965
Entropy (8bit):	5.010926684303138
Encrypted:	false
SSDEEP:	384:ekZSvhAAunDhtXz+53iQ7vj20MdbfiMXeT0Zejj1oW+xVZWN7txRLRTTngp0:eZ6A0DPM3iQTafruQZeSWswZv
MD5:	6E9D3B0DA74F2A4A7042B494CDAA7C2E
SHA1:	06CEF196733A710E77AD7E386CED6963F092DC55
SHA-256:	1AA08CB3C7AA70D268D24D59C374C14AF7BD08E0AF8C85F8E4F60A2651F4BAB5
SHA-512:	09622102B138D4705B26608A35A23EA073EDF2BF7819BFAA1ADCBA294C9F9784FC383B2A868C889B63631B357B8ECD5C6EFA947EB9A29E30A3C543CB8775A7EC
Malicious:	false
Reputation:	low
Preview:	;(function () {..'use strict';.../*.. @preserve FastClick: polyfill to remove click delays on browsers with touch UIs... .. @codingstandard ftlabs-jsv2.. * @copyright The Financial Times Limited [All Rights Reserved].. * @license MIT License (see LICENSE.txt).. /.../jslint browser:true, node:true/../global define, Event, Node/..../.. Instantiate fast-clicking listeners on the specified layer... .. @constructor.. * @param {Element} layer The layer to listen on.. * @param {Object} [options={}] The options to override the defaults.. /..function FastClick(layer, options) {...var oldOnClick;....options = options \|\| {};..../... Whether a click is currently being tracked.... ... @type boolean... /...this.trackingClick = false;...../... Timestamp for when click tracking started.... ... @type number... /...this.trackingClickStart = 0;...../... The element being tracked for a click.... ... @type EventTarget... /...this.targetElement = null;...../...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1565
Entropy (8bit):	6.586791720700469
Encrypted:	false
SSDEEP:	24:hXXGfIbbNj45CDOmiq6eopJypxmQQyRjIRNKzQ3IEMwPEEfl9:hnb5j454O6dFlj0NKREtTT
MD5:	85944CDA6B69DE6FCD25FD82033E85D5
SHA1:	9484A12D3A8761B095A834A47B871F78E0BC614F
SHA-256:	51149BF10BC1EE646DADE797B266786A440D087EE23C0CADB562931B7AE5D372
SHA-512:	A6F922E9DC7B1F51C3259065C8FE54B30AAA06A2338056754F8E04AF159FA8010AB077EED67D14E0945CC77C38753DDB28EB69EE4E4783704C9A370C0529770D
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x.......tRNS...0b.....Y...a.....!.[...P....d&..O .......'..4..~q.N..k...(.".F...;.r.<.....7$...8e..]).Ai-..........c.y\h...IV......J....t...E./,.{.....T.Q..v^Z....&.L....bKGD.......tIME......9...7....IDAT8.uS.C.Q..o..m.H..<.kKki..he.T.y.T..<C.........s....8?.....4K._...%.e.......W.W....W.CAU.Z...q9.j..K....X.Nxe..B.`.&.......{..@.ZlB.m.h..e{kL.;,.@.Lo.6..h..z.....%..{.0.1P.."..........H....a.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15863
Entropy (8bit):	5.003891335724327
Encrypted:	false
SSDEEP:	384:33p3vY+wRnau0YwKRrsi6meCb2KIg10qtvATHtBf/eZIu+z+nUjC:J3AuYrRrP35IzpNBf//C
MD5:	59E54F72EF9F74FC76029FD45E1A9289
SHA1:	FEE0464ECC2534430000D81CC2046AD1081E410A
SHA-256:	BCA8A4A92B74922E3333630DE0580EB897E42D843E0C8408726AEBF7680EF531
SHA-512:	4AB7FAEA2E3E49214167A32FA72E17A16C6D585AC3D95E3A8BD0EA519CECF139AA769738585B27BD8802D0A32F8364D400EC069AC0ED98717F8DC9CB206953C5
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.1+CommonJS - 2014-09-17. http://jqueryui.com.* Includes: widget.js.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );...} else if (typeof exports === "object") {...// Node/CommonJS:...factory(require("jquery"));...} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Widget 1.11.1. * http://jqueryui.com. . Copyright 2014 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/jQuery.widget/. */...var widget_uuid = 0,..widget_slice = Array.prototype.slice;..$.cleanData = (function( orig ) {..return function( elems ) {...var events, elem, i;...for ( i = 0; (elem = elems[i]) != null; i++ ) {....try {......// Only trigger remove when necessary to save time.....events = $._dat

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	downloaded
Size (bytes):	16410
Entropy (8bit):	5.149743639304422
Encrypted:	false
SSDEEP:	384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOy:kApB5IHtTY5FrX
MD5:	6A3A434A1360CC744341E97DE9177BC6
SHA1:	D110825C3252A677CE8B6FD81CD2EDA0201E4E1B
SHA-256:	4F5B2528815D8B1CD9B68B1A4BB1FE689696F8DCBC2C4A5104343B886EE68828
SHA-512:	A86A62D78D101AA6E8045AE4966604415A808A34D686BA2E0DCD169FA93EA638652B2926FF336186564136973CB3E0870E725CEEDDD23FD8FA40ABD8AA6FFFD0
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/underscore-1.8.3.min.js
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1845
Entropy (8bit):	4.893753384097955
Encrypted:	false
SSDEEP:	48:ngkQppqgR/Q5dE1pdmDsFKv6YNeYZlYyG9yFzL16:nByj1QMwwFKvM8P16
MD5:	8DC41F4DB956C76D89DB6024AF468314
SHA1:	45EFD38B0B0ECBFC7E35E33F39B24429704703C7
SHA-256:	F7B07AB75D629041DFE38A9E1B95F313FCB8C0A25DC6414E7887BAD89C2A587E
SHA-512:	B855F70E1898DFCBB9889291018400C824BF4204502D6BB6A2DF5839E5692E2283E00FB35BA99865F7FA57A79FC66CCB39F1411FDB7B8F1A1EAA9F2B2CD6BDCB
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	if (!String.prototype.startsWith) {. String.prototype.startsWith = function(searchString, position) {. position = position \|\| 0;. return this.indexOf(searchString, position) === position;. };.}..$(document).ready(function(){. $('#form-search').submit(function(e){. query = $('#form-search :input[name=query]').val().replace(/^\s+/,'').replace(/\s+$/,'');. mailbox_id = $('#form-search :input[name=mailbox_id]').val();. if(query != '') {. window.location.href = "/mailbox/"+mailbox_id+"/search/"+encodeURIComponent(query);. }. return false;. });.. $('#form-search .do-search').click(function(){. $('#form-search').submit();. return false;. });.. $('.unavailable').click(function(e){. e.preventDefault();. vex.dialog.alert("This feature isn't available on your plan.");. });.. // initializing vex. vex.defaultOptions.className = 'vex-theme-enchant';.});..(function($){. $.fn.extend({ . highlight: function() {. return this.each(function() {.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	dropped
Size (bytes):	263151
Entropy (8bit):	5.563712949230708
Encrypted:	false
SSDEEP:	3072:b2iax8eulMYeUgD6l/00Rlvol0RQbQwM87uYumklDNsEemtJeN4aN92Q0fxnIH:iipmFUMMli04d7G3BsEemve9N9H0fxnU
MD5:	C40AC6DEB30066AAB9505F3BDB99DEBA
SHA1:	CD624E8B12DCD0A090A0F3114B12DBD45ABC637B
SHA-256:	6859F3646C0172DC2A180C9448C9E4123EA2A9DD6FD3F781A81BF2D538A796CA
SHA-512:	B81BF886C2B9A5CD49D1D9C016FE2D6D77355C7A799141829FADC7582E2AB48E243CAA5C77EC22BC8EDF8249819AD0CF3F1C91E465C8C6E1AEB87229D704598B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	4.966694590660697
Encrypted:	false
SSDEEP:	48:1AJX8prXF5Jfmef+k90DA9sgTWghhgWog/5gL:qJX8pr1vfZf38zgCgDgjgRgL
MD5:	50A5641508F5888F204808D01BB340D6
SHA1:	5AE88105D70DF553BDD24B95D4082FF2CA0E3BF4
SHA-256:	439BD453A6C6966F48EA35C17F361C8E2F6AD4FE7F92BC9DEF322AF850FBCF36
SHA-512:	F97D12E6DE5597FE591A504CD51F9CC6E27F14FA47EEAB433E9D43EE393B666036B9A0068963446F928DFCEB836C64DD8E62929F44F1E2B6A7BC4CCC160AE057
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	..function sfu_request(method, path, data, callbacks) {.. method = method.toLowerCase();.... var request = {.. type: method,.. url: "/api/v1" + path.. };.... if(data) {.. request.data = JSON.stringify(data);.. }.... if($.inArray(method, ["put","post","patch"]) != -1){.. request.contentType = 'application/json; charset=UTF-8'.. };.... if(callbacks == undefined) {.. callbacks = {};.. }.... var ajax = $.ajax(request);.. if(callbacks.success) {.. ajax.done(callbacks.success);.. }.. if(callbacks.always) {.. ajax.always(callbacks.always);.. }.. ajax.fail(function(xhr){.. if(callbacks.fail) {.. callbacks.fail();.. }.. if(xhr.status == 422 && callbacks.invalid) {.. response = JSON.parse(xhr.responseText);.. msg = "";.. _.each(response.errors,function(error){.. msg = msg + error.message + "<br>";.. });.... callbacks.invalid(msg);.. }.. if(xhr.status == 404 && callbacks.notfound) {.. response = JSON.pars

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1588
Entropy (8bit):	5.098455684669689
Encrypted:	false
SSDEEP:	24:2dG5AXxGvO7LfmjKdoU0bSMKU3vEtdhatIhDql0L6OKvHrxgrkjqPQ9qiW01U:cKAXQSfgKU3Wdg+MLZvHNQAgL1aU
MD5:	7D314CE15F90CF269C2EB2883D3F482B
SHA1:	3C2AB3AA79B837E26038321E9DDF97BA3A96AAB7
SHA-256:	56CC3F8163B5AAEC6F9524506906BCB3CBBC10B7158F88E45044790AB6483D51
SHA-512:	8324A30B7BB85082F364909F2DD37C4D169B22092D45CDB34552ADC8BFB2570935D772AC80F74ACBF00901CB70D35CB305DEA7A0AA4EBB439BDA606D126E8AD1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="26px" height="26px" viewBox="0 2 26 26" enable-background="new 0 2 26 26" xml:space="preserve">..<g>...<path fill="#506472" d="M17.244,23.95H8.855c-3.536,0-3.695-3.563-3.754-4.905c-0.102-2.285,0-3.301,0.004-3.343....C5.1,13.471,6.749,11.65,8.855,11.65h8.389c2.084,0,3.656,1.782,3.656,4.145l0,0c0.002,0,0.1,1.278-0.002,3.256....C20.823,20.517,20.646,23.95,17.244,23.95z M8.855,13.45c-1.115,0-1.956,1.008-1.956,2.345c-0.005,0.101-0.096,1.044-0.001,3.17....c0.119,2.664,0.808,3.185,1.957,3.185h8.389c1.281,0,1.732-0.775,1.857-3.19c0.095-1.863,0.002-3.081,0.001-3.094....c-0.003-1.429-0.783-2.416-1.858-2.416H8.855z"/>...<path fill=

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5419
Entropy (8bit):	4.802520040302656
Encrypted:	false
SSDEEP:	96:sxT/m4etFet5etjetuetAsBi6aKrgPrfeGk57T:sxT/m4etFet5etjetuetAn743T
MD5:	CF225C0DC8E435E1317222F4FBEB5DD0
SHA1:	B97F184C6E7B0B186DC90F49D1C793E5074DF5C4
SHA-256:	6CA33FAF21864AC6264C1AD0CC8A6311616347E81635FF6FCF5BAFD6302D971F
SHA-512:	D94AACBA695358EB3443F1EC0133599191AB9977099A1ED1BC6E711311D9D58A1507BDFC22EE9A9B6B438650F71511D28567A103ACE89948FC37C8DD498D0FDB
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/vex-2.3.2/css/vex.css
Preview:	@keyframes vex-fadein {. 0% {. opacity: 0; }.. 100% {. opacity: 1; } }..@-webkit-keyframes vex-fadein {. 0% {. opacity: 0; }.. 100% {. opacity: 1; } }..@-moz-keyframes vex-fadein {. 0% {. opacity: 0; }.. 100% {. opacity: 1; } }..@-ms-keyframes vex-fadein {. 0% {. opacity: 0; }.. 100% {. opacity: 1; } }..@-o-keyframes vex-fadein {. 0% {. opacity: 0; }.. 100% {. opacity: 1; } }..@keyframes vex-fadeout {. 0% {. opacity: 1; }.. 100% {. opacity: 0; } }..@-webkit-keyframes vex-fadeout {. 0% {. opacity: 1; }.. 100% {. opacity: 0; } }..@-moz-keyframes vex-fadeout {. 0% {. opacity: 1; }.. 100% {. opacity: 0; } }..@-ms-keyframes vex-fadeout {. 0% {. opacity: 1; }.. 100% {. opacity: 0; } }..@-o-keyframes vex-fadeout {. 0% {. opacity: 1; }.. 100% {. opacity: 0; } }..@keyframes vex-rotation {. 0% {. transform: rotate(0deg);. -webkit-transform: rotate(0deg);. -moz-transform: rotate(0deg);. -ms-transform: rot

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3853
Entropy (8bit):	7.901425385966232
Encrypted:	false
SSDEEP:	96:wGOp6tRtlyDcGvbPy4w7CgURd/wg8FG59h7DLLpR:qotRtizPy4jgURYKnLz
MD5:	D90817E052945562C249CFF466A2E9EE
SHA1:	F1DB94746C39451BEBE2B3E5242791EE136FB5CA
SHA-256:	254340038F6528895E781EF4E7EB45F3B4278428B1C3D9F7A0D3C535CC32C9BE
SHA-512:	A2A5C35043E2813AE1FF2917FFB6B1246024A36CB2F947166EC24492B58A74E793D1FB7FB59A418A60CEDFACD811BCD2998D1D3BE9D0317EB9DD1CC7DF027AA8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE............(..8..E..S..^..f..l..o..m..g..\..N..>..+.................;.............................................A........!..L..................i........1................"..)................M................h...........0.....t........z...........B.....X.....{..6..........'.....x........@..:....U..k..b.............a..R..j.....\|.....%..............u......p.....q..Z.................................c..<.. .....5......&........3........2..../.......W..G....P...............H.....v.........$.....F................O.....]..?.......}..D........-...........J..T......V........C.........#.............7.....y.....d....`....w..A.......s.....9..~........I.....=..........,..*.._.............4..Y...........r....n..[..e....d....bKGD!.l......tIME......%........IDATx..m@.....P.A.....w{..T.z.C.....#..P/...BU.b4..$.............1..1.U..&..H4.M,M...M.~)p.w.3....w\|

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	5.407882295821421
Encrypted:	false
SSDEEP:	24:2dG5AXxGvO7Lfmj6tCLwR6JZiJIe/AGvcb:cKAXQSfOwR6rqPcb
MD5:	DF9F038B90BFEAD39071F7FC8B7A74EF
SHA1:	B34B2E07CE06553D515BBE5653B97518C63CCB26
SHA-256:	0C33E71E1EB04C9D36CB7927E6C5C4C623130E67CDB7E53740CDFB3F72032DC5
SHA-512:	B0575B5E4DC96E9E184F7DB29F9FA28092BD312A7F881FA0A999D587DA51663F7ABBD97DEEE7226886DD3A87C6BC1949D7C9AF9272B1CA4ADFD25AB65AF05973
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/images/icons/email_m.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="26px" height="26px" viewBox="0 1.5 26 26" enable-background="new 0 1.5 26 26" xml:space="preserve">..<g>...<path fill="#506472" d="M19,21.75H7c-1.654,0-3-1.346-3-3v-8.5c0-1.654,1.346-3,3-3h12c1.654,0,3,1.346,3,3v8.5....C22,20.404,20.654,21.75,19,21.75z M7,9.05c-0.662,0-1.2,0.538-1.2,1.2v8.5c0,0.661,0.538,1.199,1.2,1.199h12....c0.661,0,1.199-0.538,1.199-1.199v-8.5c0-0.662-0.538-1.2-1.199-1.2H7z"/>...<path fill="#506472" d="M13,15.57c-0.626,0-1.253-0.203-1.776-0.609l-6.775-5.25l1.103-1.423l6.775,5.25....c0.396,0.309,0.95,0.308,1.346,0l6.776-5.25l1.102,1.423l-6.775,5.25C14.253,15.367,13.627,15.57,13,15.57z"/>..</g>..</svg>.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3441)
Category:	downloaded
Size (bytes):	3515
Entropy (8bit):	5.097115798789319
Encrypted:	false
SSDEEP:	48:2whqqbnkRpMcXGbjCfJ9bRdJSWK45eDAoDqyTOjko3oqTGEzdByMKb9EterL3XwN:26bkRpN9AA5eEZdBp+Eonm3J
MD5:	79E0E30E2620389ED47E6E578652F5F3
SHA1:	9CA412B4F05AAF16B7C12891232167514DF0A05C
SHA-256:	AC1BEFD2B8919DB3FDDAFF06AF25076877A2183B305520D79A07C0191E08C6C7
SHA-512:	9B0B914E1E356C6DF4FBD39BAA9D846F2822D79789A09AA02E083087F1EAAF16136074E98BEF580C2F0434CD4D8AD54DD0BCC6A865BCC12E68D89AF9615A87B2
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/autosize-3.0.16/dist/autosize.min.js
Preview:	/!..Autosize 3.0.16..license: MIT..http://www.jacklmoore.com/autosize./.!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={exports:{}};t(n.exports,n),e.autosize=n.exports}}(this,function(e,t){"use strict";function n(e){function t(){var t=window.getComputedStyle(e,null);v=t.overflowY,"vertical"===t.resize?e.style.resize="none":"both"===t.resize&&(e.style.resize="horizontal"),p="content-box"===t.boxSizing?-(parseFloat(t.paddingTop)+parseFloat(t.paddingBottom)):parseFloat(t.borderTopWidth)+parseFloat(t.borderBottomWidth),isNaN(p)&&(p=0),s()}function n(t){var n=e.style.width;e.style.width="0px",e.offsetWidth,e.style.width=n,v=t,f&&(e.style.overflowY=t),r()}function o(e){for(var t=[];e&&e.parentNode&&e.parentNode instanceof Element;)e.parentNode.scrollTop&&t.push({node:e.parentNode,scrollTop:e.parentNode.scrollTop}),e=e.parentNode;return t}function r(){var t=e.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1845
Entropy (8bit):	4.893753384097955
Encrypted:	false
SSDEEP:	48:ngkQppqgR/Q5dE1pdmDsFKv6YNeYZlYyG9yFzL16:nByj1QMwwFKvM8P16
MD5:	8DC41F4DB956C76D89DB6024AF468314
SHA1:	45EFD38B0B0ECBFC7E35E33F39B24429704703C7
SHA-256:	F7B07AB75D629041DFE38A9E1B95F313FCB8C0A25DC6414E7887BAD89C2A587E
SHA-512:	B855F70E1898DFCBB9889291018400C824BF4204502D6BB6A2DF5839E5692E2283E00FB35BA99865F7FA57A79FC66CCB39F1411FDB7B8F1A1EAA9F2B2CD6BDCB
Malicious:	false
Reputation:	low
Preview:	if (!String.prototype.startsWith) {. String.prototype.startsWith = function(searchString, position) {. position = position \|\| 0;. return this.indexOf(searchString, position) === position;. };.}..$(document).ready(function(){. $('#form-search').submit(function(e){. query = $('#form-search :input[name=query]').val().replace(/^\s+/,'').replace(/\s+$/,'');. mailbox_id = $('#form-search :input[name=mailbox_id]').val();. if(query != '') {. window.location.href = "/mailbox/"+mailbox_id+"/search/"+encodeURIComponent(query);. }. return false;. });.. $('#form-search .do-search').click(function(){. $('#form-search').submit();. return false;. });.. $('.unavailable').click(function(e){. e.preventDefault();. vex.dialog.alert("This feature isn't available on your plan.");. });.. // initializing vex. vex.defaultOptions.className = 'vex-theme-enchant';.});..(function($){. $.fn.extend({ . highlight: function() {. return this.each(function() {.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9688
Entropy (8bit):	5.262739619019125
Encrypted:	false
SSDEEP:	192:/FAG4tRrRJ/yt936VfRO9rZqorfZWyS/s4E1rwQBKIY15A5pHlbs:ot5RJ/yt9KVfROVlrPSIrwQNY7A5pFw
MD5:	B11BAC18006CFD9B0F7D680259C4E1A4
SHA1:	0B720D00DA15DBC3B7B9B75E33C7F3FB42AEC3F7
SHA-256:	DF79888B918403B45616D5DBA1F4415AF2163E903B2FD69C607BAB98894BE577
SHA-512:	C389EA27A5506DB148562CF84F3CD435716C0760BCB4A93B6DFAB88A08D0091004EC8776D4CE8755431F48703737975647379AF332B918E0181313E3F5D8E3BD
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Enchant</title>..<meta charset="utf-8">..<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">.<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">.<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">.<link rel="manifest" href="/manifest.json">.<meta name="robots" content="noindex">.<meta name="msapplication-TileColor" content="#0291D9">.<meta name="theme-color" content="#4194ca">..<link href="https://fonts.googleapis.com/css?family=Roboto:400,400i,500,500i,700,700i" rel="stylesheet" type="text/css">.<link rel="stylesheet" href="/spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709"/>.<link rel="stylesheet" href="/spa/assets/font-awesome-4.4.0/css/font-awesome.css"/>.<link rel="stylesheet" href="/spa/assets/vex-2.3.2/css/vex.css"/>.<link rel="stylesheet" href="/spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709"/>.<link rel="style

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1782), with no line terminators
Category:	dropped
Size (bytes):	1782
Entropy (8bit):	5.681008957395856
Encrypted:	false
SSDEEP:	48:r1CTETxrGoWBl9rGHE3hw3ohs3ZuYcdaaWBz1kHfmW:paETxha96EsoYkaaWBofmW
MD5:	0E0645F8B1C2B9E45470ADD2DF1214B4
SHA1:	6FBEA5312AEE286AB3998612C9B5B4A13553C1E9
SHA-256:	49416531519583E597DCCC3856DA2FA093B5E739BAF9FDA442B7047309E7F51C
SHA-512:	72174D6369CB2357C5E4D9516599B8D5B8EEB8674ECAA2DCB6DAEDD48A1F1E4290AFB37C05F4487E2E72CAAB7CFF38077210666DD7968D910005326894F0B30F
Malicious:	false
Reputation:	low
Preview:	"use strict";jQuery.base64=(function($){var _PADCHAR="=",_ALPHA="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",_VERSION="1.0";function _getbyte64(s,i){var idx=_ALPHA.indexOf(s.charAt(i));if(idx===-1){throw"Cannot decode base64"}return idx}function _decode(s){var pads=0,i,b10,imax=s.length,x=[];s=String(s);if(imax===0){return s}if(imax%4!==0){throw"Cannot decode base64"}if(s.charAt(imax-1)===_PADCHAR){pads=1;if(s.charAt(imax-2)===_PADCHAR){pads=2}imax-=4}for(i=0;i<imax;i+=4){b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12)\|(_getbyte64(s,i+2)<<6)\|_getbyte64(s,i+3);x.push(String.fromCharCode(b10>>16,(b10>>8)&255,b10&255))}switch(pads){case 1:b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12)\|(_getbyte64(s,i+2)<<6);x.push(String.fromCharCode(b10>>16,(b10>>8)&255));break;case 2:b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12);x.push(String.fromCharCode(b10>>16));break}return x.join("")}function _getbyte(s,i){var x=s.charCodeAt(i);if(x>255){throw"INVALID_CHARACTER_ERR: D

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3994
Entropy (8bit):	4.723234300437612
Encrypted:	false
SSDEEP:	96:CXQSf0+vRFvMxYUqbPkk84ovtqjkjCMeILF:WQAVvDve6Pkk84ovtQk/F
MD5:	00042AC074D2E8160B1FDA2ECC42F2A2
SHA1:	B3B2EB185AA47157A8EC89946DFEC63A32BCA980
SHA-256:	766F8E2061644EA773B12848243C233676C1E53FA03998E07E0BC0F4DA8EF751
SHA-512:	D58239E37B9FE41A40FD53CB789FB4D722010B09819EF8C8FFD2C093AE30E126146F78DF4AE353C0D03574CF0AAC3798AD3C031FB9FC57CF35EADC8AB1FCA775
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="955.573px" height="200px" viewBox="0 0 955.573 200" enable-background="new 0 0 955.573 200" xml:space="preserve">..<g>...<path fill="#213542" d="M348.449,108.896h-73.292c3.029,15.143,16.153,21.805,31.498,21.805c11.509,0,21.806-4.239,29.478-9.691....l6.461,17.366c-2.625,2.218-15.345,11.709-36.343,11.709c-33.919,0-50.879-22.814-50.879-50.073....c0-27.66,18.574-50.071,48.254-50.071c25.643,0,45.429,18.977,45.429,50.475C349.054,102.436,348.852,106.271,348.449,108.896z.... M329.269,91.128c-0.404-9.488-8.077-21.807-26.45-21.807c-17.768,0-27.257,12.318-27.662,21.807H329.269z"/>...<path fill="#213542" d="M455.917,92.743v55.727h-1

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3441)
Category:	dropped
Size (bytes):	3515
Entropy (8bit):	5.097115798789319
Encrypted:	false
SSDEEP:	48:2whqqbnkRpMcXGbjCfJ9bRdJSWK45eDAoDqyTOjko3oqTGEzdByMKb9EterL3XwN:26bkRpN9AA5eEZdBp+Eonm3J
MD5:	79E0E30E2620389ED47E6E578652F5F3
SHA1:	9CA412B4F05AAF16B7C12891232167514DF0A05C
SHA-256:	AC1BEFD2B8919DB3FDDAFF06AF25076877A2183B305520D79A07C0191E08C6C7
SHA-512:	9B0B914E1E356C6DF4FBD39BAA9D846F2822D79789A09AA02E083087F1EAAF16136074E98BEF580C2F0434CD4D8AD54DD0BCC6A865BCC12E68D89AF9615A87B2
Malicious:	false
Reputation:	low
Preview:	/!..Autosize 3.0.16..license: MIT..http://www.jacklmoore.com/autosize./.!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={exports:{}};t(n.exports,n),e.autosize=n.exports}}(this,function(e,t){"use strict";function n(e){function t(){var t=window.getComputedStyle(e,null);v=t.overflowY,"vertical"===t.resize?e.style.resize="none":"both"===t.resize&&(e.style.resize="horizontal"),p="content-box"===t.boxSizing?-(parseFloat(t.paddingTop)+parseFloat(t.paddingBottom)):parseFloat(t.borderTopWidth)+parseFloat(t.borderBottomWidth),isNaN(p)&&(p=0),s()}function n(t){var n=e.style.width;e.style.width="0px",e.offsetWidth,e.style.width=n,v=t,f&&(e.style.overflowY=t),r()}function o(e){for(var t=[];e&&e.parentNode&&e.parentNode instanceof Element;)e.parentNode.scrollTop&&t.push({node:e.parentNode,scrollTop:e.parentNode.scrollTop}),e=e.parentNode;return t}function r(){var t=e.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (382)
Category:	downloaded
Size (bytes):	25965
Entropy (8bit):	5.010926684303138
Encrypted:	false
SSDEEP:	384:ekZSvhAAunDhtXz+53iQ7vj20MdbfiMXeT0Zejj1oW+xVZWN7txRLRTTngp0:eZ6A0DPM3iQTafruQZeSWswZv
MD5:	6E9D3B0DA74F2A4A7042B494CDAA7C2E
SHA1:	06CEF196733A710E77AD7E386CED6963F092DC55
SHA-256:	1AA08CB3C7AA70D268D24D59C374C14AF7BD08E0AF8C85F8E4F60A2651F4BAB5
SHA-512:	09622102B138D4705B26608A35A23EA073EDF2BF7819BFAA1ADCBA294C9F9784FC383B2A868C889B63631B357B8ECD5C6EFA947EB9A29E30A3C543CB8775A7EC
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/fc-1.0.6/lib/fc.js
Preview:	;(function () {..'use strict';.../*.. @preserve FastClick: polyfill to remove click delays on browsers with touch UIs... .. @codingstandard ftlabs-jsv2.. * @copyright The Financial Times Limited [All Rights Reserved].. * @license MIT License (see LICENSE.txt).. /.../jslint browser:true, node:true/../global define, Event, Node/..../.. Instantiate fast-clicking listeners on the specified layer... .. @constructor.. * @param {Element} layer The layer to listen on.. * @param {Object} [options={}] The options to override the defaults.. /..function FastClick(layer, options) {...var oldOnClick;....options = options \|\| {};..../... Whether a click is currently being tracked.... ... @type boolean... /...this.trackingClick = false;...../... Timestamp for when click tracking started.... ... @type number... /...this.trackingClickStart = 0;...../... The element being tracked for a click.... ... @type EventTarget... /...this.targetElement = null;...../...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3664)
Category:	downloaded
Size (bytes):	3883
Entropy (8bit):	5.279418316102536
Encrypted:	false
SSDEEP:	96:+MU7h+wm3e0qE92DcHcv4VIZNruPLuxJlMZau:dwmOc2g8gWZVN+
MD5:	E39D476EC5ADBEFD5584A507BE389B50
SHA1:	D3D4AB4D820DDB0D056016049A11B85A67FDF988
SHA-256:	4EB5E660F3360812175D505828973A40B5008160D62825D5AEA59211CAE04750
SHA-512:	83FFACD9E837DE8F181D5AF8857D077FB3FC641D7546611D5BA6713289CD15E10569351BFDFD4D645FB1641FEF0908D950F4B9BAB07DEB8AE9D1A337634A36A9
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/assets/modernizr/modernizr.custom.js
Preview:	/* Modernizr 2.6.2 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-teststyles-testprop-testallprops-domprefixes-forms_placeholder. */.;window.Modernizr=function(a,b,c){function y(a){i.cssText=a}function z(a,b){return y(prefixes.join(a+";")+(b\|\|""))}function A(a,b){return typeof a===b}function B(a,b){return!!~(""+a).indexOf(b)}function C(a,b){for(var d in a){var e=a[d];if(!B(e,"-")&&i[e]!==c)return b=="pfx"?e:!0}return!1}function D(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:A(f,"function")?f.bind(d\|\|b):f}return!1}function E(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+n.join(d+" ")+d).split(" ");return A(b,"string")\|\|A(b,"undefined")?C(e,b):(e=(a+" "+o.join(d+" ")+d).split(" "),D(e,b,c))}function F(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)r[c[d]]=c[d]in j;return r.list&&(r.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),r}("autocomplete autofo

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	63354
Entropy (8bit):	4.0047267398816535
Encrypted:	false
SSDEEP:	768:7k9achs9GSzv5OhS4WNWzC8kNa9cxory0gnDFLlVGkI:qLCzviSYzCO9OOCFLlVs
MD5:	E7EFEE9E288DB58AE9FCF835CC5A0A2E
SHA1:	30E69DB4A8EEECBDCB16A2118B691559396556DC
SHA-256:	ED6CB89D0247B04E2B53FED1FAD67B36756CC71AFBE289965BE57D5C6F418744
SHA-512:	812F72D956EEB9A7513F4745109913874CC7E9B80E17D68D5D82E821927626EF57F45749E792F5EFC19D8A7518CE036AF60A3F16EA81292077FE19F9F66A3024
Malicious:	false
Reputation:	low
Preview:	/. jQuery File Upload Plugin 5.42.3. * https://github.com/blueimp/jQuery-File-Upload. . Copyright 2010, Sebastian Tschan. * https://blueimp.net. . Licensed under the MIT license:. * http://www.opensource.org/licenses/MIT. /../ jshint nomen:false /./ global define, require, window, document, location, Blob, FormData */..(function (factory) {. 'use strict';. if (typeof define === 'function' && define.amd) {. // Register as an anonymous AMD module:. define([. 'jquery',. 'jquery.ui.widget'. ], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS:. factory(. require('jquery'),. require('./vendor/jquery.ui.widget'). );. } else {. // Browser globals:. factory(window.jQuery);. }.}(function ($) {. 'use strict';.. // Detect file input support, based on. // http://viljamis.com/blog/2012/file-upload-support-on-mobile/. $.support.fileInput = !

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	64547
Entropy (8bit):	4.785348874861971
Encrypted:	false
SSDEEP:	1536:vJ1+doO8EaQ/4CZbEDFSN33Nhy8cULm5VDO4SoyfP:bcobfTCyDFSJdpBi5J8fP
MD5:	F14D35F1BD6E1AE934B2131D2E56E026
SHA1:	6B6E1F82F4AE94D2096EDCDC5807C52D212B88E8
SHA-256:	0A9F0A86BF2F900E60D2C208AE989B453AF24CEF0EDD52BF49162BB0EAE673A5
SHA-512:	C253A86612CE7FD8254F1E71A762B3D651B56407692002E79CC9C3219DDA396AD04B30ED6EFF58E2823CF77A7E67437981FF78B2918855CFFEC690EDCE44F06B
Malicious:	false
Reputation:	low
Preview:	/* ===================================================. * bootstrap-transition.js v2.3.1. * http://twitter.github.com/bootstrap/javascript.html#transitions. * ===================================================. * Copyright 2012 Twitter, Inc.. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. * ========================================================== /...!function ($) {.. "use strict"; // jshint ;_;... / CSS TRANSITION SUPPORT (http://www.modernizr.com/). * ==========================

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1782), with no line terminators
Category:	downloaded
Size (bytes):	1782
Entropy (8bit):	5.681008957395856
Encrypted:	false
SSDEEP:	48:r1CTETxrGoWBl9rGHE3hw3ohs3ZuYcdaaWBz1kHfmW:paETxha96EsoYkaaWBofmW
MD5:	0E0645F8B1C2B9E45470ADD2DF1214B4
SHA1:	6FBEA5312AEE286AB3998612C9B5B4A13553C1E9
SHA-256:	49416531519583E597DCCC3856DA2FA093B5E739BAF9FDA442B7047309E7F51C
SHA-512:	72174D6369CB2357C5E4D9516599B8D5B8EEB8674ECAA2DCB6DAEDD48A1F1E4290AFB37C05F4487E2E72CAAB7CFF38077210666DD7968D910005326894F0B30F
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/jquery.base64.min.js
Preview:	"use strict";jQuery.base64=(function($){var _PADCHAR="=",_ALPHA="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",_VERSION="1.0";function _getbyte64(s,i){var idx=_ALPHA.indexOf(s.charAt(i));if(idx===-1){throw"Cannot decode base64"}return idx}function _decode(s){var pads=0,i,b10,imax=s.length,x=[];s=String(s);if(imax===0){return s}if(imax%4!==0){throw"Cannot decode base64"}if(s.charAt(imax-1)===_PADCHAR){pads=1;if(s.charAt(imax-2)===_PADCHAR){pads=2}imax-=4}for(i=0;i<imax;i+=4){b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12)\|(_getbyte64(s,i+2)<<6)\|_getbyte64(s,i+3);x.push(String.fromCharCode(b10>>16,(b10>>8)&255,b10&255))}switch(pads){case 1:b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12)\|(_getbyte64(s,i+2)<<6);x.push(String.fromCharCode(b10>>16,(b10>>8)&255));break;case 2:b10=(_getbyte64(s,i)<<18)\|(_getbyte64(s,i+1)<<12);x.push(String.fromCharCode(b10>>16));break}return x.join("")}function _getbyte(s,i){var x=s.charCodeAt(i);if(x>255){throw"INVALID_CHARACTER_ERR: D

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HSinYn:xY
MD5:	F7D59D3BE131AD16CC24D036112D9991
SHA1:	635B8DB4843997BA0331C4C0EDDD2601F4F69698
SHA-256:	57CCDE9F4BE6E3F510E37BEFB67BA272AB6D263980802EA18C18F3B78B3DAB32
SHA-512:	1446489C33DA980A237731A984D9FD017475CC0BA4C022DE45571A1AD4F295860717712DB60E6EA3E1F79ABB0C8EB7F1B15C5FB05E436D170E94B8740DFBF595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAm6LCGhSQun1RIFDXhvEhk=?alt=proto
Preview:	CgkKBw14bxIZGgA=

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13147
Entropy (8bit):	5.426216787960388
Encrypted:	false
SSDEEP:	384:yiRCiTiIiCni8iHi2FACFnFBFdnF9F2FwvdRCvCvsvwnvOv7v5PeD4CdFFwmBYHM:R3erX/CCfFTHvCWdKoCYUj5mD4EFFwO9
MD5:	7FA2ACAD65DE8E30ED0F1D86E8269FCE
SHA1:	CD9FAE8E43A81DA6FB7AAF4354B56E19DA48C9E1
SHA-256:	3291F002BAB4C659296121D4107CD9C55E0B3D972F46EBB161F573D0B276C09C
SHA-512:	EB9F9DBB814D756F547D664441F7B1754D5D8E3E2F6FF2C9244DF2D780C5B27E03F672BF228C5510E40BF8D7D92AEF4249029C526667DA72189A7573EAF003D6
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,400i,500,500i,700,700i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1565
Entropy (8bit):	6.586791720700469
Encrypted:	false
SSDEEP:	24:hXXGfIbbNj45CDOmiq6eopJypxmQQyRjIRNKzQ3IEMwPEEfl9:hnb5j454O6dFlj0NKREtTT
MD5:	85944CDA6B69DE6FCD25FD82033E85D5
SHA1:	9484A12D3A8761B095A834A47B871F78E0BC614F
SHA-256:	51149BF10BC1EE646DADE797B266786A440D087EE23C0CADB562931B7AE5D372
SHA-512:	A6F922E9DC7B1F51C3259065C8FE54B30AAA06A2338056754F8E04AF159FA8010AB077EED67D14E0945CC77C38753DDB28EB69EE4E4783704C9A370C0529770D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x.......tRNS...0b.....Y...a.....!.[...P....d&..O .......'..4..~q.N..k...(.".F...;.r.<.....7$...8e..]).Ai-..........c.y\h...IV......J....t...E./,.{.....T.Q..v^Z....&.L....bKGD.......tIME......9...7....IDAT8.uS.C.Q..o..m.H..<.kKki..he.T.y.T..<C.........s....8?.....4K._...%.e.......W.W....W.CAU.Z...q9.j..K....X.Nxe..B.`.&.......{..@.ZlB.m.h..e{kL.;,.@.Lo.6..h..z.....%..{.0.1P.."..........H....a.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7149)
Category:	dropped
Size (bytes):	7184
Entropy (8bit):	5.223240579931705
Encrypted:	false
SSDEEP:	192:WUF8uUFzkyjrIZwAuNY76wWjIWHiHj05QNFe3:WUF8luvwAgYEX5aFe3
MD5:	C9F77CB11959B4EF266CEED650987A8B
SHA1:	9C53AE90048CE6060BA599ECDD36D818C2A187B1
SHA-256:	A5482267B105BCAEB5B79B7B271BCAA6F7252C39F541DE23EA6380F897BD5D79
SHA-512:	EF52538D27719ED9E0B8B942545DB269799202AC96A98DAF3F25A8FD18EC5DD9678B926E23753290123296D4DE69B1A27B55012AE9A4AB48BD65E3AADFB03BBE
Malicious:	false
Reputation:	low
Preview:	/! vex.js, vex.dialog.js 2.3.2 /.(function(){var a;a=function(a){var b,c;return b=!1,a(function(){var d;return d=(document.body\|\|document.documentElement).style,b=void 0!==d.animation\|\|void 0!==d.WebkitAnimation\|\|void 0!==d.MozAnimation\|\|void 0!==d.MsAnimation\|\|void 0!==d.OAnimation,a(window).bind("keyup.vex",function(a){return 27===a.keyCode?c.closeByEscape():void 0})}),c={globalID:1,animationEndEvent:"animationend webkitAnimationEnd mozAnimationEnd MSAnimationEnd oanimationend",baseClassNames:{vex:"vex",content:"vex-content",overlay:"vex-overlay",close:"vex-close",closing:"vex-closing",open:"vex-open"},defaultOptions:{content:"",showCloseButton:!0,escapeButtonCloses:!0,overlayClosesOnClick:!0,appendLocation:"body",className:"",css:{},overlayClassName:"",overlayCSS:{},contentClassName:"",contentCSS:{},closeClassName:"",closeCSS:{}},open:function(b){return b=a.extend({},c.defaultOptions,b),b.id=c.globalID,c.globalID+=1,b.$vex=a("<div>").addClass(c.baseClassNames.vex).addClass(b.class

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32017)
Category:	downloaded
Size (bytes):	34737
Entropy (8bit):	5.494646993876981
Encrypted:	false
SSDEEP:	768:NlQ7JIzRZ1jnWZqPPD0JvphaCSN2nBCPD:NlFjnVPL0tBS+Cr
MD5:	85E5D41EB9C451C16D4E784AEC13D948
SHA1:	851E2DF2ACD5F0BC4EF10FCF2F50C17F7AA09C1F
SHA-256:	0A3BB1E382060C6999C26FAAC38AED7E3D6CC03F7376A9A36B881A7E5BA923CA
SHA-512:	97B8E880C388E9959924463B95112315D42E9B8EB2DBE929A7F9A76C9C7B3BE8B3CA63BD7868CBE98E28EDC109341768BA1547A6D8B659DEFD43A6888CFC31B5
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/moment-2.9.0.min.js
Preview:	//! moment.js.//! version : 2.9.0.//! authors : Tim Wood, Iskren Chernev, Moment.js contributors.//! license : MIT.//! momentjs.com.(function(a){function b(a,b,c){switch(arguments.length){case 2:return null!=a?a:b;case 3:return null!=a?a:null!=b?b:c;default:throw new Error("Implement me")}}function c(a,b){return Bb.call(a,b)}function d(){return{empty:!1,unusedTokens:[],unusedInput:[],overflow:-2,charsLeftOver:0,nullInput:!1,invalidMonth:null,invalidFormat:!1,userInvalidated:!1,iso:!1}}function e(a){vb.suppressDeprecationWarnings===!1&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+a)}function f(a,b){var c=!0;return o(function(){return c&&(e(a),c=!1),b.apply(this,arguments)},b)}function g(a,b){sc[a]\|\|(e(b),sc[a]=!0)}function h(a,b){return function(c){return r(a.call(this,c),b)}}function i(a,b){return function(c){return this.localeData().ordinal(a.call(this,c),b)}}function j(a,b){var c,d,e=12*(b.year()-a.year())+(b.month()-a.month()),f=a.clone().add(e,"mo

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	10729
Entropy (8bit):	3.798660094659296
Encrypted:	false
SSDEEP:	192:bVNlAOkhBIskbma7g+0LmU6/NfSmvN+wCniIy4:+9f+18Df
MD5:	75D1D0238D2DFE2C37647AC5A5CCF685
SHA1:	578E5ED0172208210B7A3BBD6C766283CC0ABC94
SHA-256:	A3031B21DB743EA04174E256C8E9E2B0C976D4D14389463246BAD5EEC8DF083A
SHA-512:	619FD0A53201FAE465388D73EC75A0229446B7A4DB2B1EE6FF8476C8234522D87AEBDC87C38945F1999C5AFEA38D448C1976A7193D4A2A3BFCB55B1E1732A74A
Malicious:	false
Reputation:	low
Preview:	/. jQuery Iframe Transport Plugin 1.8.3. * https://github.com/blueimp/jQuery-File-Upload. . Copyright 2011, Sebastian Tschan. * https://blueimp.net. . Licensed under the MIT license:. * http://www.opensource.org/licenses/MIT. /../ global define, require, window, document */..(function (factory) {. 'use strict';. if (typeof define === 'function' && define.amd) {. // Register as an anonymous AMD module:. define(['jquery'], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS:. factory(require('jquery'));. } else {. // Browser globals:. factory(window.jQuery);. }.}(function ($) {. 'use strict';.. // Helper variable to create unique names for the transport iframes:. var counter = 0;.. // The iframe transport accepts four additional options:. // options.fileInput: a jQuery collection of file input fields. // options.paramName: the parameter name for the file form data,. // overrides t

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1194)
Category:	downloaded
Size (bytes):	6210
Entropy (8bit):	4.77950614028843
Encrypted:	false
SSDEEP:	192:8lTUyJKqy9a5POcyeNy5jdl3qTcnhYajD0n9z7EKySdpRrfzsR7T:EMdB
MD5:	ED8B370AF90222ADA2709FECC368E354
SHA1:	39AD70B07918180DF1E7AE8439B937004B0D7E91
SHA-256:	D6C7A51C6FF3794B09D774A522962751BEDB8884F350E71A940F16AA4681938B
SHA-512:	8A3F1B3CC77FD94700AAE4AE81711B90E32754DFEE6C68E501C21113E494E77E9F6D7C88E695280274E18CF6FC8A8DD6644A96CCC8A9310E5D135CF432CD1C96
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	body.vex-open {. overflow: auto;.}..vex.vex-theme-enchant {. padding-top: 160px;. padding-bottom: 160px; }. .vex .vex-overlay {. background-color: rgba(0, 0, 0, 0.8);. }. .vex.vex-theme-enchant .vex-content {. /font-family: "Helvetica Neue", sans-serif;/. background: #fff;. color: #444;. padding: 1em 1.5em;. position: relative;. margin: 0 auto;. max-width: 100%;. width: 450px;. font-size: 1.1em;. line-height: 1.5em;. border-radius: 6px; }. .vex.vex-theme-enchant .vex-content h1, .vex.vex-theme-enchant .vex-content h2, .vex.vex-theme-enchant .vex-content h3, .vex.vex-theme-enchant .vex-content h4, .vex.vex-theme-enchant .vex-content h5, .vex.vex-theme-enchant .vex-content h6, .vex.vex-theme-enchant .vex-content p, .vex.vex-theme-enchant .vex-content ul, .vex.vex-theme-enchant .vex-content li {. color: inherit; }. .vex.vex-theme-enchant .vex-close {. position: absolute;. top: 0;. right: 0;. cursor: pointer; }. .vex.vex-t

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with very long lines (1831)
Category:	dropped
Size (bytes):	179266
Entropy (8bit):	5.021277570452052
Encrypted:	false
SSDEEP:	1536:uZsv1Ovibtr3w2CQC1/XoJlOdq1LA/Wh0X5JWhYzx5koES8vVJUl893Fe9peS1Um:IsvcMVCQ2XotQmAZGih1E/C4QEhRhdgl
MD5:	3A102A97671A524DC588FB10700EAD22
SHA1:	C3FA2285139993222644FE4EE6A28459F7D27BFE
SHA-256:	65A7EB3BC65711160EEFDE13C7584F68071D71735950D997B9F5CE49ED07C63F
SHA-512:	3109048F16D9BF3B384D7F044B8FED4C8C9A61DB43949CD5A1C9CFA341A8CAC4D1D230A6360D0FDA2B3BBAAA42A16C66A12F57F38083573B968190FF47F436A1
Malicious:	false
Reputation:	low
Preview:	/**!.. @license. handlebars v4.7.6..Copyright (C) 2011-2019 by Yehuda Katz..Permission is hereby granted, free of charge, to any person obtaining a copy.of this software and associated documentation files (the "Software"), to deal.in the Software without restriction, including without limitation the rights.to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.copies of the Software, and to permit persons to whom the Software is.furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in.all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER.LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARI

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	4.213412906092939
Encrypted:	false
SSDEEP:	12:jWe8WgNgBU8eJh0NIgB86jN8YRUcQDTxK:jj8H8esXjCYR2DTxK
MD5:	6D61B59B5ED960F17C8F7A8DD6D04EF6
SHA1:	1E9830E3AC211E2EA3BFB694DFCC4A29BFAB9E80
SHA-256:	4CFE18EACF4DE173FA62328B21E7BA7FF61DBEF417B43E5B15D530BC16D6BC0D
SHA-512:	17E3DE434D6082B8606E5B973D9F2C6A5C8777542EBA636EA7F59CEB79AC2CE00EC8EB8D760C87C148D288DF4DB3562F78CA579EBEEBEE2E7EF58E8B65C0615B
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/manifest.json
Preview:	{. "name": "Enchant",. "short_name": "Enchant",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#4194ca",. "background_color": "#ffffff",. "display": "standalone",. "start_url": "/?source=pwa",. "scope": "/".}.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11248
Entropy (8bit):	5.055661350472075
Encrypted:	false
SSDEEP:	192:2LfFA/yTMTpOFKEKl5F6r179gMFoqUtsTk7M/GJDq:2LfF9gTpOFKH/F6wMFht/z
MD5:	E6AB111A0CDEFD5EC53683331D858E4E
SHA1:	560663A58A1D3D7993F07F67F16B5EBCA7B57796
SHA-256:	3C22E9643C935F4B83BF1EA1FDE71AC088E852B1F56C98454DBE3A1535810851
SHA-512:	DD540B7F952C90C9EF46FC0673348E4E844459149CE45DD7967887E7B3629710C821DE6CE8CED1185E2B87806E330BEF55F00CEC951FD1F98FD6CCBA16236A6A
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	/* GLOBAL */.form {. margin-bottom: 0;.}.body {. background: #e2e6e9;. background-repeat: repeat;. font-family: 'Roboto', helvetica, arial, sans-serif;. color: #6f8291;.}.input, button, select, textarea {. font-family: 'Roboto', helvetica, arial, sans-serif;.}.body, h1,h2,h3,h4,h5,div,p,span {. line-height: 1.2em;.}.h1 {. font-size: 2em;. font-weight: normal;. margin-bottom: 15px;. color: #4A7A92;.}.h2 {. font-size: 1.8em;. font-weight: normal;. margin-bottom: 10px;. color: #6c9cb4;.}.a{ . color: #4194ca;.}.a:hover {. color: #4194ca;.}.code {. color: #333;.}.textarea.no-resize {. resize: none;.}..form-horizontal .help-block {. color: #7d8e9c;. font-size: 13px;. margin-top: 4px;.}..form-actions {. background-color: white;. margin-bottom: 0;.}..header {. margin-top: 10px;. margin-bottom: 20px;.}..footer {. margin-top: 10px;. padding-top: 10px;. color: #888888;. margin-bottom: 10px;. text-align: right;.}..footer a {. color: #888;.}..header h1 {. margin-bot

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15863
Entropy (8bit):	5.003891335724327
Encrypted:	false
SSDEEP:	384:33p3vY+wRnau0YwKRrsi6meCb2KIg10qtvATHtBf/eZIu+z+nUjC:J3AuYrRrP35IzpNBf//C
MD5:	59E54F72EF9F74FC76029FD45E1A9289
SHA1:	FEE0464ECC2534430000D81CC2046AD1081E410A
SHA-256:	BCA8A4A92B74922E3333630DE0580EB897E42D843E0C8408726AEBF7680EF531
SHA-512:	4AB7FAEA2E3E49214167A32FA72E17A16C6D585AC3D95E3A8BD0EA519CECF139AA769738585B27BD8802D0A32F8364D400EC069AC0ED98717F8DC9CB206953C5
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js
Preview:	/! jQuery UI - v1.11.1+CommonJS - 2014-09-17. http://jqueryui.com.* Includes: widget.js.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );...} else if (typeof exports === "object") {...// Node/CommonJS:...factory(require("jquery"));...} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Widget 1.11.1. * http://jqueryui.com. . Copyright 2014 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/jQuery.widget/. */...var widget_uuid = 0,..widget_slice = Array.prototype.slice;..$.cleanData = (function( orig ) {..return function( elems ) {...var events, elem, i;...for ( i = 0; (elem = elems[i]) != null; i++ ) {....try {......// Only trigger remove when necessary to save time.....events = $._dat

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	64547
Entropy (8bit):	4.785348874861971
Encrypted:	false
SSDEEP:	1536:vJ1+doO8EaQ/4CZbEDFSN33Nhy8cULm5VDO4SoyfP:bcobfTCyDFSJdpBi5J8fP
MD5:	F14D35F1BD6E1AE934B2131D2E56E026
SHA1:	6B6E1F82F4AE94D2096EDCDC5807C52D212B88E8
SHA-256:	0A9F0A86BF2F900E60D2C208AE989B453AF24CEF0EDD52BF49162BB0EAE673A5
SHA-512:	C253A86612CE7FD8254F1E71A762B3D651B56407692002E79CC9C3219DDA396AD04B30ED6EFF58E2823CF77A7E67437981FF78B2918855CFFEC690EDCE44F06B
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	/* ===================================================. * bootstrap-transition.js v2.3.1. * http://twitter.github.com/bootstrap/javascript.html#transitions. * ===================================================. * Copyright 2012 Twitter, Inc.. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. * ========================================================== /...!function ($) {.. "use strict"; // jshint ;_;... / CSS TRANSITION SUPPORT (http://www.modernizr.com/). * ==========================

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	63354
Entropy (8bit):	4.0047267398816535
Encrypted:	false
SSDEEP:	768:7k9achs9GSzv5OhS4WNWzC8kNa9cxory0gnDFLlVGkI:qLCzviSYzCO9OOCFLlVs
MD5:	E7EFEE9E288DB58AE9FCF835CC5A0A2E
SHA1:	30E69DB4A8EEECBDCB16A2118B691559396556DC
SHA-256:	ED6CB89D0247B04E2B53FED1FAD67B36756CC71AFBE289965BE57D5C6F418744
SHA-512:	812F72D956EEB9A7513F4745109913874CC7E9B80E17D68D5D82E821927626EF57F45749E792F5EFC19D8A7518CE036AF60A3F16EA81292077FE19F9F66A3024
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js
Preview:	/. jQuery File Upload Plugin 5.42.3. * https://github.com/blueimp/jQuery-File-Upload. . Copyright 2010, Sebastian Tschan. * https://blueimp.net. . Licensed under the MIT license:. * http://www.opensource.org/licenses/MIT. /../ jshint nomen:false /./ global define, require, window, document, location, Blob, FormData */..(function (factory) {. 'use strict';. if (typeof define === 'function' && define.amd) {. // Register as an anonymous AMD module:. define([. 'jquery',. 'jquery.ui.widget'. ], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS:. factory(. require('jquery'),. require('./vendor/jquery.ui.widget'). );. } else {. // Browser globals:. factory(window.jQuery);. }.}(function ($) {. 'use strict';.. // Detect file input support, based on. // http://viljamis.com/blog/2012/file-upload-support-on-mobile/. $.support.fileInput = !

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10729
Entropy (8bit):	3.798660094659296
Encrypted:	false
SSDEEP:	192:bVNlAOkhBIskbma7g+0LmU6/NfSmvN+wCniIy4:+9f+18Df
MD5:	75D1D0238D2DFE2C37647AC5A5CCF685
SHA1:	578E5ED0172208210B7A3BBD6C766283CC0ABC94
SHA-256:	A3031B21DB743EA04174E256C8E9E2B0C976D4D14389463246BAD5EEC8DF083A
SHA-512:	619FD0A53201FAE465388D73EC75A0229446B7A4DB2B1EE6FF8476C8234522D87AEBDC87C38945F1999C5AFEA38D448C1976A7193D4A2A3BFCB55B1E1732A74A
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js
Preview:	/. jQuery Iframe Transport Plugin 1.8.3. * https://github.com/blueimp/jQuery-File-Upload. . Copyright 2011, Sebastian Tschan. * https://blueimp.net. . Licensed under the MIT license:. * http://www.opensource.org/licenses/MIT. /../ global define, require, window, document */..(function (factory) {. 'use strict';. if (typeof define === 'function' && define.amd) {. // Register as an anonymous AMD module:. define(['jquery'], factory);. } else if (typeof exports === 'object') {. // Node/CommonJS:. factory(require('jquery'));. } else {. // Browser globals:. factory(window.jQuery);. }.}(function ($) {. 'use strict';.. // Helper variable to create unique names for the transport iframes:. var counter = 0;.. // The iframe transport accepts four additional options:. // options.fileInput: a jQuery collection of file input fields. // options.paramName: the parameter name for the file form data,. // overrides t

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4973
Entropy (8bit):	5.250815689719491
Encrypted:	false
SSDEEP:	96:YSKYAG4tRraQJ/yt936VfRO9rZezrWdC8KLk7wD9Uucz:/FAG4tRrRJ/yt936VfRO9rZqorf7wJ8z
MD5:	02587BCCBFD759826F6315A09F904B29
SHA1:	48978023A9E25F459C77D83E33C5C8CD3453EFA3
SHA-256:	C497FCE308EF04D78C80AB2AD846E71F08F447B97FC046127B47CA16FCC561E7
SHA-512:	BBC2FED63EC2FD9E6E8429B5DF06DD55907A4E1FC2CA47F8BE934643CAC8D4DD41CD5A39B33DEAD804DA1F9DEB0B40264BD71FA633DECD6D87D194F968098B77
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/auth/forget
Preview:	<!DOCTYPE html>.<html>.<head>.<title>Enchant</title>..<meta charset="utf-8">..<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">.<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">.<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">.<link rel="manifest" href="/manifest.json">.<meta name="robots" content="noindex">.<meta name="msapplication-TileColor" content="#0291D9">.<meta name="theme-color" content="#4194ca">..<link href="https://fonts.googleapis.com/css?family=Roboto:400,400i,500,500i,700,700i" rel="stylesheet" type="text/css">.<link rel="stylesheet" href="/spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709"/>.<link rel="stylesheet" href="/spa/assets/font-awesome-4.4.0/css/font-awesome.css"/>.<link rel="stylesheet" href="/spa/assets/vex-2.3.2/css/vex.css"/>.<link rel="stylesheet" href="/spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709"/>.<link rel="style

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3483), with no line terminators
Category:	dropped
Size (bytes):	3483
Entropy (8bit):	5.517505801817892
Encrypted:	false
SSDEEP:	96:3X82Y8vdR/MnVBohonWwtRlLxNKqSoDs2fi7T:82V1+n8mWiL1LSqsR7T
MD5:	E1DE51F3FB346CD1C301254EFE98411A
SHA1:	478002233211E9897158C7BD5F9ED61F2B83B5C4
SHA-256:	F0A0E4253B89D13A4B64796C74B0801D310B761CF0D200188EB06B0F0A3A9202
SHA-512:	8EFD0A8FBDF5E3B9F489663ECFD39A026A7358F5F44F7744CD280D6CB56D9E2263D0E561765122BA1E516A522BFFCE7CD8529B3A18C6DF1E8BB737B01B60AF92
Malicious:	false
Reputation:	low
Preview:	(function(b){var o=!1,d=null,u=parseFloat,j=String.fromCharCode,q=Math.min,l=/(-?\d+\.?\d*)$/g,g,a=[],h,m,t=9472,f={},c;if(!Array.indexOf){Array.prototype.indexOf=function(w){for(var v=0,s=this.length;v<s;v++){if(this[v]==w){return v}}return -1}}for(var p=32,k=j(p),r=255;p<r;p++,k=j(p).toLowerCase()){if(a.indexOf(k)!==-1){a.push(k)}}a.sort();b.tinysort={id:"TinySort",version:"1.3.27",copyright:"Copyright (c) 2008-2012 Ron Valstar",uri:"http://tinysort.sjeiti.com/",licenced:{MIT:"http://www.opensource.org/licenses/mit-license.php",GPL:"http://www.gnu.org/licenses/gpl.html"},defaults:{order:"asc",attr:d,data:d,useVal:o,place:"start",returns:o,cases:o,forceStrings:o,sortFunction:d,charOrder:g}};b.fn.extend({tinysort:function(V,L){if(V&&typeof(V)!="string"){L=V;V=d}var T=b.extend({},b.tinysort.defaults,L),v,Q=this,z=b(this).length,ae={},W=!(!V\|\|V==""),H=!(T.attr===d\|\|T.attr==""),ah=T.data!==d,J=W&&V[0]==":",C=J?Q.filter(V):Q,F=T.sortFunction,s=T.order=="asc"?1:-1,P=[];if(T.charOrder!=g){g=

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3994
Entropy (8bit):	4.723234300437612
Encrypted:	false
SSDEEP:	96:CXQSf0+vRFvMxYUqbPkk84ovtqjkjCMeILF:WQAVvDve6Pkk84ovtQk/F
MD5:	00042AC074D2E8160B1FDA2ECC42F2A2
SHA1:	B3B2EB185AA47157A8EC89946DFEC63A32BCA980
SHA-256:	766F8E2061644EA773B12848243C233676C1E53FA03998E07E0BC0F4DA8EF751
SHA-512:	D58239E37B9FE41A40FD53CB789FB4D722010B09819EF8C8FFD2C093AE30E126146F78DF4AE353C0D03574CF0AAC3798AD3C031FB9FC57CF35EADC8AB1FCA775
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/images/logotext.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="955.573px" height="200px" viewBox="0 0 955.573 200" enable-background="new 0 0 955.573 200" xml:space="preserve">..<g>...<path fill="#213542" d="M348.449,108.896h-73.292c3.029,15.143,16.153,21.805,31.498,21.805c11.509,0,21.806-4.239,29.478-9.691....l6.461,17.366c-2.625,2.218-15.345,11.709-36.343,11.709c-33.919,0-50.879-22.814-50.879-50.073....c0-27.66,18.574-50.071,48.254-50.071c25.643,0,45.429,18.977,45.429,50.475C349.054,102.436,348.852,106.271,348.449,108.896z.... M329.269,91.128c-0.404-9.488-8.077-21.807-26.45-21.807c-17.768,0-27.257,12.318-27.662,21.807H329.269z"/>...<path fill="#213542" d="M455.917,92.743v55.727h-1

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3483), with no line terminators
Category:	downloaded
Size (bytes):	3483
Entropy (8bit):	5.517505801817892
Encrypted:	false
SSDEEP:	96:3X82Y8vdR/MnVBohonWwtRlLxNKqSoDs2fi7T:82V1+n8mWiL1LSqsR7T
MD5:	E1DE51F3FB346CD1C301254EFE98411A
SHA1:	478002233211E9897158C7BD5F9ED61F2B83B5C4
SHA-256:	F0A0E4253B89D13A4B64796C74B0801D310B761CF0D200188EB06B0F0A3A9202
SHA-512:	8EFD0A8FBDF5E3B9F489663ECFD39A026A7358F5F44F7744CD280D6CB56D9E2263D0E561765122BA1E516A522BFFCE7CD8529B3A18C6DF1E8BB737B01B60AF92
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/assets/jquery.tinysort.min.js
Preview:	(function(b){var o=!1,d=null,u=parseFloat,j=String.fromCharCode,q=Math.min,l=/(-?\d+\.?\d*)$/g,g,a=[],h,m,t=9472,f={},c;if(!Array.indexOf){Array.prototype.indexOf=function(w){for(var v=0,s=this.length;v<s;v++){if(this[v]==w){return v}}return -1}}for(var p=32,k=j(p),r=255;p<r;p++,k=j(p).toLowerCase()){if(a.indexOf(k)!==-1){a.push(k)}}a.sort();b.tinysort={id:"TinySort",version:"1.3.27",copyright:"Copyright (c) 2008-2012 Ron Valstar",uri:"http://tinysort.sjeiti.com/",licenced:{MIT:"http://www.opensource.org/licenses/mit-license.php",GPL:"http://www.gnu.org/licenses/gpl.html"},defaults:{order:"asc",attr:d,data:d,useVal:o,place:"start",returns:o,cases:o,forceStrings:o,sortFunction:d,charOrder:g}};b.fn.extend({tinysort:function(V,L){if(V&&typeof(V)!="string"){L=V;V=d}var T=b.extend({},b.tinysort.defaults,L),v,Q=this,z=b(this).length,ae={},W=!(!V\|\|V==""),H=!(T.attr===d\|\|T.attr==""),ah=T.data!==d,J=W&&V[0]==":",C=J?Q.filter(V):Q,F=T.sortFunction,s=T.order=="asc"?1:-1,P=[];if(T.charOrder!=g){g=

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3853
Entropy (8bit):	7.901425385966232
Encrypted:	false
SSDEEP:	96:wGOp6tRtlyDcGvbPy4w7CgURd/wg8FG59h7DLLpR:qotRtizPy4jgURYKnLz
MD5:	D90817E052945562C249CFF466A2E9EE
SHA1:	F1DB94746C39451BEBE2B3E5242791EE136FB5CA
SHA-256:	254340038F6528895E781EF4E7EB45F3B4278428B1C3D9F7A0D3C535CC32C9BE
SHA-512:	A2A5C35043E2813AE1FF2917FFB6B1246024A36CB2F947166EC24492B58A74E793D1FB7FB59A418A60CEDFACD811BCD2998D1D3BE9D0317EB9DD1CC7DF027AA8
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/android-chrome-192x192.png
Preview:	.PNG........IHDR.............e..5....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE............(..8..E..S..^..f..l..o..m..g..\..N..>..+.................;.............................................A........!..L..................i........1................"..)................M................h...........0.....t........z...........B.....X.....{..6..........'.....x........@..:....U..k..b.............a..R..j.....\|.....%..............u......p.....q..Z.................................c..<.. .....5......&........3........2..../.......W..G....P...............H.....v.........$.....F................O.....]..?.......}..D........-...........J..T......V........C.........#.............7.....y.....d....`....w..A.......s.....9..~........I.....=..........,..*.._.............4..Y...........r....n..[..e....d....bKGD!.l......tIME......%........IDATx..m@.....P.A.....w{..T.z.C.....#..P/...BU.b4..$.............1..1.U..&..H4.M,M...M.~)p.w.3....w\|

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3664)
Category:	dropped
Size (bytes):	3883
Entropy (8bit):	5.279418316102536
Encrypted:	false
SSDEEP:	96:+MU7h+wm3e0qE92DcHcv4VIZNruPLuxJlMZau:dwmOc2g8gWZVN+
MD5:	E39D476EC5ADBEFD5584A507BE389B50
SHA1:	D3D4AB4D820DDB0D056016049A11B85A67FDF988
SHA-256:	4EB5E660F3360812175D505828973A40B5008160D62825D5AEA59211CAE04750
SHA-512:	83FFACD9E837DE8F181D5AF8857D077FB3FC641D7546611D5BA6713289CD15E10569351BFDFD4D645FB1641FEF0908D950F4B9BAB07DEB8AE9D1A337634A36A9
Malicious:	false
Reputation:	low
Preview:	/* Modernizr 2.6.2 (Custom Build) \| MIT & BSD. * Build: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-teststyles-testprop-testallprops-domprefixes-forms_placeholder. */.;window.Modernizr=function(a,b,c){function y(a){i.cssText=a}function z(a,b){return y(prefixes.join(a+";")+(b\|\|""))}function A(a,b){return typeof a===b}function B(a,b){return!!~(""+a).indexOf(b)}function C(a,b){for(var d in a){var e=a[d];if(!B(e,"-")&&i[e]!==c)return b=="pfx"?e:!0}return!1}function D(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:A(f,"function")?f.bind(d\|\|b):f}return!1}function E(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+n.join(d+" ")+d).split(" ");return A(b,"string")\|\|A(b,"undefined")?C(e,b):(e=(a+" "+o.join(d+" ")+d).split(" "),D(e,b,c))}function F(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)r[c[d]]=c[d]in j;return r.list&&(r.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),r}("autocomplete autofo

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1696
Entropy (8bit):	4.966694590660697
Encrypted:	false
SSDEEP:	48:1AJX8prXF5Jfmef+k90DA9sgTWghhgWog/5gL:qJX8pr1vfZf38zgCgDgjgRgL
MD5:	50A5641508F5888F204808D01BB340D6
SHA1:	5AE88105D70DF553BDD24B95D4082FF2CA0E3BF4
SHA-256:	439BD453A6C6966F48EA35C17F361C8E2F6AD4FE7F92BC9DEF322AF850FBCF36
SHA-512:	F97D12E6DE5597FE591A504CD51F9CC6E27F14FA47EEAB433E9D43EE393B666036B9A0068963446F928DFCEB836C64DD8E62929F44F1E2B6A7BC4CCC160AE057
Malicious:	false
Reputation:	low
Preview:	..function sfu_request(method, path, data, callbacks) {.. method = method.toLowerCase();.... var request = {.. type: method,.. url: "/api/v1" + path.. };.... if(data) {.. request.data = JSON.stringify(data);.. }.... if($.inArray(method, ["put","post","patch"]) != -1){.. request.contentType = 'application/json; charset=UTF-8'.. };.... if(callbacks == undefined) {.. callbacks = {};.. }.... var ajax = $.ajax(request);.. if(callbacks.success) {.. ajax.done(callbacks.success);.. }.. if(callbacks.always) {.. ajax.always(callbacks.always);.. }.. ajax.fail(function(xhr){.. if(callbacks.fail) {.. callbacks.fail();.. }.. if(xhr.status == 422 && callbacks.invalid) {.. response = JSON.parse(xhr.responseText);.. msg = "";.. _.each(response.errors,function(error){.. msg = msg + error.message + "<br>";.. });.... callbacks.invalid(msg);.. }.. if(xhr.status == 404 && callbacks.notfound) {.. response = JSON.pars

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	83615
Entropy (8bit):	5.372319722661032
Encrypted:	false
SSDEEP:	1536:XPpEy5BMibZGOj/bEe8v+/UWf4IhvAQPFZ93E8ud44d+ROvcpbRNkVPEWW9MtXaQ:uIOKpETQRsFrta98HrP
MD5:	5CA7582261C421482436DFDF3AF9BFFE
SHA1:	98884258CBDB0D939FA2C5E74FC7AC9E56D8170F
SHA-256:	F284353A7CC4D97F6FE20A5155131BD43587A0F1C98A56EEAF52CFF72910F47D
SHA-512:	AA9DBB9EE532954830059247B269B75BB925C2E3398247B8A6B4EF3E89375F9CE2E74CB7328F1C8297977A0596ADD7EE5F217651D2D62BF5826F932FEC228770
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.1.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k="".trim,l={},m=a.document,n="2.1.0",o=function(a,b){return new o.fn.init(a,b)},p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};o.fn=o.prototype={jquery:n,constructor:o,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=o.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return o.each(this,a,b)},map:function(a){return this.pushStack(o.map(this,function(b,c){return a.call(b,c,b)}

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	115451
Entropy (8bit):	5.118663403603666
Encrypted:	false
SSDEEP:	3072:b5LRwwiGM0ypSR55Gl4+KIEPKOLjQMmYBq9x:b5dwwiGM0ypSR55Gl4+KIEPKOLjQnYBM
MD5:	86360BD11A40F2E7BA5825B51DD8ADE7
SHA1:	42010A606C3DF0B203A74C691FD1FAA2F47E9476
SHA-256:	73CA500DB12DA9F33DD36D488E4B6347EDBC550C5686CE6DA6C0F0F97537F2BB
SHA-512:	0730DCBB9B4E66F61EB555562FE82189609436110D142CE3F57871FF3A292E2BF4E4C00E873E4B234B5B71D71514D0753668675339BFD0C25B5F455939762D02
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709
Preview:	/pre/!. Bootstrap v2.3.1. . Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. /..clearfix {. zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.nav,.section {. display: block;.}.audio,.canvas,.video {. display: inline-block;. display: inline;. zoom: 1;.}.audio:not([controls]) {. display: none;.}.html {. font-size: 100%;. -webkit-text-size-adjust: 100%;. -ms-text-size-adjust: 100%;.}.a:focu

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	5.407882295821421
Encrypted:	false
SSDEEP:	24:2dG5AXxGvO7Lfmj6tCLwR6JZiJIe/AGvcb:cKAXQSfOwR6rqPcb
MD5:	DF9F038B90BFEAD39071F7FC8B7A74EF
SHA1:	B34B2E07CE06553D515BBE5653B97518C63CCB26
SHA-256:	0C33E71E1EB04C9D36CB7927E6C5C4C623130E67CDB7E53740CDFB3F72032DC5
SHA-512:	B0575B5E4DC96E9E184F7DB29F9FA28092BD312A7F881FA0A999D587DA51663F7ABBD97DEEE7226886DD3A87C6BC1949D7C9AF9272B1CA4ADFD25AB65AF05973
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="26px" height="26px" viewBox="0 1.5 26 26" enable-background="new 0 1.5 26 26" xml:space="preserve">..<g>...<path fill="#506472" d="M19,21.75H7c-1.654,0-3-1.346-3-3v-8.5c0-1.654,1.346-3,3-3h12c1.654,0,3,1.346,3,3v8.5....C22,20.404,20.654,21.75,19,21.75z M7,9.05c-0.662,0-1.2,0.538-1.2,1.2v8.5c0,0.661,0.538,1.199,1.2,1.199h12....c0.661,0,1.199-0.538,1.199-1.199v-8.5c0-0.662-0.538-1.2-1.199-1.2H7z"/>...<path fill="#506472" d="M13,15.57c-0.626,0-1.253-0.203-1.776-0.609l-6.775-5.25l1.103-1.423l6.775,5.25....c0.396,0.309,0.95,0.308,1.346,0l6.776-5.25l1.102,1.423l-6.775,5.25C14.253,15.367,13.627,15.57,13,15.57z"/>..</g>..</svg>.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	downloaded
Size (bytes):	263161
Entropy (8bit):	5.563920499661363
Encrypted:	false
SSDEEP:	3072:b2iax8eulMYeUgD6W/00Rlvol0RQbQwM87uYumklDNsEemtJeN4aN92Q0fxnI7:iipmFUM5li04d7G3BsEemve9N9H0fxn0
MD5:	5CD7C458A2976314580F140BC74CE683
SHA1:	E5D4C2158AF548349A178D837941775AEE9AD4B0
SHA-256:	8DD706B87FAF0E89920527BEB4CE8CC7FEAF2E7DB5F3A6414D5A5D11B589709B
SHA-512:	3D8FF74CD20056226BB198B55CCA855B4C5C1A7FD61662E3DDD2AA550646AB9103C8D16AE1134995197ED6ACBEF609054A179B49CBB90C974E55156637D609C1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-YFMJZ2K9XT&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7149)
Category:	downloaded
Size (bytes):	7184
Entropy (8bit):	5.223240579931705
Encrypted:	false
SSDEEP:	192:WUF8uUFzkyjrIZwAuNY76wWjIWHiHj05QNFe3:WUF8luvwAgYEX5aFe3
MD5:	C9F77CB11959B4EF266CEED650987A8B
SHA1:	9C53AE90048CE6060BA599ECDD36D818C2A187B1
SHA-256:	A5482267B105BCAEB5B79B7B271BCAA6F7252C39F541DE23EA6380F897BD5D79
SHA-512:	EF52538D27719ED9E0B8B942545DB269799202AC96A98DAF3F25A8FD18EC5DD9678B926E23753290123296D4DE69B1A27B55012AE9A4AB48BD65E3AADFB03BBE
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/vex-2.3.2/js/vex.combined.min.js
Preview:	/! vex.js, vex.dialog.js 2.3.2 /.(function(){var a;a=function(a){var b,c;return b=!1,a(function(){var d;return d=(document.body\|\|document.documentElement).style,b=void 0!==d.animation\|\|void 0!==d.WebkitAnimation\|\|void 0!==d.MozAnimation\|\|void 0!==d.MsAnimation\|\|void 0!==d.OAnimation,a(window).bind("keyup.vex",function(a){return 27===a.keyCode?c.closeByEscape():void 0})}),c={globalID:1,animationEndEvent:"animationend webkitAnimationEnd mozAnimationEnd MSAnimationEnd oanimationend",baseClassNames:{vex:"vex",content:"vex-content",overlay:"vex-overlay",close:"vex-close",closing:"vex-closing",open:"vex-open"},defaultOptions:{content:"",showCloseButton:!0,escapeButtonCloses:!0,overlayClosesOnClick:!0,appendLocation:"body",className:"",css:{},overlayClassName:"",overlayCSS:{},contentClassName:"",contentCSS:{},closeClassName:"",closeCSS:{}},open:function(b){return b=a.extend({},c.defaultOptions,b),b.id=c.globalID,c.globalID+=1,b.$vex=a("<div>").addClass(c.baseClassNames.vex).addClass(b.class

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with very long lines (1831)
Category:	downloaded
Size (bytes):	179266
Entropy (8bit):	5.021277570452052
Encrypted:	false
SSDEEP:	1536:uZsv1Ovibtr3w2CQC1/XoJlOdq1LA/Wh0X5JWhYzx5koES8vVJUl893Fe9peS1Um:IsvcMVCQ2XotQmAZGih1E/C4QEhRhdgl
MD5:	3A102A97671A524DC588FB10700EAD22
SHA1:	C3FA2285139993222644FE4EE6A28459F7D27BFE
SHA-256:	65A7EB3BC65711160EEFDE13C7584F68071D71735950D997B9F5CE49ED07C63F
SHA-512:	3109048F16D9BF3B384D7F044B8FED4C8C9A61DB43949CD5A1C9CFA341A8CAC4D1D230A6360D0FDA2B3BBAAA42A16C66A12F57F38083573B968190FF47F436A1
Malicious:	false
Reputation:	low
URL:	https://customersio.enchant.com/spa/assets/handlebars-v4.7.6.js
Preview:	/**!.. @license. handlebars v4.7.6..Copyright (C) 2011-2019 by Yehuda Katz..Permission is hereby granted, free of charge, to any person obtaining a copy.of this software and associated documentation files (the "Software"), to deal.in the Software without restriction, including without limitation the rights.to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.copies of the Software, and to permit persons to whom the Software is.furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in.all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER.LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARI

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32017)
Category:	dropped
Size (bytes):	34737
Entropy (8bit):	5.494646993876981
Encrypted:	false
SSDEEP:	768:NlQ7JIzRZ1jnWZqPPD0JvphaCSN2nBCPD:NlFjnVPL0tBS+Cr
MD5:	85E5D41EB9C451C16D4E784AEC13D948
SHA1:	851E2DF2ACD5F0BC4EF10FCF2F50C17F7AA09C1F
SHA-256:	0A3BB1E382060C6999C26FAAC38AED7E3D6CC03F7376A9A36B881A7E5BA923CA
SHA-512:	97B8E880C388E9959924463B95112315D42E9B8EB2DBE929A7F9A76C9C7B3BE8B3CA63BD7868CBE98E28EDC109341768BA1547A6D8B659DEFD43A6888CFC31B5
Malicious:	false
Reputation:	low
Preview:	//! moment.js.//! version : 2.9.0.//! authors : Tim Wood, Iskren Chernev, Moment.js contributors.//! license : MIT.//! momentjs.com.(function(a){function b(a,b,c){switch(arguments.length){case 2:return null!=a?a:b;case 3:return null!=a?a:null!=b?b:c;default:throw new Error("Implement me")}}function c(a,b){return Bb.call(a,b)}function d(){return{empty:!1,unusedTokens:[],unusedInput:[],overflow:-2,charsLeftOver:0,nullInput:!1,invalidMonth:null,invalidFormat:!1,userInvalidated:!1,iso:!1}}function e(a){vb.suppressDeprecationWarnings===!1&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+a)}function f(a,b){var c=!0;return o(function(){return c&&(e(a),c=!1),b.apply(this,arguments)},b)}function g(a,b){sc[a]\|\|(e(b),sc[a]=!0)}function h(a,b){return function(c){return r(a.call(this,c),b)}}function i(a,b){return function(c){return this.localeData().ordinal(a.call(this,c),b)}}function j(a,b){var c,d,e=12*(b.year()-a.year())+(b.month()-a.month()),f=a.clone().add(e,"mo

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 16:14:31.259304047 CEST	49676	443	192.168.2.11	20.189.173.3
Sep 30, 2024 16:14:31.306129932 CEST	49671	443	192.168.2.11	204.79.197.203
Sep 30, 2024 16:14:32.462367058 CEST	49676	443	192.168.2.11	20.189.173.3
Sep 30, 2024 16:14:32.962347031 CEST	49674	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:33.087352991 CEST	49673	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:34.868521929 CEST	49676	443	192.168.2.11	20.189.173.3
Sep 30, 2024 16:14:39.727891922 CEST	49676	443	192.168.2.11	20.189.173.3
Sep 30, 2024 16:14:40.967942953 CEST	49671	443	192.168.2.11	204.79.197.203
Sep 30, 2024 16:14:42.657435894 CEST	49674	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:42.735590935 CEST	49673	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:42.939707041 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.939754009 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:42.939888954 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.941019058 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.941034079 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:42.942207098 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.942251921 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:42.942699909 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.942699909 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:42.942738056 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.521205902 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.521547079 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.521562099 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.522677898 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.522793055 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.526588917 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.526664972 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.526971102 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.526984930 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.531235933 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.531455040 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.531485081 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.532550097 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.532639980 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.538434029 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.538526058 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.579986095 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.580151081 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.580161095 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.626580000 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.634444952 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.634516954 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.634685993 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.635004044 CEST	49713	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.635023117 CEST	443	49713	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.638540030 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.679411888 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753073931 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753101110 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753110886 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753129959 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753144979 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753194094 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.753197908 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.753269911 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.753269911 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.757117033 CEST	49712	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.757133961 CEST	443	49712	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.839478970 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.839523077 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.839591980 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.840368986 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.840383053 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.842890978 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.842941999 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.843003988 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.844111919 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.844121933 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.844176054 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.847456932 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.847481012 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.849760056 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.849772930 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.851005077 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.851048946 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.851104975 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.852243900 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.852272034 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.852319002 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.853244066 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.853259087 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.854444027 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.854454994 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.854506969 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.854963064 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.854975939 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:43.855720043 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:43.855729103 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.315141916 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.315545082 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.315556049 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.315736055 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.315964937 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.315982103 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.316313028 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.316657066 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.316709995 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.317502022 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.317744017 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.317806959 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.318486929 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.318556070 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.318670034 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.318684101 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.319403887 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.319529057 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.319581032 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.319588900 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.319752932 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.319803953 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.319941998 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.319948912 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.320992947 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.321119070 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.321119070 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.321183920 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.321885109 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.321943045 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.322232962 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.322241068 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.322444916 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.322449923 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.328541040 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.329026937 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.329046965 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.329524040 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.333288908 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.334297895 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.334446907 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.334958076 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.334966898 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.335100889 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.336024046 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.336080074 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.336954117 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.337007999 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.337469101 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.337477922 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.361848116 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.361850023 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.363394976 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.375391960 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.375468016 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.377487898 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.451606989 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.451638937 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.451687098 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.451703072 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.451718092 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.451781034 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.460453987 CEST	49721	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.460469961 CEST	443	49721	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.461540937 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.461591005 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.461651087 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.463049889 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.463067055 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.492789030 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.492820978 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.492872000 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.492876053 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.492901087 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.492922068 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.492988110 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.493032932 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.496068001 CEST	49718	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.496088982 CEST	443	49718	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.496859074 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.496906042 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.496983051 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.498183966 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.498199940 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.541533947 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.541562080 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.541578054 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.541615009 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.541640997 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.541662931 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.541691065 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.543575048 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.543597937 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.543637037 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.543648958 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.543663025 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.543674946 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.543715954 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.543720961 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.543761969 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.554622889 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554650068 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554658890 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554718971 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.554728031 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554794073 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.554826021 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554851055 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554858923 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554889917 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554899931 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.554915905 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554924965 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.554945946 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.554977894 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.556957960 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.556988001 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.557022095 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.557028055 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.557073116 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.557110071 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.557156086 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.560575962 CEST	49722	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.560595036 CEST	443	49722	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.561299086 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.561343908 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.561405897 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.564459085 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.564481974 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.569139004 CEST	49720	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.569163084 CEST	443	49720	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.569864035 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.569879055 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.569952965 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.574603081 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.574611902 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.576312065 CEST	443	49706	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:44.576402903 CEST	49706	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:44.585787058 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585819960 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585829020 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585839033 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585910082 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.585958004 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585972071 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.585982084 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.585994005 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.586029053 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.587572098 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.587594986 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.587636948 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.587645054 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.587687969 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.630623102 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.630650997 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.630718946 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.630748034 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.630793095 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.631606102 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.631628036 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.631675959 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.631686926 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.631717920 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.631755114 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.633632898 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.633651018 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.633712053 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.633717060 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.633770943 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.642086983 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.676994085 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.677006960 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.677083969 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.677118063 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.678230047 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.678251028 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.678296089 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.678304911 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.678325891 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.679738045 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.679755926 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.679805994 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.679817915 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.680790901 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.680854082 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.680860043 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.680874109 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.680895090 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.680912018 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.680948019 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.716314077 CEST	49717	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.716340065 CEST	443	49717	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.718740940 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.718764067 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.718847036 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.718858004 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.718899965 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.719356060 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.719391108 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.719408989 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.719413042 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.719438076 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.719444036 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.719456911 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.719482899 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.720680952 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.720727921 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.720786095 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.731301069 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.731324911 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.743721962 CEST	49716	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.743751049 CEST	443	49716	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.744368076 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.744414091 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.744469881 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.757158995 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:44.757189989 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:44.757245064 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:44.758002043 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.758014917 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.758217096 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:44.758229017 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:44.942715883 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.954090118 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.954106092 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.954457045 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.958100080 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.958156109 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.958260059 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.965682983 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.966528893 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.966547966 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.967010975 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.970045090 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.970136881 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:44.971443892 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:44.999399900 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.019392967 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.030273914 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.038147926 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.038157940 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.039179087 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.039222002 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.041625977 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.041686058 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.041986942 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.041996956 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.042869091 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.044378042 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.044384956 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.045473099 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.045561075 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.049365997 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.049464941 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.049634933 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.049640894 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.092540979 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.094011068 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.170746088 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.170769930 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.170826912 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.170861006 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.170861006 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.171814919 CEST	49725	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.171838999 CEST	443	49725	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.172377110 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.172415972 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.172895908 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.172895908 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.172924042 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182615042 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182640076 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182655096 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182710886 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.182734966 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182749033 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.182784081 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.184923887 CEST	49723	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.184941053 CEST	443	49723	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.185216904 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.185241938 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.185323954 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.185868025 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.185880899 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.195916891 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.195928097 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.195946932 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.195957899 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.195976973 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.196010113 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.196023941 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.196032047 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196050882 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.196063042 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196064949 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196079016 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196096897 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196468115 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.196474075 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197129965 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197151899 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197185040 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.197191954 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197221994 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.197436094 CEST	49726	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.197454929 CEST	443	49726	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197498083 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197549105 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.197742939 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.197772026 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.197820902 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.198367119 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.198419094 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.198590040 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.198597908 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.198782921 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.198786974 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.239274025 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.245580912 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.245842934 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.245879889 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.246942997 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.246997118 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.247380972 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.247524023 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.247535944 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.247700930 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.282871962 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.282896996 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.282941103 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.282952070 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.282995939 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.284193039 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.284240007 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.284255981 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.284261942 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.284291983 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.284301996 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.284324884 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.284580946 CEST	49724	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.284593105 CEST	443	49724	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.285006046 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.285036087 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.285243988 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.285609961 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.285618067 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.287400961 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.287422895 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.335598946 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.344352007 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.344405890 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.344515085 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.344543934 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.344566107 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.344819069 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.388474941 CEST	49727	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.388490915 CEST	443	49727	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.389718056 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.389744043 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.389847040 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.395560980 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.395576954 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.406157017 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:45.446286917 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:45.493015051 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493046999 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493055105 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493069887 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493077993 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493091106 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493099928 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.493120909 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.493139029 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.493168116 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.494044065 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.494060040 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.494118929 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.494122028 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.494137049 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.494151115 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.494165897 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.494203091 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.655782938 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.657421112 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.693224907 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.706659079 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.706677914 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.739229918 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.748423100 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.797832012 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.881490946 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.934051037 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.937417030 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:45.937443972 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:45.938647985 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:45.938744068 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:45.938891888 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.938910961 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.939903021 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.939960003 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.941960096 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.942008018 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.942101002 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.942112923 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.942538977 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.942634106 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.942656040 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.942920923 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.943139076 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.943145037 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.944178104 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.944530010 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.954509020 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.954699993 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.955584049 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:45.955647945 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:45.961527109 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.961671114 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.963346004 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.963423967 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.966020107 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.966311932 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.967566967 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.967715025 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.969113111 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.969120979 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.969687939 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.980173111 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.980302095 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.980546951 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.983630896 CEST	49728	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.983652115 CEST	443	49728	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.989656925 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.989695072 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:45.989751101 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.997092962 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:45.997107983 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.002403975 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:46.002413034 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:46.015400887 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.019421101 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.027400017 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.027401924 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.027405024 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.048289061 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:46.083542109 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083568096 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083576918 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083595991 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083601952 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083621025 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.083636045 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083667040 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.083693027 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.083710909 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.086141109 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.086209059 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.086235046 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.086272001 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.086287022 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.086297989 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.086324930 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.086385012 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.086430073 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.166167974 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166192055 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166198969 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166222095 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166234016 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166241884 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166246891 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.166268110 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166301966 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.166313887 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.166316032 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.166353941 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.168994904 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169019938 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169029951 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169061899 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169064045 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169065952 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.169080973 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169091940 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169094086 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169104099 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169109106 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169128895 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.169132948 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169133902 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169148922 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169159889 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169177055 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.169178963 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.169188976 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.169225931 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.169258118 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.170043945 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170075893 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170104027 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.170110941 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170125961 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170171976 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.170306921 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170337915 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170387983 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.170394897 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.170427084 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.220364094 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.256232977 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.256257057 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.256289959 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.256314039 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.256344080 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.256361961 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.256373882 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.256387949 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.256464958 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.257124901 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.257178068 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.257191896 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.257196903 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.257232904 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.257320881 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.257363081 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.268774033 CEST	49731	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.268802881 CEST	443	49731	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.271888018 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.271928072 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.272025108 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.274089098 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.274102926 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.275085926 CEST	49735	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.275109053 CEST	443	49735	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.275857925 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.275875092 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.275938988 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.277131081 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.277146101 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.278748989 CEST	49730	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.278768063 CEST	443	49730	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.279161930 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.279208899 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.279264927 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.279612064 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.279624939 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.280301094 CEST	49732	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.280309916 CEST	443	49732	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.280606031 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.280633926 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.280689001 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.281054974 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.281069994 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.282181025 CEST	49733	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.282197952 CEST	443	49733	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.294300079 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.294361115 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.294437885 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.294897079 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.294923067 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.458560944 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.467258930 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.467282057 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.467654943 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.468473911 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.468539000 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.468971014 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.515403986 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697447062 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697473049 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697489977 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697555065 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.697576046 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697602034 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.697626114 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.697670937 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697731018 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.697737932 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697777987 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.697818041 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.708869934 CEST	49736	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.708887100 CEST	443	49736	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.722892046 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.722948074 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.723010063 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.723833084 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.723865032 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.740562916 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.741420984 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.741430998 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.741801977 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.742012024 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.742430925 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.742501020 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.742611885 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.742628098 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.743000031 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.743746996 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.743805885 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.745320082 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.745390892 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.745774984 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.745783091 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.762533903 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.763102055 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.763132095 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.764211893 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.764282942 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.764857054 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.764919996 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.765408993 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.765418053 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.767585993 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.771102905 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.771112919 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.772306919 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.772387028 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.773072004 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.773138046 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.773530006 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.773535967 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.783437014 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.792486906 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.794804096 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.794836998 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.795916080 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.795978069 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.797334909 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.805008888 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.805109978 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.805706024 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.805737972 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.816653013 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.816658974 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.849376917 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.891180992 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.891211987 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.891275883 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.891293049 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.891307116 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.891372919 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.914412022 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.914438963 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.914500952 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.914525986 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.939589024 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.939668894 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.939730883 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.939769030 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.939801931 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.939841986 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.939888000 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.965737104 CEST	49739	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.965751886 CEST	443	49739	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.966284990 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.966360092 CEST	443	49740	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.966418028 CEST	49740	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.971817017 CEST	49741	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.971859932 CEST	443	49741	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.978931904 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.978960037 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.978975058 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.979008913 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.979020119 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.979055882 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.979070902 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.981234074 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.981251001 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:46.981313944 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:46.981319904 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.008284092 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.008328915 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:47.008446932 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.010206938 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.010232925 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:47.018997908 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.019030094 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.019088984 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.019090891 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.019138098 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.020102024 CEST	49738	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.020113945 CEST	443	49738	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.066716909 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.066751957 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.066809893 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.066822052 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.066863060 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.067358017 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.067373991 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.067497969 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.067573071 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.067656040 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.067678928 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.068087101 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068111897 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068149090 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.068165064 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068207979 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.068722963 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068737984 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068809986 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.068816900 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.068840027 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.279403925 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.279476881 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.319829941 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.320178986 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.320214987 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.320583105 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.320960999 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.321043968 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.321300983 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.321805000 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.321830034 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.321885109 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.321907043 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.321950912 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.321950912 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.323052883 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323075056 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323117018 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.323122025 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323180914 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.323180914 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.323252916 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323271990 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323483944 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.323491096 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.323582888 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324282885 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324299097 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324372053 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324378014 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324466944 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324510098 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324513912 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324529886 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324539900 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.324645996 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324954987 CEST	49737	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.324970007 CEST	443	49737	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.363406897 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.459084988 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.459135056 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.459397078 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.459734917 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.459750891 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.470685005 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.470753908 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.470849991 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.477086067 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.477124929 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.477185011 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.477399111 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.477411985 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.598195076 CEST	49742	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.598227024 CEST	443	49742	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.645184994 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.645239115 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.645440102 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.645636082 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.645642996 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.649846077 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.649893045 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.649988890 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.650430918 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.650443077 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.653177977 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.653191090 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.653429985 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.653841019 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.653851986 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.655894041 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.655910015 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.656028986 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.656307936 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.656320095 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.656683922 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:47.656794071 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.663816929 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.663836002 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:47.664117098 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:47.777934074 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:47.786632061 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.786678076 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.786737919 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.787111998 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:47.787127972 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:47.940891981 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.984894037 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.989908934 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.989918947 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.990452051 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.990972996 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:47.991043091 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:47.991087914 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.031403065 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.076199055 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.098323107 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.098346949 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.098421097 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.098454952 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.098522902 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.158924103 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.158952951 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.160166025 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.160181999 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.160249949 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.170286894 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.170391083 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.170449018 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.211400986 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.217820883 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.218683004 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.228044987 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.253434896 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.283680916 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.284677029 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284698009 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284732103 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284754038 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284760952 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.284765959 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284791946 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284815073 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.284821987 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.284838915 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369525909 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369558096 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369615078 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369621038 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369664907 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369676113 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369707108 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369724035 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369728088 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369734049 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369764090 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369765997 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369782925 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369793892 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369806051 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369824886 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369833946 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.369966030 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.369972944 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.370651960 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.370670080 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.370708942 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.371534109 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.371699095 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.371711016 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.371767998 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.371788025 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.372052908 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.372061014 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.372574091 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.372629881 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.372764111 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.372775078 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.373333931 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.373367071 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.373400927 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.373743057 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.373799086 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.373851061 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.373852015 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.373914003 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.373929024 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.374520063 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.374697924 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.374803066 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.374813080 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375158072 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375164986 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375193119 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375201941 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.375209093 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375217915 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375231028 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.375233889 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375250101 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.375257015 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.375268936 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.377223969 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.378864050 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.378887892 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.380008936 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.380070925 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.380405903 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.380480051 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.380625963 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.380641937 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.434015036 CEST	49744	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.434055090 CEST	443	49744	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.459693909 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.459707975 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.459728956 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.459737062 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.459772110 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.459800959 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.459825039 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.460875034 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460882902 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460913897 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460916042 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.460928917 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460936069 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460952044 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460958004 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.460961103 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.460982084 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.461004019 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.461010933 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.461045027 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.461085081 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.461844921 CEST	49745	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.461862087 CEST	443	49745	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.462338924 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.462373018 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.462496042 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.463114977 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.463129997 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.475023031 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.475084066 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.475090027 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.475145102 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.478993893 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.478992939 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.479074955 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.479348898 CEST	49750	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.479367971 CEST	443	49750	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.480113029 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.480139971 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.480330944 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.481010914 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.481019974 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.488085985 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.488101006 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501558065 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501614094 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501635075 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501647949 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.501657009 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501677036 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501698017 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501712084 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.501734972 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501761913 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.501764059 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.501789093 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502249002 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502270937 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502329111 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502338886 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502372980 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502528906 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502551079 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502558947 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502582073 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502600908 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502612114 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502613068 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502629995 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502655029 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502659082 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502671957 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.502672911 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.502737999 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.504673958 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.504692078 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.504734993 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.504755020 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.504795074 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.505682945 CEST	49751	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.505697966 CEST	443	49751	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.506222963 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.506266117 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.506366968 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.507585049 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.507596970 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.509469986 CEST	49749	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.509485960 CEST	443	49749	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.509962082 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.509999037 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.510075092 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.510813951 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.510835886 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.513463974 CEST	49752	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.513473034 CEST	443	49752	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.514066935 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.514079094 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.514158964 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.515166044 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.515173912 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.537262917 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:48.583400965 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:48.688185930 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.769038916 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769058943 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769079924 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769093990 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769100904 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769130945 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769141912 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.769206047 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.769217014 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769450903 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769459963 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769479990 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769486904 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769494057 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769495010 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.769514084 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769522905 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.769546032 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.769567013 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.775031090 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775046110 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775074005 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775083065 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775095940 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.775121927 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.775129080 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775151968 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.775166988 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.775185108 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.780356884 CEST	49748	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.780376911 CEST	443	49748	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.780865908 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.780910015 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.780978918 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.781780005 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.781795025 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.833863020 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.833894968 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.834219933 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.834561110 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.834609032 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.834820986 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.835118055 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.835128069 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.835354090 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:48.835372925 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:48.933717966 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.951095104 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.951112032 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.951507092 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.952039957 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.952110052 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.952364922 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.957715034 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:48.958008051 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:48.958019972 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:48.958058119 CEST	49743	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:48.958158970 CEST	443	49743	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:48.971426964 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.972388983 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.972405910 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.972769022 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.973337889 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.973396063 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.973751068 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.978451014 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.978759050 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.978781939 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.979155064 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.979943037 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.980032921 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.980271101 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.980917931 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.981384993 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.981410027 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.982404947 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.982479095 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.983062983 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.983131886 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.983443975 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:48.983452082 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:48.995404005 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.003360033 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.003757000 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.003774881 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.004795074 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.004865885 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.005508900 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.005575895 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.006203890 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.006211042 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.015410900 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.023412943 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.024687052 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.024724007 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.025052071 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.026020050 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.026042938 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.080307007 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.120050907 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.120073080 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.120091915 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.120129108 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.120138884 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.120156050 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.120176077 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.120203018 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.121166945 CEST	49756	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.121181965 CEST	443	49756	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.121514082 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.121556044 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.121635914 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.122034073 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.122046947 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.131232977 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.131258965 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.131308079 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.131319046 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.131333113 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.131387949 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.132180929 CEST	49755	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.132190943 CEST	443	49755	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.132530928 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.132587910 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.132667065 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.133044958 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.133057117 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.177037001 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.177062988 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.177078962 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.177144051 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.177162886 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.177227020 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.178795099 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.178811073 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.178842068 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.178869009 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.178880930 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.178920984 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.178945065 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.179030895 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.179188967 CEST	49754	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.179212093 CEST	443	49754	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.179615974 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.179655075 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.179749012 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.179995060 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.180008888 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.187334061 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.220233917 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220263004 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220277071 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220300913 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220310926 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220315933 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.220321894 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220344067 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220375061 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.220391035 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.220396996 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220417023 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.220453978 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.221179008 CEST	49758	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.221209049 CEST	443	49758	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.221540928 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.221580982 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.221698046 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.222088099 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.222100973 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256799936 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256823063 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256831884 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256869078 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256896973 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256899118 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.256907940 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256942987 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256944895 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.256958961 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.256964922 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.256974936 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.257711887 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257719994 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257745028 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257755041 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257755041 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.257770061 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257783890 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.257791042 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.257806063 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.257828951 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.258943081 CEST	49757	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.258959055 CEST	443	49757	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.259521008 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.259560108 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.259773016 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.260421991 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.260433912 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.264115095 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.264530897 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.264559984 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.265655041 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.265724897 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.266611099 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.266702890 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.266743898 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.295222998 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.295511961 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.295536995 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.295869112 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.296180010 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.296228886 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.296511889 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.307401896 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.317332029 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.317615986 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.317629099 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.319098949 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.319174051 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.319714069 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.319818020 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.319828033 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.336049080 CEST	49676	443	192.168.2.11	20.189.173.3
Sep 30, 2024 16:14:49.336056948 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.336071968 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.339407921 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.363411903 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.387856007 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.387868881 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.434879065 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.434902906 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.434967041 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.434976101 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.435080051 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.436027050 CEST	49764	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.436064005 CEST	443	49764	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.478173971 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.507543087 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507566929 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507574081 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507605076 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507617950 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507625103 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507644892 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.507672071 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507694960 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.507700920 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507719994 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.507978916 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.507987976 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508017063 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.508023024 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508040905 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.508044958 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508052111 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508063078 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.508080006 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508086920 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.508100986 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.508120060 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.579184055 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.579197884 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.587251902 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.587272882 CEST	443	49763	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.587327003 CEST	49763	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.594773054 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.594820023 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.594882011 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.596661091 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.596704960 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597116947 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597135067 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597157001 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597178936 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597198963 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.597213030 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.597275972 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.600481987 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.600529909 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.600550890 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.600560904 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.600584030 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.600584030 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.600620985 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.604026079 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:49.604048967 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:49.604710102 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.604732990 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.604866982 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.604888916 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.605267048 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.605571032 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.605581045 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.605648041 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.605803013 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.606121063 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.606192112 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.606266022 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.606503963 CEST	49761	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.606530905 CEST	443	49761	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.606875896 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.606920004 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.606982946 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.607661963 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.607675076 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.647408962 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.647409916 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.665199041 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.666943073 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.666964054 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.668006897 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.668060064 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.668375015 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.668436050 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.668627024 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.668634892 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.688980103 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.689064026 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.704524994 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.724320889 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.749526978 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.749556065 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.749608040 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.749620914 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.749663115 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.790083885 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.790117025 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.790469885 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.791487932 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:49.793728113 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.793760061 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.793972969 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.794007063 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.795304060 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.795320034 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.795376062 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.795495987 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.795505047 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.795545101 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.797496080 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.798981905 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.799005985 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.799041986 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.799055099 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.799071074 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.799105883 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.801136017 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.801234007 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.801794052 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.801882029 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.802989006 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.803000927 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.803147078 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.803153038 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818208933 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818234921 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818248987 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818290949 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.818301916 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818326950 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.818459988 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818460941 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.818473101 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818500042 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.818527937 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.818531990 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818548918 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.818588018 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.839401960 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:49.848510027 CEST	49767	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.848526001 CEST	443	49767	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.848920107 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.848963022 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.849164009 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.850048065 CEST	49769	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.850069046 CEST	443	49769	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.850460052 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.850514889 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.850565910 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.851639986 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.851654053 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.852438927 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.852457047 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.852828979 CEST	49768	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.852854013 CEST	443	49768	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.853219986 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.853257895 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.853449106 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.854573011 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.854595900 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.908559084 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.908615112 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.908626080 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:49.908663034 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:49.985346079 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.071485043 CEST	49770	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.071511984 CEST	443	49770	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192727089 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:50.192790031 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:50.192919016 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192938089 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192946911 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192960024 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192960978 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:50.192967892 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192974091 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.192975998 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.192994118 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193026066 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193042040 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.193053007 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.193057060 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193065882 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193087101 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193094015 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193099976 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193105936 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193106890 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.193119049 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.193137884 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.193156004 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.194279909 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.194387913 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.195077896 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.195091963 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.195229053 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.195255041 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.195626020 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.195674896 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.196180105 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.196265936 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.196547031 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.196614981 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.196765900 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.196863890 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.198143959 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.198154926 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.198204994 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.198221922 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.198245049 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.198259115 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.198270082 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.199424982 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.199434996 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.199451923 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.199460030 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.199497938 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.199506044 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.199539900 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.200005054 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:50.200005054 CEST	49766	443	192.168.2.11	184.28.90.27
Sep 30, 2024 16:14:50.200025082 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:50.200033903 CEST	443	49766	184.28.90.27	192.168.2.11
Sep 30, 2024 16:14:50.202086926 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.202101946 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.202145100 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.202155113 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.202184916 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.203783989 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.203804016 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.203855991 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.203866005 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.203890085 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.205822945 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.205840111 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.205877066 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.205885887 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.205929041 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.207828045 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.207844019 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.207895041 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.207901955 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.210000038 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.210025072 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.210048914 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.210057020 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.210095882 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.211122990 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.211143017 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.211186886 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.211193085 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.211252928 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.212625980 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.212661982 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.212702036 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.212707043 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.212733984 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.212749004 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.213536978 CEST	49771	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.213553905 CEST	443	49771	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.243402004 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.243411064 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.309710979 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.316116095 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.317105055 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.348031044 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.348056078 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.348124981 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.348151922 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.348197937 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.360238075 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.360276937 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.360430956 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.360440969 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.360737085 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.360893011 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.360907078 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.361409903 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.361660957 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.361712933 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.361805916 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.361927986 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.362179041 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.362266064 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.362526894 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.362629890 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.362763882 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.362797022 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.362870932 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.362879038 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.364110947 CEST	49773	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.364128113 CEST	443	49773	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.403412104 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.403413057 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.428164959 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.428195953 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.428280115 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.428293943 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.428350925 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.449079990 CEST	49772	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:50.449100971 CEST	443	49772	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:50.464364052 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464396000 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464474916 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464482069 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464487076 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.464545965 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.464561939 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464576006 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.464591026 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.464621067 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.467780113 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.467874050 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.467947960 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.570411921 CEST	49775	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.570456982 CEST	443	49775	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.571604013 CEST	49776	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.571630955 CEST	443	49776	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:50.571923018 CEST	49774	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:50.571959019 CEST	443	49774	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.108515024 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.108565092 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.108710051 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.108936071 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.108942986 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.589884043 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.590406895 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.590421915 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.591610909 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.592340946 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.592518091 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.592628002 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.639400005 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.731873035 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.731957912 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.732024908 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.732043982 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.732083082 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.732124090 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:51.732170105 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.758258104 CEST	49779	443	192.168.2.11	54.205.78.181
Sep 30, 2024 16:14:51.758285999 CEST	443	49779	54.205.78.181	192.168.2.11
Sep 30, 2024 16:14:55.386442900 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:55.386511087 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:55.386574030 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:55.679313898 CEST	49729	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:14:55.679341078 CEST	443	49729	142.250.186.36	192.168.2.11
Sep 30, 2024 16:14:55.720809937 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.720868111 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:55.721005917 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.721046925 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:55.721046925 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.721117020 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.721380949 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.721398115 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:55.721699953 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:55.721710920 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.185750961 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.186963081 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.187338114 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.187354088 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.187697887 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.187726021 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.187748909 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.188817024 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.188882113 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.188905954 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.191735983 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.191910982 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.192692995 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.234908104 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.235411882 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.338352919 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.338376999 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.338423967 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.338438034 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.370528936 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:56.370654106 CEST	443	49791	54.158.82.124	192.168.2.11
Sep 30, 2024 16:14:56.370707989 CEST	49791	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:14:57.174376965 CEST	49706	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:57.174431086 CEST	49706	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:57.175544977 CEST	49793	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:57.175601006 CEST	443	49793	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:57.175736904 CEST	49793	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:57.177505970 CEST	49793	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:14:57.177531958 CEST	443	49793	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:57.179398060 CEST	443	49706	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:57.179414988 CEST	443	49706	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:57.757880926 CEST	443	49793	173.222.162.42	192.168.2.11
Sep 30, 2024 16:14:57.758030891 CEST	49793	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:15:16.907040119 CEST	443	49793	173.222.162.42	192.168.2.11
Sep 30, 2024 16:15:16.907109976 CEST	49793	443	192.168.2.11	173.222.162.42
Sep 30, 2024 16:15:41.204493999 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:15:41.204514027 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:15:44.784230947 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:44.784276962 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:44.784343958 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:44.784617901 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:44.784627914 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:45.419043064 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:45.419411898 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:45.419430971 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:45.419759989 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:45.420155048 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:45.420209885 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:45.470144033 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:55.323318958 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:55.323414087 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:55.323498964 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:55.347542048 CEST	49800	443	192.168.2.11	142.250.186.36
Sep 30, 2024 16:15:55.347583055 CEST	443	49800	142.250.186.36	192.168.2.11
Sep 30, 2024 16:15:56.873635054 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:15:56.873732090 CEST	443	49790	54.158.82.124	192.168.2.11
Sep 30, 2024 16:15:56.873799086 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:15:57.349265099 CEST	49790	443	192.168.2.11	54.158.82.124
Sep 30, 2024 16:15:57.349291086 CEST	443	49790	54.158.82.124	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 16:14:40.608807087 CEST	53	55377	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:40.885031939 CEST	53	59906	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:41.915275097 CEST	53	61493	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:42.919796944 CEST	65187	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:42.919960976 CEST	58405	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:42.938889027 CEST	53	65187	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:42.938991070 CEST	53	58405	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:43.843194008 CEST	53	50697	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:44.742470026 CEST	59698	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:44.743016958 CEST	60523	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:44.749500036 CEST	53	59698	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:44.749984026 CEST	53	60523	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:47.457132101 CEST	64988	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:47.457339048 CEST	61412	53	192.168.2.11	1.1.1.1
Sep 30, 2024 16:14:47.475775003 CEST	53	61412	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:47.476610899 CEST	53	64988	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:47.598494053 CEST	53	53363	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:47.600167036 CEST	53	51262	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:48.866975069 CEST	53	49337	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:49.854065895 CEST	53	53646	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:51.492501020 CEST	53	59171	1.1.1.1	192.168.2.11
Sep 30, 2024 16:14:59.380636930 CEST	53	63310	1.1.1.1	192.168.2.11
Sep 30, 2024 16:15:18.322419882 CEST	53	62420	1.1.1.1	192.168.2.11
Sep 30, 2024 16:15:28.242918968 CEST	138	138	192.168.2.11	192.168.2.255
Sep 30, 2024 16:15:40.357368946 CEST	53	59313	1.1.1.1	192.168.2.11
Sep 30, 2024 16:15:41.001533031 CEST	53	61648	1.1.1.1	192.168.2.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 16:14:42.919796944 CEST	192.168.2.11	1.1.1.1	0xf586	Standard query (0)	customersio.enchant.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:42.919960976 CEST	192.168.2.11	1.1.1.1	0x388f	Standard query (0)	customersio.enchant.com	65	IN (0x0001)	false
Sep 30, 2024 16:14:44.742470026 CEST	192.168.2.11	1.1.1.1	0x55f7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:44.743016958 CEST	192.168.2.11	1.1.1.1	0x347e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 16:14:47.457132101 CEST	192.168.2.11	1.1.1.1	0xdedc	Standard query (0)	customersio.enchant.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:47.457339048 CEST	192.168.2.11	1.1.1.1	0x871d	Standard query (0)	customersio.enchant.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 16:14:42.938889027 CEST	1.1.1.1	192.168.2.11	0xf586	No error (0)	customersio.enchant.com		54.158.82.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:42.938889027 CEST	1.1.1.1	192.168.2.11	0xf586	No error (0)	customersio.enchant.com		54.205.78.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:44.749500036 CEST	1.1.1.1	192.168.2.11	0x55f7	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:44.749984026 CEST	1.1.1.1	192.168.2.11	0x347e	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 16:14:47.476610899 CEST	1.1.1.1	192.168.2.11	0xdedc	No error (0)	customersio.enchant.com		54.205.78.181	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:47.476610899 CEST	1.1.1.1	192.168.2.11	0xdedc	No error (0)	customersio.enchant.com		54.158.82.124	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:14:54.652028084 CEST	1.1.1.1	192.168.2.11	0x10a6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 16:14:54.652028084 CEST	1.1.1.1	192.168.2.11	0x10a6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:15:09.321227074 CEST	1.1.1.1	192.168.2.11	0xfc49	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 16:15:09.321227074 CEST	1.1.1.1	192.168.2.11	0xfc49	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:15:33.401839018 CEST	1.1.1.1	192.168.2.11	0x6cf8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 16:15:33.401839018 CEST	1.1.1.1	192.168.2.11	0x6cf8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 16:15:53.416838884 CEST	1.1.1.1	192.168.2.11	0x55c6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 16:15:53.416838884 CEST	1.1.1.1	192.168.2.11	0x55c6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

customersio.enchant.com

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49713	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:43 UTC	697	OUT	GET /ticket/66eed729bbddbd8b56beeeda HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:43 UTC	304	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:43 GMT Location: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49712	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:43 UTC	717	OUT	GET /auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:43 UTC	197	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:43 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 9688 Connection: Close
2024-09-30 14:14:43 UTC	9688	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 45 6e 63 68 61 6e 74 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 Data Ascii: <!DOCTYPE html><html><head><title>Enchant</title><meta charset="utf-8"><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="imag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49716	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	681	OUT	GET /spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	244	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 115451 Connection: Close
2024-09-30 14:14:44 UTC	16140	IN	Data Raw: 2f 70 72 65 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 32 2e 33 2e 31 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f Data Ascii: /pre/! Bootstrap v2.3.1 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. /.clearfix { zoo
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 72 65 64 20 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 62 6f 64 79 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 62 6f 64 79 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 74 6f 70 6c 65 Data Ascii: red thead:first-child tr:first-child > th:first-child,.table-bordered tbody:first-child tr:first-child > td:first-child,.table-bordered tbody:first-child tr:first-child > th:first-child { -webkit-border-top-left-radius: 4px; -moz-border-radius-tople
2024-09-30 14:14:44 UTC	4180	IN	Data Raw: 2d 67 72 6f 75 70 2e 69 6e 66 6f 20 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 2c 0a 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 2e 69 6e 66 6f 20 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 61 38 37 61 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 39 65 64 66 37 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 38 37 61 64 3b 0a 7d 0a 69 6e 70 75 74 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 2c 0a 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 2c 0a 73 65 6c 65 63 74 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 39 34 61 34 38 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a Data Ascii: -group.info .input-prepend .add-on,.control-group.info .input-append .add-on { color: #3a87ad; background-color: #d9edf7; border-color: #3a87ad;}input:focus:invalid,textarea:focus:invalid,select:focus:invalid { color: #b94a48; border-color:
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 34 70 78 20 34 70 78 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 61 64 64 2d 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 69 6e 70 75 74 2d 70 72 65 70 65 6e 64 2e 69 6e 70 75 74 2d 61 70 70 65 6e 64 20 2e 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 20 30 20 30 20 34 70 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 20 30 20 30 20 34 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 20 30 20 30 20 34 70 78 3b Data Ascii: 0; border-radius: 0 4px 4px 0;}.input-prepend.input-append .add-on:first-child,.input-prepend.input-append .btn:first-child { margin-right: -1px; -webkit-border-radius: 4px 0 0 4px; -moz-border-radius: 4px 0 0 4px; border-radius: 4px 0 0 4px;
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 2f 2a 20 49 45 37 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 68 61 63 6b 20 2a 2f 0a 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 33 65 6d 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 20 2b 20 2e 62 74 6e 2d 67 72 6f 75 70 20 7b 0a Data Ascii: tive; display: inline-block; display: inline; / IE7 inline-block hack / zoom: 1; font-size: 0; vertical-align: middle; white-space: nowrap; margin-left: .3em;}.btn-group:first-child { margin-left: 0;}.btn-group + .btn-group {
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 74 6f 70 20 2e 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2c 0a 2e 6e 61 76 62 61 72 2d 73 74 61 74 69 63 2d 74 6f 70 20 2e 6e 61 76 62 61 72 2d 69 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 30 20 31 70 78 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 6e 61 76 62 61 72 2d 69 6e 6e 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 20 30 20 30 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 74 6f 70 20 2e 6e 61 76 62 61 72 2d 69 6e 6e 65 72 2c 0a 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 6e 61 76 62 61 72 2d 69 6e 6e 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 Data Ascii: gin-bottom: 0;}.navbar-fixed-top .navbar-inner,.navbar-static-top .navbar-inner { border-width: 0 0 1px;}.navbar-fixed-bottom .navbar-inner { border-width: 1px 0 0;}.navbar-fixed-top .navbar-inner,.navbar-fixed-bottom .navbar-inner { padding
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 61 2e 74 68 75 6d 62 6e 61 69 6c 3a 68 6f 76 65 72 2c 0a 61 2e 74 68 75 6d 62 6e 61 69 6c 3a 66 6f 63 75 73 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 38 38 63 63 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 20 31 30 35 2c 20 32 31 34 2c 20 30 2e 32 35 29 3b 0a 20 Data Ascii: s ease-in-out; -moz-transition: all 0.2s ease-in-out; -o-transition: all 0.2s ease-in-out; transition: all 0.2s ease-in-out;}a.thumbnail:hover,a.thumbnail:focus { border-color: #0088cc; -webkit-box-shadow: 0 1px 4px rgba(0, 105, 214, 0.25);
2024-09-30 14:14:44 UTC	13211	IN	Data Raw: 3b 0a 7d 0a 2e 70 6f 70 6f 76 65 72 2d 74 69 74 6c 65 3a 65 6d 70 74 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 70 6f 70 6f 76 65 72 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 34 70 78 3b 0a 7d 0a 2e 70 6f 70 6f 76 65 72 20 2e 61 72 72 6f 77 2c 0a 2e 70 6f 70 6f 76 65 72 20 2e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 7d 0a 2e 70 6f 70 6f 76 65 Data Ascii: ;}.popover-title:empty { display: none;}.popover-content { padding: 9px 14px;}.popover .arrow,.popover .arrow:after { position: absolute; display: block; width: 0; height: 0; border-color: transparent; border-style: solid;}.popove

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49720	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	646	OUT	GET /spa/assets/font-awesome-4.4.0/css/font-awesome.css HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	243	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 32594 Connection: Close
2024-09-30 14:14:44 UTC	16141	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 34 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 0a Data Ascii: /! Font Awesome 4.4.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwesome';
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 66 72 6f 77 6e 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 39 22 3b 0a 7d 0a 2e 66 61 2d 6d 65 68 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 61 22 3b 0a 7d 0a 2e 66 61 2d 67 61 6d 65 70 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 62 22 3b 0a 7d 0a 2e 66 61 2d 6b 65 79 62 6f 61 72 64 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 63 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 67 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 64 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 67 2d 63 68 65 63 6b 65 72 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 Data Ascii: frown-o:before { content: "\f119";}.fa-meh-o:before { content: "\f11a";}.fa-gamepad:before { content: "\f11b";}.fa-keyboard-o:before { content: "\f11c";}.fa-flag-o:before { content: "\f11d";}.fa-flag-checkered:before { content: "\f11
2024-09-30 14:14:44 UTC	69	IN	Data Raw: 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 37 65 22 3b 0a 7d 0a 2e 66 61 2d 66 6f 6e 74 69 63 6f 6e 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 38 30 22 3b 0a 7d 0a Data Ascii: { content: "\f27e";}.fa-fonticons:before { content: "\f280";}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49721	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	628	OUT	GET /spa/assets/vex-2.3.2/css/vex.css HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	242	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 5419 Connection: Close
2024-09-30 14:14:44 UTC	5419	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 76 65 78 2d 66 61 64 65 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 20 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 76 65 78 2d 66 61 64 65 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 20 7d 0a 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 76 65 78 2d 66 61 64 65 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 7d 0a 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 20 7d 0a 0a 40 2d Data Ascii: @keyframes vex-fadein { 0% { opacity: 0; } 100% { opacity: 1; } }@-webkit-keyframes vex-fadein { 0% { opacity: 0; } 100% { opacity: 1; } }@-moz-keyframes vex-fadein { 0% { opacity: 0; } 100% { opacity: 1; } }@-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49722	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	669	OUT	GET /spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	242	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 6210 Connection: Close
2024-09-30 14:14:44 UTC	6210	IN	Data Raw: 62 6f 64 79 2e 76 65 78 2d 6f 70 65 6e 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 76 65 78 2e 76 65 78 2d 74 68 65 6d 65 2d 65 6e 63 68 61 6e 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 36 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 36 30 70 78 3b 20 7d 0a 20 20 2e 76 65 78 20 2e 76 65 78 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 0a 20 20 7d 0a 20 20 2e 76 65 78 2e 76 65 78 2d 74 68 65 6d 65 2d 65 6e 63 68 61 6e 74 20 2e 76 65 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 2f 2a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 Data Ascii: body.vex-open { overflow: auto;}.vex.vex-theme-enchant { padding-top: 160px; padding-bottom: 160px; } .vex .vex-overlay { background-color: rgba(0, 0, 0, 0.8); } .vex.vex-theme-enchant .vex-content { /*font-family: "Helvetica Neue",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49718	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	646	OUT	GET /style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	243	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 11248 Connection: Close
2024-09-30 14:14:44 UTC	8701	IN	Data Raw: 2f 2a 20 47 4c 4f 42 41 4c 20 2a 2f 0a 66 6f 72 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 32 65 36 65 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 66 38 32 39 31 3b 0a 7d 0a 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 Data Ascii: /* GLOBAL */form { margin-bottom: 0;}body { background: #e2e6e9; background-repeat: repeat; font-family: 'Roboto', helvetica, arial, sans-serif; color: #6f8291;}input, button, select, textarea { font-family: 'Roboto', helvetica, arial, sa
2024-09-30 14:14:44 UTC	2547	IN	Data Raw: 65 3b 0a 7d 0a 61 2e 73 71 75 61 72 65 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 72 6b 64 6f 77 6e 2d 74 65 78 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 6d 61 72 6b 64 6f 77 6e 2d 74 65 78 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 72 6b 64 6f 77 6e 2d 68 65 6c 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 41 46 42 32 42 33 3b 0a 7d 0a 2e 6d 61 72 6b 64 6f 77 6e 2d 74 65 78 74 2d 63 6f 6e 74 61 69 6e Data Ascii: e;}a.square { outline: none;}.markdown-text-container { position: relative; display: inline-block;}.markdown-text-container .markdown-help { position: absolute; right: 0; text-decoration: none; color: #AFB2B3;}.markdown-text-contain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49717	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	608	OUT	GET /assets/jquery-2.1.0.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:44 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:44 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 83615 Connection: Close
2024-09-30 14:14:44 UTC	16127	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 Data Ascii: /! jQuery v2.1.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wind
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 6e 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6c 6f 63 61 74 69 6f 6e 26 26 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 Data Ascii: oLowerCase(),function(b){var c;do if(c=n?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c===a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.has
2024-09-30 14:14:44 UTC	9033	IN	Data Raw: 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 4d 2e 67 65 74 28 74 68 69 73 2c 64 29 3b 4d 2e 73 65 74 28 74 68 69 73 2c 64 2c 62 29 2c 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 4d 2e 73 65 74 28 74 68 69 73 2c 61 2c 62 29 7d 29 7d 2c 6e 75 6c 6c 2c 62 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 61 29 7d 29 7d 7d 29 2c 6f 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 72 Data Ascii: is.each(function(){var c=M.get(this,d);M.set(this,d,b),-1!==a.indexOf("-")&&void 0!==c&&M.set(this,a,b)})},null,b,arguments.length>1,null,!0)},removeData:function(a){return this.each(function(){M.remove(this,a)})}}),o.extend({queue:function(a,b,c){var d;r
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 22 6d 6f 75 73 65 6f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6f 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 61 5d 3d 7b 64 65 6c 65 67 61 74 65 54 79 70 65 3a 62 2c 62 69 6e 64 54 79 70 65 3a 62 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 2c 64 3d 74 68 69 73 2c 65 3d 61 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 2c 66 3d 61 2e 68 61 6e 64 6c 65 4f 62 6a 3b 72 65 74 75 72 6e 28 21 65 7c 7c 65 21 3d 3d 64 26 26 21 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 2c 65 29 29 26 26 28 61 2e 74 79 70 65 3d 66 2e 6f 72 69 67 54 79 70 65 2c 63 3d 66 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e Data Ascii: ter:"mouseover",mouseleave:"mouseout"},function(a,b){o.event.special[a]={delegateType:b,bindType:b,handle:function(a){var c,d=this,e=a.relatedTarget,f=a.handleObj;return(!e\|\|e!==d&&!o.contains(d,e))&&(a.type=f.origType,c=f.handler.apply(this,arguments),a.
2024-09-30 14:14:44 UTC	16384	IN	Data Raw: 22 3d 3d 3d 6a 26 26 22 6e 6f 6e 65 22 3d 3d 3d 6f 2e 63 73 73 28 61 2c 22 66 6c 6f 61 74 22 29 26 26 28 6d 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 29 29 2c 63 2e 6f 76 65 72 66 6c 6f 77 26 26 28 6d 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 6b 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 2e 6f 76 65 72 66 6c 6f 77 3d 63 2e 6f 76 65 72 66 6c 6f 77 5b 30 5d 2c 6d 2e 6f 76 65 72 66 6c 6f 77 58 3d 63 2e 6f 76 65 72 66 6c 6f 77 5b 31 5d 2c 6d 2e 6f 76 65 72 66 6c 6f 77 59 3d 63 2e 6f 76 65 72 66 6c 6f 77 5b 32 5d 7d 29 29 3b 66 6f 72 28 64 20 69 6e 20 62 29 69 66 28 65 3d 62 5b 64 5d 2c 4e 62 2e 65 78 65 63 28 65 29 29 7b 69 66 28 64 65 6c 65 74 65 20 62 5b 64 5d 2c 66 3d 66 7c 7c 22 74 6f 67 67 6c 65 Data Ascii: "===j&&"none"===o.css(a,"float")&&(m.display="inline-block")),c.overflow&&(m.overflow="hidden",k.always(function(){m.overflow=c.overflow[0],m.overflowX=c.overflow[1],m.overflowY=c.overflow[2]}));for(d in b)if(e=b[d],Nb.exec(e)){if(delete b[d],f=f\|\|"toggle
2024-09-30 14:14:44 UTC	9303	IN	Data Raw: 61 3e 30 3f 34 3a 30 2c 6a 3d 61 3e 3d 32 30 30 26 26 33 30 30 3e 61 7c 7c 33 30 34 3d 3d 3d 61 2c 66 26 26 28 75 3d 75 63 28 6b 2c 76 2c 66 29 29 2c 75 3d 76 63 28 6b 2c 75 2c 76 2c 6a 29 2c 6a 3f 28 6b 2e 69 66 4d 6f 64 69 66 69 65 64 26 26 28 77 3d 76 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 22 29 2c 77 26 26 28 6f 2e 6c 61 73 74 4d 6f 64 69 66 69 65 64 5b 64 5d 3d 77 29 2c 77 3d 76 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 65 74 61 67 22 29 2c 77 26 26 28 6f 2e 65 74 61 67 5b 64 5d 3d 77 29 29 2c 32 30 34 3d 3d 3d 61 7c 7c 22 48 45 41 44 22 3d 3d 3d 6b 2e 74 79 70 65 3f 78 3d 22 6e 6f 63 6f 6e 74 65 6e 74 22 3a 33 30 34 3d 3d 3d 61 3f 78 3d 22 6e 6f 74 6d 6f 64 69 66 69 65 64 Data Ascii: a>0?4:0,j=a>=200&&300>a\|\|304===a,f&&(u=uc(k,v,f)),u=vc(k,u,v,j),j?(k.ifModified&&(w=v.getResponseHeader("Last-Modified"),w&&(o.lastModified[d]=w),w=v.getResponseHeader("etag"),w&&(o.etag[d]=w)),204===a\|\|"HEAD"===k.type?x="nocontent":304===a?x="notmodified

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49723	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	616	OUT	GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 16410 Connection: Close
2024-09-30 14:14:45 UTC	16127	IN	Data Raw: 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 0a 2f 2f 20 20 20 20 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 31 35 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 Data Ascii: // Underscore.js 1.8.3// http://underscorejs.org// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(){function n(n){function t(t,r
2024-09-30 14:14:45 UTC	283	IN	Data Raw: 61 70 70 65 64 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 72 61 70 70 65 64 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 2b 74 68 69 73 2e 5f 77 72 61 70 70 65 64 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e Data Ascii: apped,arguments))}}),m.prototype.value=function(){return this._wrapped},m.prototype.valueOf=m.prototype.toJSON=m.prototype.value,m.prototype.toString=function(){return""+this._wrapped},"function"==typeof define&&define.amd&&define("underscore",[],function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49724	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:44 UTC	665	OUT	GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 64547 Connection: Close
2024-09-30 14:14:45 UTC	16127	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 20 76 32 2e 33 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 74 77 69 74 74 65 72 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 6a 61 76 61 73 63 72 69 70 74 2e 68 74 6d 6c 23 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 Data Ascii: /* =================================================== * bootstrap-transition.js v2.3.1 * http://twitter.github.com/bootstrap/javascript.html#transitions * =================================================== * Copyright 2012 Twitter, Inc. * * Licens
2024-09-30 14:14:45 UTC	16384	IN	Data Raw: 65 27 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 27 20 2b 20 74 61 72 67 65 74 20 2b 20 27 22 5d 2c 27 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2b 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 20 2b 20 27 5b 68 72 65 66 3d 22 27 20 2b 20 74 61 72 67 65 74 20 2b 20 27 22 5d 27 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 20 3d 20 24 28 73 65 6c 65 63 74 6f 72 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2e 70 61 72 65 6e 74 28 27 6c 69 27 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 Data Ascii: e')// .removeClass('active')// selector = this.selector// + '[data-target="' + target + '"],'// + this.selector + '[href="' + target + '"]'// active = $(selector)// .parent('li')//
2024-09-30 14:14:45 UTC	16384	IN	Data Raw: 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 24 2e 66 6e 2e 74 6f 6f 6c 74 69 70 2e 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 7b 0a 0a 2f 2f 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 50 6f 70 6f 76 65 72 0a 0a 2f 2f 20 20 20 2c 20 73 65 74 43 6f 6e 74 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 2f 2f 20 20 20 20 20 20 20 76 61 72 20 24 74 69 70 20 3d 20 74 68 69 73 2e 74 69 70 28 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 2c 20 74 69 74 6c 65 20 3d 20 74 68 69 73 2e 67 65 74 54 69 74 6c 65 28 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 2c 20 63 6f 6e 74 65 6e 74 20 3d 20 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 28 29 0a 0a 2f 2f 20 20 20 20 20 20 20 24 74 69 70 2e 66 69 6e Data Ascii: r.prototype = $.extend({}, $.fn.tooltip.Constructor.prototype, {// constructor: Popover// , setContent: function () {// var $tip = this.tip()// , title = this.getTitle()// , content = this.getContent()// $tip.fin
2024-09-30 14:14:45 UTC	15652	IN	Data Raw: 73 2e 64 61 74 61 28 29 0a 2f 2f 20 20 20 20 20 24 74 68 69 73 5b 24 28 74 61 72 67 65 74 29 2e 68 61 73 43 6c 61 73 73 28 27 69 6e 27 29 20 3f 20 27 61 64 64 43 6c 61 73 73 27 20 3a 20 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 5d 28 27 63 6f 6c 6c 61 70 73 65 64 27 29 0a 2f 2f 20 20 20 20 20 24 28 74 61 72 67 65 74 29 2e 63 6f 6c 6c 61 70 73 65 28 6f 70 74 69 6f 6e 29 0a 2f 2f 20 20 20 7d 29 0a 0a 2f 2f 20 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 3b 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 20 76 32 2e 33 2e 31 0a 20 2a 20 68 74 74 70 Data Ascii: s.data()// $this[$(target).hasClass('in') ? 'addClass' : 'removeClass']('collapsed')// $(target).collapse(option)// })// }(window.jQuery);/* ========================================================== * bootstrap-carousel.js v2.3.1 * http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49725	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	611	OUT	GET /assets/jquery.tinysort.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3483 Connection: Close
2024-09-30 14:14:45 UTC	3483	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 6f 3d 21 31 2c 64 3d 6e 75 6c 6c 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 2c 6a 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 71 3d 4d 61 74 68 2e 6d 69 6e 2c 6c 3d 2f 28 2d 3f 5c 64 2b 5c 2e 3f 5c 64 2a 29 24 2f 67 2c 67 2c 61 3d 5b 5d 2c 68 2c 6d 2c 74 3d 39 34 37 32 2c 66 3d 7b 7d 2c 63 3b 69 66 28 21 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 66 6f 72 28 76 61 72 20 76 3d 30 2c 73 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 76 3c 73 3b 76 2b 2b 29 7b 69 66 28 74 68 69 73 5b 76 5d 3d 3d 77 29 7b 72 65 74 75 72 6e 20 76 7d 7d 72 65 74 75 72 6e 20 2d 31 7d 7d 66 6f 72 28 76 61 72 20 70 Data Ascii: (function(b){var o=!1,d=null,u=parseFloat,j=String.fromCharCode,q=Math.min,l=/(-?\d+\.?\d*)$/g,g,a=[],h,m,t=9472,f={},c;if(!Array.indexOf){Array.prototype.indexOf=function(w){for(var v=0,s=this.length;v<s;v++){if(this[v]==w){return v}}return -1}}for(var p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49726	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	629	OUT	GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3515 Connection: Close
2024-09-30 14:14:45 UTC	3515	IN	Data Raw: 2f 2a 21 0a 09 41 75 74 6f 73 69 7a 65 20 33 2e 30 2e 31 36 0a 09 6c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 61 75 74 6f 73 69 7a 65 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6d 6f 64 75 6c 65 22 5d 2c 74 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 74 28 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 7b Data Ascii: /!Autosize 3.0.16license: MIThttp://www.jacklmoore.com/autosize/!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49727	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	613	OUT	GET /spa/assets/jquery.base64.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1782 Connection: Close
2024-09-30 14:14:45 UTC	1782	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 51 75 65 72 79 2e 62 61 73 65 36 34 3d 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 5f 50 41 44 43 48 41 52 3d 22 3d 22 2c 5f 41 4c 50 48 41 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 5f 56 45 52 53 49 4f 4e 3d 22 31 2e 30 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 7b 76 61 72 20 69 64 78 3d 5f 41 4c 50 48 41 2e 69 6e 64 65 78 4f 66 28 73 2e 63 68 61 72 41 74 28 69 29 29 3b 69 66 28 69 64 78 3d 3d 3d 2d 31 29 7b 74 68 72 6f 77 22 43 61 6e 6e 6f 74 20 64 65 63 6f 64 65 20 62 61 73 65 36 34 22 7d 72 65 74 75 72 6e 20 Data Ascii: "use strict";jQuery.base64=(function($){var _PADCHAR="=",_ALPHA="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",_VERSION="1.0";function _getbyte64(s,i){var idx=_ALPHA.indexOf(s.charAt(i));if(idx===-1){throw"Cannot decode base64"}return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49728	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	612	OUT	GET /spa/assets/moment-2.9.0.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:45 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:45 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 34737 Connection: Close
2024-09-30 14:14:45 UTC	16127	IN	Data Raw: 2f 2f 21 20 6d 6f 6d 65 6e 74 2e 6a 73 0a 2f 2f 21 20 76 65 72 73 69 6f 6e 20 3a 20 32 2e 39 2e 30 0a 2f 2f 21 20 61 75 74 68 6f 72 73 20 3a 20 54 69 6d 20 57 6f 6f 64 2c 20 49 73 6b 72 65 6e 20 43 68 65 72 6e 65 76 2c 20 4d 6f 6d 65 6e 74 2e 6a 73 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2f 2f 21 20 6c 69 63 65 6e 73 65 20 3a 20 4d 49 54 0a 2f 2f 21 20 6d 6f 6d 65 6e 74 6a 73 2e 63 6f 6d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 2c 63 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 6e 75 6c 6c 21 3d 62 3f 62 3a 63 3b 64 65 66 61 75 Data Ascii: //! moment.js//! version : 2.9.0//! authors : Tim Wood, Iskren Chernev, Moment.js contributors//! license : MIT//! momentjs.com(function(a){function b(a,b,c){switch(arguments.length){case 2:return null!=a?a:b;case 3:return null!=a?a:null!=b?b:c;defau
2024-09-30 14:14:45 UTC	16384	IN	Data Raw: 77 65 65 6b 64 61 79 73 53 68 6f 72 74 28 74 68 69 73 2c 61 29 7d 2c 64 64 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 77 65 65 6b 64 61 79 73 28 74 68 69 73 2c 61 29 7d 2c 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 65 65 6b 28 29 7d 2c 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 6f 57 65 65 6b 28 29 7d 2c 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 79 65 61 72 28 29 25 31 30 30 2c 32 29 7d 2c 59 59 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 79 65 61 72 28 29 2c 34 29 7d 2c 59 59 59 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: weekdaysShort(this,a)},dddd:function(a){return this.localeData().weekdays(this,a)},w:function(){return this.week()},W:function(){return this.isoWeek()},YY:function(){return r(this.year()%100,2)},YYYY:function(){return r(this.year(),4)},YYYYY:function(){re
2024-09-30 14:14:45 UTC	2226	IN	Data Raw: 6e 64 73 2d 3d 63 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 64 61 79 73 2d 3d 63 2e 5f 64 61 79 73 2c 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 2d 3d 63 2e 5f 6d 6f 6e 74 68 73 2c 74 68 69 73 2e 5f 62 75 62 62 6c 65 28 29 2c 74 68 69 73 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 7a 28 61 29 2c 74 68 69 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 22 73 22 5d 28 29 7d 2c 61 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 69 66 28 61 3d 7a 28 61 29 2c 22 6d 6f 6e 74 68 22 3d 3d 3d 61 7c 7c 22 79 65 61 72 22 3d 3d 3d 61 29 72 65 74 75 72 6e 20 62 3d 74 68 69 73 2e 5f 64 61 79 73 2b 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2f 38 36 34 65 35 2c 63 3d 74 68 69 73 2e 5f Data Ascii: nds-=c._milliseconds,this._days-=c._days,this._months-=c._months,this._bubble(),this},get:function(a){return a=z(a),this[a.toLowerCase()+"s"]()},as:function(a){var b,c;if(a=z(a),"month"===a\|\|"year"===a)return b=this._days+this._milliseconds/864e5,c=this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49732	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	611	OUT	GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 25965 Connection: Close
2024-09-30 14:14:46 UTC	16127	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 40 70 72 65 73 65 72 76 65 20 46 61 73 74 43 6c 69 63 6b 3a 20 70 6f 6c 79 66 69 6c 6c 20 74 6f 20 72 65 6d 6f 76 65 20 63 6c 69 63 6b 20 64 65 6c 61 79 73 20 6f 6e 20 62 72 6f 77 73 65 72 73 20 77 69 74 68 20 74 6f 75 63 68 20 55 49 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 63 6f 64 69 6e 67 73 74 61 6e 64 61 72 64 20 66 74 6c 61 62 73 2d 6a 73 76 32 0a 09 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 54 68 65 20 46 69 6e 61 6e 63 69 61 6c 20 54 69 6d 65 73 20 4c 69 6d 69 74 65 64 20 5b 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 5d 0a 09 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 73 65 65 20 4c 49 Data Ascii: ;(function () {'use strict';/** * @preserve FastClick: polyfill to remove click delays on browsers with touch UIs. * * @codingstandard ftlabs-jsv2 * @copyright The Financial Times Limited [All Rights Reserved] * @license MIT License (see LI
2024-09-30 14:14:46 UTC	9838	IN	Data Raw: 65 76 65 6e 74 20 74 61 72 67 65 74 20 69 73 20 63 68 65 63 6b 65 64 21 0a 09 09 2f 2f 20 53 65 65 20 69 73 73 75 65 20 23 35 37 3b 20 61 6c 73 6f 20 66 69 6c 65 64 20 61 73 20 72 64 61 72 3a 2f 2f 31 33 30 34 38 35 38 39 20 2e 0a 09 09 69 66 20 28 64 65 76 69 63 65 49 73 49 4f 53 57 69 74 68 42 61 64 54 61 72 67 65 74 29 20 7b 0a 09 09 09 74 6f 75 63 68 20 3d 20 65 76 65 6e 74 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3b 0a 0a 09 09 09 2f 2f 20 49 6e 20 63 65 72 74 61 69 6e 20 63 61 73 65 73 20 61 72 67 75 6d 65 6e 74 73 20 6f 66 20 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 20 63 61 6e 20 62 65 20 6e 65 67 61 74 69 76 65 2c 20 73 6f 20 70 72 65 76 65 6e 74 20 73 65 74 74 69 6e 67 20 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 20 74 6f 20 6e Data Ascii: event target is checked!// See issue #57; also filed as rdar://13048589 .if (deviceIsIOSWithBadTarget) {touch = event.changedTouches[0];// In certain cases arguments of elementFromPoint can be negative, so prevent setting targetElement to n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49730	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	648	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 15863 Connection: Close
2024-09-30 14:14:46 UTC	15863	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 31 2b 43 6f 6d 6d 6f 6e 4a 53 20 2d 20 32 30 31 34 2d 30 39 2d 31 37 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 Data Ascii: /! jQuery UI - v1.11.1+CommonJS - 2014-09-17 http://jqueryui.com* Includes: widget.js* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */(function( factory ) {if ( typeof define === "function" && define.amd ) {// AMD. Re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49731	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	648	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 10729 Connection: Close
2024-09-30 14:14:46 UTC	10729	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 49 66 72 61 6d 65 20 54 72 61 6e 73 70 6f 72 74 20 50 6c 75 67 69 6e 20 31 2e 38 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6c 75 65 69 6d 70 2f 6a 51 75 65 72 79 2d 46 69 6c 65 2d 55 70 6c 6f 61 64 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 53 65 62 61 73 74 69 61 6e 20 54 73 63 68 61 6e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 62 6c 75 65 69 6d 70 2e 6e 65 74 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 2f 0a 0a 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 Data Ascii: /* * jQuery Iframe Transport Plugin 1.8.3 * https://github.com/blueimp/jQuery-File-Upload * * Copyright 2011, Sebastian Tschan * https://blueimp.net * * Licensed under the MIT license: * http://www.opensource.org/licenses/MIT // global define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49733	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	642	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 63354 Connection: Close
2024-09-30 14:14:46 UTC	16127	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 69 6c 65 20 55 70 6c 6f 61 64 20 50 6c 75 67 69 6e 20 35 2e 34 32 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6c 75 65 69 6d 70 2f 6a 51 75 65 72 79 2d 46 69 6c 65 2d 55 70 6c 6f 61 64 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 53 65 62 61 73 74 69 61 6e 20 54 73 63 68 61 6e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 62 6c 75 65 69 6d 70 2e 6e 65 74 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 2f 0a 0a 2f 2a 20 6a 73 68 69 6e 74 20 6e 6f 6d 65 6e 3a 66 61 6c 73 Data Ascii: /* * jQuery File Upload Plugin 5.42.3 * https://github.com/blueimp/jQuery-File-Upload * * Copyright 2010, Sebastian Tschan * https://blueimp.net * * Licensed under the MIT license: * http://www.opensource.org/licenses/MIT // jshint nomen:fals
2024-09-30 14:14:46 UTC	16384	IN	Data Raw: 67 72 65 73 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 65 64 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 74 61 6c 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 74 72 61 74 65 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 65 78 74 65 6e 64 28 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 2c 20 70 72 6f 67 72 65 73 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 20 3d 20 70 72 6f 67 72 65 73 73 3b 0a 20 20 20 Data Ascii: gress = { loaded: 0, total: 0, bitrate: 0 }; if (obj._progress) { $.extend(obj._progress, progress); } else { obj._progress = progress;
2024-09-30 14:14:46 UTC	16384	IN	Data Raw: 20 26 26 20 28 75 62 20 7c 7c 20 6d 63 73 20 3c 20 66 73 29 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 65 73 74 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 75 62 20 3e 3d 20 66 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 65 72 72 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 69 31 38 6e 28 27 75 70 6c 6f 61 64 65 64 Data Ascii: && (ub \|\| mcs < fs)) \|\| options.data) { return false; } if (testOnly) { return true; } if (ub >= fs) { file.error = options.i18n('uploaded
2024-09-30 14:14:46 UTC	14459	IN	Data Raw: 20 20 20 20 20 20 20 64 69 72 52 65 61 64 65 72 2e 72 65 61 64 45 6e 74 72 69 65 73 28 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 75 6c 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 73 75 6c 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 48 61 6e 64 6c 65 72 28 65 6e 74 72 69 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 74 72 69 65 73 20 3d 20 65 6e 74 72 69 65 73 2e 63 6f 6e 63 61 74 28 72 65 73 75 6c 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: dirReader.readEntries(function (results) { if (!results.length) { successHandler(entries); } else { entries = entries.concat(results);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49735	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:45 UTC	625	OUT	GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 7184 Connection: Close
2024-09-30 14:14:46 UTC	7184	IN	Data Raw: 2f 2a 21 20 76 65 78 2e 6a 73 2c 20 76 65 78 2e 64 69 61 6c 6f 67 2e 6a 73 20 32 2e 33 2e 32 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 20 62 3d 21 31 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3b 72 65 74 75 72 6e 20 64 3d 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 73 74 79 6c 65 2c 62 3d 76 6f 69 64 20 30 21 3d 3d 64 2e 61 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 4d 73 41 6e Data Ascii: /! vex.js, vex.dialog.js 2.3.2 /(function(){var a;a=function(a){var b,c;return b=!1,a(function(){var d;return d=(document.body\|\|document.documentElement).style,b=void 0!==d.animation\|\|void 0!==d.WebkitAnimation\|\|void 0!==d.MozAnimation\|\|void 0!==d.MsAn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49736	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	614	OUT	GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 23318 Connection: Close
2024-09-30 14:14:46 UTC	16127	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 72 2c 6e 29 7b 65 2e 42 61 63 6b 62 6f 6e 65 3d 74 28 65 2c 6e 2c 69 2c 72 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(t){var e=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(i,r,n){e.Backbone=t(e,n,i,r)})}else if(t
2024-09-30 14:14:46 UTC	7191	IN	Data Raw: 69 62 75 74 65 73 28 74 29 7d 65 6c 73 65 7b 74 68 69 73 2e 73 65 74 45 6c 65 6d 65 6e 74 28 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 65 6c 22 29 29 7d 7d 2c 5f 73 65 74 41 74 74 72 69 62 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 24 65 6c 2e 61 74 74 72 28 74 29 7d 7d 29 3b 65 2e 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 73 3d 48 5b 74 5d 3b 69 2e 64 65 66 61 75 6c 74 73 28 6e 7c 7c 28 6e 3d 7b 7d 29 2c 7b 65 6d 75 6c 61 74 65 48 54 54 50 3a 65 2e 65 6d 75 6c 61 74 65 48 54 54 50 2c 65 6d 75 6c 61 74 65 4a 53 4f 4e 3a 65 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 7d 29 3b 76 61 72 20 61 3d 7b 74 79 70 65 3a 73 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 7d 3b 69 66 28 21 6e 2e 75 72 6c 29 7b 61 2e Data Ascii: ibutes(t)}else{this.setElement(i.result(this,"el"))}},_setAttributes:function(t){this.$el.attr(t)}});e.sync=function(t,r,n){var s=H[t];i.defaults(n\|\|(n={}),{emulateHTTP:e.emulateHTTP,emulateJSON:e.emulateJSON});var a={type:s,dataType:"json"};if(!n.url){a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49737	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	613	OUT	GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	258	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 179266 Connection: Close
2024-09-30 14:14:46 UTC	16126	IN	Data Raw: 2f 2a 2a 21 0a 0a 20 40 6c 69 63 65 6e 73 65 0a 20 68 61 6e 64 6c 65 62 61 72 73 20 76 34 2e 37 2e 36 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 31 2d 32 30 31 39 20 62 79 20 59 65 68 75 64 61 20 4b 61 74 7a 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 Data Ascii: /**! @license handlebars v4.7.6Copyright (C) 2011-2019 by Yehuda KatzPermission is hereby granted, free of charge, to any person obtaining a copyof this software and associated documentation files (the "Software"), to dealin the Software without
2024-09-30 14:14:46 UTC	16384	IN	Data Raw: 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 09 20 20 69 73 45 6e 75 6d 3a 20 20 20 20 20 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 0a 09 20 20 67 65 74 44 65 73 63 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 0a 09 20 20 73 65 74 44 65 73 63 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 0a 09 20 20 73 65 74 44 65 73 63 73 3a 20 20 20 24 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2c 0a 09 20 20 67 65 74 4b 65 79 73 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 0a 09 20 20 67 65 74 4e 61 6d 65 73 3a 20 20 20 24 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 Data Ascii: bject.getPrototypeOf, isEnum: {}.propertyIsEnumerable, getDesc: $Object.getOwnPropertyDescriptor, setDesc: $Object.defineProperty, setDescs: $Object.defineProperties, getKeys: $Object.keys, getNames: $Object.getOwnProper
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 72 28 27 69 6e 6c 69 6e 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 2c 20 70 72 6f 70 73 2c 20 63 6f 6e 74 61 69 6e 65 72 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 76 61 72 20 72 65 74 20 3d 20 66 6e 3b 0a 09 20 20 20 20 69 66 20 28 21 70 72 6f 70 73 2e 70 61 72 74 69 61 6c 73 29 20 7b 0a 09 20 20 20 20 20 20 70 72 6f 70 73 2e 70 61 72 74 69 61 6c 73 20 3d 20 7b 7d 3b 0a 09 20 20 20 20 20 20 72 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 61 72 74 69 61 6c 73 20 73 74 61 63 6b 20 66 72 61 6d 65 20 70 72 69 6f 72 20 74 6f 20 65 78 65 63 2e 0a 09 20 20 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c Data Ascii: r('inline', function (fn, props, container, options) { var ret = fn; if (!props.partials) { props.partials = {}; ret = function (context, options) { // Create a new partials stack frame prior to exec. var original
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 20 3d 20 64 65 63 6c 61 72 65 64 42 6c 6f 63 6b 50 61 72 61 6d 73 20 7c 7c 20 30 3b 0a 09 20 20 72 65 74 75 72 6e 20 70 72 6f 67 3b 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 54 68 69 73 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 50 49 2c 20 74 68 65 72 65 66 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 64 65 74 61 69 6c 73 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 68 61 6e 67 65 64 2e 0a 09 20 2a 2f 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 50 61 72 74 69 61 6c 28 70 61 72 74 69 61 6c 2c 20 63 6f 6e 74 65 78 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 69 66 20 28 21 70 61 72 74 69 61 6c 29 20 7b 0a 09 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 6e Data Ascii: = declaredBlockParams \|\| 0; return prog;}/** * This is currently part of the official API, therefore implementation details should not be changed. */function resolvePartial(partial, context, options) { if (!partial) { if (options.n
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 20 3d 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 53 75 62 45 78 70 72 65 73 73 69 6f 6e 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 24 24 5b 24 30 20 2d 20 33 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 73 3a 20 24 24 5b 24 30 20 2d 20 32 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 61 73 68 3a 20 24 24 5b 24 30 20 2d 20 31 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 3a 20 79 79 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 Data Ascii: this.$ = { type: 'SubExpression', path: $$[$0 - 3], params: $$[$0 - 2], hash: $$[$0 - 1], loc: yy.locInfo(this
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 2c 20 37 38 3a 20 32 36 2c 20 37 39 3a 20 32 37 2c 20 38 30 3a 20 5b 31 2c 20 32 38 5d 2c 20 38 31 3a 20 5b 31 2c 20 32 39 5d 2c 20 38 32 3a 20 5b 31 2c 20 33 30 5d 2c 20 38 33 3a 20 5b 31 2c 20 33 31 5d 2c 20 38 34 3a 20 5b 31 2c 20 33 32 5d 2c 20 38 35 3a 20 5b 31 2c 20 33 34 5d 2c 20 38 36 3a 20 33 33 20 7d 2c 20 7b 20 33 33 3a 20 5b 31 2c 20 31 31 37 5d 20 7d 2c 20 7b 20 33 32 3a 20 31 31 38 2c 20 33 33 3a 20 5b 32 2c 20 36 32 5d 2c 20 37 34 3a 20 31 31 39 2c 20 37 35 3a 20 5b 31 2c 20 31 32 30 5d 20 7d 2c 20 7b 20 33 33 3a 20 5b 32 2c 20 35 39 5d 2c 20 36 35 3a 20 5b 32 2c 20 35 39 5d 2c 20 37 32 3a 20 5b 32 2c 20 35 39 5d 2c 20 37 35 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 30 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 31 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 32 Data Ascii: , 78: 26, 79: 27, 80: [1, 28], 81: [1, 29], 82: [1, 30], 83: [1, 31], 84: [1, 32], 85: [1, 34], 86: 33 }, { 33: [1, 117] }, { 32: 118, 33: [2, 62], 74: 119, 75: [1, 120] }, { 33: [2, 59], 65: [2, 59], 72: [2, 59], 75: [2, 59], 80: [2, 59], 81: [2, 59], 82
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 78 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 62 65 67 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 62 65 67 69 6e 28 63 6f 6e 64 69 74 69 6f 6e 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 64 69 74 69 6f 6e 53 74 61 63 6b 2e 70 75 73 68 28 63 6f 6e 64 69 74 69 6f 6e 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 70 53 74 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 70 6f 70 53 74 61 74 65 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: return this.lex(); } }, begin: function begin(condition) { this.conditionStack.push(condition); }, popState: function popState() { retur
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 68 69 6c 64 20 65 6c 65 6d 65 6e 74 73 2e 0a 09 20 20 61 63 63 65 70 74 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 20 61 63 63 65 70 74 41 72 72 61 79 28 61 72 72 61 79 29 20 7b 0a 09 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0a 09 20 20 20 20 20 20 74 68 69 73 2e 61 63 63 65 70 74 4b 65 79 28 61 72 72 61 79 2c 20 69 29 3b 0a 0a 09 20 20 20 20 20 20 69 66 20 28 21 61 72 72 61 79 5b 69 5d 29 20 7b 0a 09 20 20 20 20 20 20 20 20 61 72 72 61 79 2e 73 70 6c 69 63 65 28 69 2c 20 31 29 3b 0a 09 20 20 20 20 20 20 20 20 69 2d 2d 3b 0a 09 20 20 20 20 20 20 20 20 6c 2d 2d 3b 0a 09 20 20 20 20 20 20 7d 0a 09 20 20 20 20 7d 0a 09 20 20 7d 2c 0a 0a 09 20 20 Data Ascii: hild elements. acceptArray: function acceptArray(array) { for (var i = 0, l = array.length; i < l; i++) { this.acceptKey(array, i); if (!array[i]) { array.splice(i, 1); i--; l--; } } },
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 20 70 61 74 68 2e 6f 72 69 67 69 6e 61 6c 2c 20 5f 61 73 74 32 5b 27 64 65 66 61 75 6c 74 27 5d 2e 68 65 6c 70 65 72 73 2e 73 69 6d 70 6c 65 49 64 28 70 61 74 68 29 29 3b 0a 09 20 20 20 20 7d 0a 09 20 20 7d 2c 0a 0a 09 20 20 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 28 70 61 74 68 29 20 7b 0a 09 20 20 20 20 74 68 69 73 2e 61 64 64 44 65 70 74 68 28 70 61 74 68 2e 64 65 70 74 68 29 3b 0a 09 20 20 20 20 74 68 69 73 2e 6f 70 63 6f 64 65 28 27 67 65 74 43 6f 6e 74 65 78 74 27 2c 20 70 61 74 68 2e 64 65 70 74 68 29 3b 0a 0a 09 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 70 61 74 68 2e 70 61 72 74 73 5b 30 5d 2c 0a 09 20 20 20 20 20 20 20 20 73 63 6f 70 65 64 Data Ascii: s.length, path.original, _ast2['default'].helpers.simpleId(path)); } }, PathExpression: function PathExpression(path) { this.addDepth(path.depth); this.opcode('getContext', path.depth); var name = path.parts[0], scoped
2024-09-30 14:14:47 UTC	16384	IN	Data Raw: 20 20 7d 2c 0a 09 20 20 6d 65 72 67 65 53 6f 75 72 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 53 6f 75 72 63 65 28 76 61 72 44 65 63 6c 61 72 61 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 76 61 72 20 69 73 53 69 6d 70 6c 65 20 3d 20 74 68 69 73 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 69 73 53 69 6d 70 6c 65 2c 0a 09 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 6e 6c 79 20 3d 20 21 74 68 69 73 2e 66 6f 72 63 65 42 75 66 66 65 72 2c 0a 09 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 46 69 72 73 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 20 20 20 20 73 6f 75 72 63 65 53 65 65 6e 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 20 20 20 20 62 75 66 66 65 72 53 74 61 72 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 Data Ascii: }, mergeSource: function mergeSource(varDeclarations) { var isSimple = this.environment.isSimple, appendOnly = !this.forceBuffer, appendFirst = undefined, sourceSeen = undefined, bufferStart = undefined,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49739	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	648	OUT	GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1696 Connection: Close
2024-09-30 14:14:46 UTC	1696	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 66 75 5f 72 65 71 75 65 73 74 28 6d 65 74 68 6f 64 2c 20 70 61 74 68 2c 20 64 61 74 61 2c 20 63 61 6c 6c 62 61 63 6b 73 29 20 7b 0d 0a 20 20 6d 65 74 68 6f 64 20 3d 20 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 0d 0a 20 20 76 61 72 20 72 65 71 75 65 73 74 20 3d 20 7b 0d 0a 20 20 20 20 74 79 70 65 3a 20 6d 65 74 68 6f 64 2c 0d 0a 20 20 20 20 75 72 6c 3a 20 22 2f 61 70 69 2f 76 31 22 20 2b 20 70 61 74 68 0d 0a 20 20 7d 3b 0d 0a 0d 0a 20 20 69 66 28 64 61 74 61 29 20 7b 0d 0a 20 20 20 20 72 65 71 75 65 73 74 2e 64 61 74 61 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 69 66 28 24 2e 69 6e 41 72 72 61 79 28 6d 65 74 68 6f 64 2c 20 5b 22 70 Data Ascii: function sfu_request(method, path, data, callbacks) { method = method.toLowerCase(); var request = { type: method, url: "/api/v1" + path }; if(data) { request.data = JSON.stringify(data); } if($.inArray(method, ["p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49740	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	632	OUT	GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1845 Connection: Close
2024-09-30 14:14:46 UTC	1845	IN	Data Raw: 69 66 20 28 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 29 20 7b 0a 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 65 61 72 63 68 53 74 72 69 6e 67 2c 20 70 6f 73 69 74 69 6f 6e 29 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 20 3d 20 70 6f 73 69 74 69 6f 6e 20 7c 7c 20 30 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 73 65 61 72 63 68 53 74 72 69 6e 67 2c 20 70 6f 73 69 74 69 6f 6e 29 20 3d 3d 3d 20 70 6f 73 69 74 69 6f 6e 3b 0a 20 20 7d 3b 0a 7d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 24 28 27 23 66 6f 72 6d 2d 73 65 61 72 63 68 27 29 2e 73 75 Data Ascii: if (!String.prototype.startsWith) { String.prototype.startsWith = function(searchString, position) { position = position \|\| 0; return this.indexOf(searchString, position) === position; };}$(document).ready(function(){ $('#form-search').su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49738	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	618	OUT	GET /assets/modernizr/modernizr.custom.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:47 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3883 Connection: Close
2024-09-30 14:14:47 UTC	3883	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 32 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 63 73 73 74 72 61 6e 73 69 74 69 6f 6e 73 2d 68 69 73 74 6f 72 79 2d 69 6e 70 75 74 2d 69 6e 70 75 74 74 79 70 65 73 2d 77 65 62 73 6f 63 6b 65 74 73 2d 74 65 73 74 73 74 79 6c 65 73 2d 74 65 73 74 70 72 6f 70 2d 74 65 73 74 61 6c 6c 70 72 6f 70 73 2d 64 6f 6d 70 72 65 66 69 78 65 73 2d 66 6f 72 6d 73 5f 70 6c 61 63 65 68 6f 6c 64 65 72 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 Data Ascii: /* Modernizr 2.6.2 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-teststyles-testprop-testallprops-domprefixes-forms_placeholder */;window.Modernizr=function(a,b,c){fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49741	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:46 UTC	661	OUT	GET /images/logotext.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:46 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:46 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3994 Connection: Close
2024-09-30 14:14:46 UTC	3994	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49742	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:47 UTC	666	OUT	GET /images/icons/email_m.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:47 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:47 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1001 Connection: Close
2024-09-30 14:14:47 UTC	1001	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49744	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:47 UTC	665	OUT	GET /images/icons/lock_m.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1588 Connection: Close
2024-09-30 14:14:48 UTC	1588	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49745	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	373	OUT	GET /assets/jquery-2.1.0.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 83615 Connection: Close
2024-09-30 14:14:48 UTC	16127	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 Data Ascii: /! jQuery v2.1.0 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wind
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 6e 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 6c 6f 63 61 74 69 6f 6e 26 26 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 Data Ascii: oLowerCase(),function(b){var c;do if(c=n?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c===a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.has
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 4d 2e 67 65 74 28 74 68 69 73 2c 64 29 3b 4d 2e 73 65 74 28 74 68 69 73 2c 64 2c 62 29 2c 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 4d 2e 73 65 74 28 74 68 69 73 2c 61 2c 62 29 7d 29 7d 2c 6e 75 6c 6c 2c 62 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 61 29 7d 29 7d 7d 29 2c 6f 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 72 Data Ascii: is.each(function(){var c=M.get(this,d);M.set(this,d,b),-1!==a.indexOf("-")&&void 0!==c&&M.set(this,a,b)})},null,b,arguments.length>1,null,!0)},removeData:function(a){return this.each(function(){M.remove(this,a)})}}),o.extend({queue:function(a,b,c){var d;r
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 68 62 2c 22 22 29 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 2c 6f 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6f 2e 66 6e 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 6f 28 61 29 2c 67 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 68 3d 30 3b 67 3e 3d 68 3b 68 2b 2b 29 63 3d 68 3d 3d 3d 67 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e Data Ascii: tent.replace(hb,"")))}return this}}),o.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){o.fn[a]=function(a){for(var c,d=[],e=o(a),g=e.length-1,h=0;g>=h;h++)c=h===g?this:this.clon
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 20 61 26 26 61 2c 69 3d 30 2c 6a 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 66 28 6f 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 6f 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 29 29 7d 29 3b 69 66 28 68 29 66 6f 72 28 62 3d 28 61 7c 7c 22 22 29 2e 6d 61 74 63 68 28 45 29 7c 7c 5b 5d 3b 6a 3e 69 3b 69 2b 2b 29 69 66 28 63 3d 74 68 69 73 5b 69 5d 2c 64 3d 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 2e 63 6c 61 73 73 4e 61 6d 65 3f 28 22 20 22 2b 63 2e 63 6c 61 73 73 4e 61 6d 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 61 63 2c 22 20 22 29 3a 22 20 22 29 29 7b 66 3d 30 3b 77 Data Ascii: a&&a,i=0,j=this.length;if(o.isFunction(a))return this.each(function(b){o(this).addClass(a.call(this,b,this.className))});if(h)for(b=(a\|\|"").match(E)\|\|[];j>i;i++)if(c=this[i],d=1===c.nodeType&&(c.className?(" "+c.className+" ").replace(ac," "):" ")){f=0;w
2024-09-30 14:14:48 UTC	1952	IN	Data Raw: 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 21 3d 3d 55 26 26 28 65 3d 64 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 29 2c 63 3d 4b 63 28 66 29 2c 7b 74 6f 70 3a 65 2e 74 6f 70 2b 63 2e 70 61 67 65 59 4f 66 66 73 65 74 2d 62 2e 63 6c 69 65 6e 74 54 6f 70 2c 6c 65 66 74 3a 65 2e 6c 65 66 74 2b 63 2e 70 61 67 65 58 4f 66 66 73 65 74 2d 62 2e 63 6c 69 65 6e 74 4c 65 66 74 7d 29 3a 65 7d 2c 70 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 5b 30 5d 29 7b 76 61 72 20 61 2c 62 2c 63 3d 74 68 69 73 5b 30 5d 2c 64 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 3b 72 65 74 75 72 6e 22 66 69 78 65 64 22 3d 3d 3d 6f 2e 63 73 73 28 63 2c 22 70 6f 73 69 74 69 6f 6e 22 29 3f 62 3d 63 2e 67 65 Data Ascii: getBoundingClientRect!==U&&(e=d.getBoundingClientRect()),c=Kc(f),{top:e.top+c.pageYOffset-b.clientTop,left:e.left+c.pageXOffset-b.clientLeft}):e},position:function(){if(this[0]){var a,b,c=this[0],d={top:0,left:0};return"fixed"===o.css(c,"position")?b=c.ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49751	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	376	OUT	GET /assets/jquery.tinysort.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3483 Connection: Close
2024-09-30 14:14:48 UTC	3483	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 6f 3d 21 31 2c 64 3d 6e 75 6c 6c 2c 75 3d 70 61 72 73 65 46 6c 6f 61 74 2c 6a 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 71 3d 4d 61 74 68 2e 6d 69 6e 2c 6c 3d 2f 28 2d 3f 5c 64 2b 5c 2e 3f 5c 64 2a 29 24 2f 67 2c 67 2c 61 3d 5b 5d 2c 68 2c 6d 2c 74 3d 39 34 37 32 2c 66 3d 7b 7d 2c 63 3b 69 66 28 21 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 66 6f 72 28 76 61 72 20 76 3d 30 2c 73 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 76 3c 73 3b 76 2b 2b 29 7b 69 66 28 74 68 69 73 5b 76 5d 3d 3d 77 29 7b 72 65 74 75 72 6e 20 76 7d 7d 72 65 74 75 72 6e 20 2d 31 7d 7d 66 6f 72 28 76 61 72 20 70 Data Ascii: (function(b){var o=!1,d=null,u=parseFloat,j=String.fromCharCode,q=Math.min,l=/(-?\d+\.?\d*)$/g,g,a=[],h,m,t=9472,f={},c;if(!Array.indexOf){Array.prototype.indexOf=function(w){for(var v=0,s=this.length;v<s;v++){if(this[v]==w){return v}}return -1}}for(var p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49749	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	381	OUT	GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 16410 Connection: Close
2024-09-30 14:14:48 UTC	16127	IN	Data Raw: 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 0a 2f 2f 20 20 20 20 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 31 35 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 Data Ascii: // Underscore.js 1.8.3// http://underscorejs.org// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(){function n(n){function t(t,r
2024-09-30 14:14:48 UTC	283	IN	Data Raw: 61 70 70 65 64 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 72 61 70 70 65 64 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 2b 74 68 69 73 2e 5f 77 72 61 70 70 65 64 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e Data Ascii: apped,arguments))}}),m.prototype.value=function(){return this._wrapped},m.prototype.valueOf=m.prototype.toJSON=m.prototype.value,m.prototype.toString=function(){return""+this._wrapped},"function"==typeof define&&define.amd&&define("underscore",[],function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49748	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	430	OUT	GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 64547 Connection: Close
2024-09-30 14:14:48 UTC	16127	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 20 76 32 2e 33 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 74 77 69 74 74 65 72 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 6a 61 76 61 73 63 72 69 70 74 2e 68 74 6d 6c 23 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 Data Ascii: /* =================================================== * bootstrap-transition.js v2.3.1 * http://twitter.github.com/bootstrap/javascript.html#transitions * =================================================== * Copyright 2012 Twitter, Inc. * * Licens
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 65 27 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 73 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 27 20 2b 20 74 61 72 67 65 74 20 2b 20 27 22 5d 2c 27 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2b 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 20 2b 20 27 5b 68 72 65 66 3d 22 27 20 2b 20 74 61 72 67 65 74 20 2b 20 27 22 5d 27 0a 0a 2f 2f 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 20 3d 20 24 28 73 65 6c 65 63 74 6f 72 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 2e 70 61 72 65 6e 74 28 27 6c 69 27 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 Data Ascii: e')// .removeClass('active')// selector = this.selector// + '[data-target="' + target + '"],'// + this.selector + '[href="' + target + '"]'// active = $(selector)// .parent('li')//
2024-09-30 14:14:48 UTC	84	IN	Data Raw: 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 24 2e 66 6e 2e 74 6f 6f 6c 74 69 70 2e 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 7b 0a 0a 2f 2f 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: r.prototype = $.extend({}, $.fn.tooltip.Constructor.prototype, {// constructor
2024-09-30 14:14:48 UTC	16384	IN	Data Raw: 3a 20 50 6f 70 6f 76 65 72 0a 0a 2f 2f 20 20 20 2c 20 73 65 74 43 6f 6e 74 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 2f 2f 20 20 20 20 20 20 20 76 61 72 20 24 74 69 70 20 3d 20 74 68 69 73 2e 74 69 70 28 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 2c 20 74 69 74 6c 65 20 3d 20 74 68 69 73 2e 67 65 74 54 69 74 6c 65 28 29 0a 2f 2f 20 20 20 20 20 20 20 20 20 2c 20 63 6f 6e 74 65 6e 74 20 3d 20 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 28 29 0a 0a 2f 2f 20 20 20 20 20 20 20 24 74 69 70 2e 66 69 6e 64 28 27 2e 70 6f 70 6f 76 65 72 2d 74 69 74 6c 65 27 29 5b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 74 6d 6c 20 3f 20 27 68 74 6d 6c 27 20 3a 20 27 74 65 78 74 27 5d 28 74 69 74 6c 65 29 0a 2f 2f 20 20 20 20 20 20 20 24 74 69 70 2e 66 69 6e 64 28 27 Data Ascii: : Popover// , setContent: function () {// var $tip = this.tip()// , title = this.getTitle()// , content = this.getContent()// $tip.find('.popover-title')[this.options.html ? 'html' : 'text'](title)// $tip.find('
2024-09-30 14:14:48 UTC	15568	IN	Data Raw: 73 65 64 27 29 0a 2f 2f 20 20 20 20 20 24 28 74 61 72 67 65 74 29 2e 63 6f 6c 6c 61 70 73 65 28 6f 70 74 69 6f 6e 29 0a 2f 2f 20 20 20 7d 29 0a 0a 2f 2f 20 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 3b 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 20 76 32 2e 33 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 74 77 69 74 74 65 72 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 6a 61 76 61 73 63 72 69 70 74 2e 68 74 6d 6c 23 63 61 72 6f 75 73 65 6c 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: sed')// $(target).collapse(option)// })// }(window.jQuery);/* ========================================================== * bootstrap-carousel.js v2.3.1 * http://twitter.github.com/bootstrap/javascript.html#carousel * ========================

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49750	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	394	OUT	GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3515 Connection: Close
2024-09-30 14:14:48 UTC	3515	IN	Data Raw: 2f 2a 21 0a 09 41 75 74 6f 73 69 7a 65 20 33 2e 30 2e 31 36 0a 09 6c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 61 75 74 6f 73 69 7a 65 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6d 6f 64 75 6c 65 22 5d 2c 74 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 74 28 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 7b Data Ascii: /!Autosize 3.0.16license: MIThttp://www.jacklmoore.com/autosize/!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49752	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	378	OUT	GET /spa/assets/jquery.base64.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:48 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:48 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1782 Connection: Close
2024-09-30 14:14:48 UTC	1782	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 51 75 65 72 79 2e 62 61 73 65 36 34 3d 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 5f 50 41 44 43 48 41 52 3d 22 3d 22 2c 5f 41 4c 50 48 41 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 5f 56 45 52 53 49 4f 4e 3d 22 31 2e 30 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 7b 76 61 72 20 69 64 78 3d 5f 41 4c 50 48 41 2e 69 6e 64 65 78 4f 66 28 73 2e 63 68 61 72 41 74 28 69 29 29 3b 69 66 28 69 64 78 3d 3d 3d 2d 31 29 7b 74 68 72 6f 77 22 43 61 6e 6e 6f 74 20 64 65 63 6f 64 65 20 62 61 73 65 36 34 22 7d 72 65 74 75 72 6e 20 Data Ascii: "use strict";jQuery.base64=(function($){var _PADCHAR="=",_ALPHA="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",_VERSION="1.0";function _getbyte64(s,i){var idx=_ALPHA.indexOf(s.charAt(i));if(idx===-1){throw"Cannot decode base64"}return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 14:14:48 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25934 Date: Mon, 30 Sep 2024 14:14:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49754	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	377	OUT	GET /spa/assets/moment-2.9.0.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 34737 Connection: Close
2024-09-30 14:14:49 UTC	16127	IN	Data Raw: 2f 2f 21 20 6d 6f 6d 65 6e 74 2e 6a 73 0a 2f 2f 21 20 76 65 72 73 69 6f 6e 20 3a 20 32 2e 39 2e 30 0a 2f 2f 21 20 61 75 74 68 6f 72 73 20 3a 20 54 69 6d 20 57 6f 6f 64 2c 20 49 73 6b 72 65 6e 20 43 68 65 72 6e 65 76 2c 20 4d 6f 6d 65 6e 74 2e 6a 73 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2f 2f 21 20 6c 69 63 65 6e 73 65 20 3a 20 4d 49 54 0a 2f 2f 21 20 6d 6f 6d 65 6e 74 6a 73 2e 63 6f 6d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 2c 63 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 6e 75 6c 6c 21 3d 62 3f 62 3a 63 3b 64 65 66 61 75 Data Ascii: //! moment.js//! version : 2.9.0//! authors : Tim Wood, Iskren Chernev, Moment.js contributors//! license : MIT//! momentjs.com(function(a){function b(a,b,c){switch(arguments.length){case 2:return null!=a?a:b;case 3:return null!=a?a:null!=b?b:c;defau
2024-09-30 14:14:49 UTC	16384	IN	Data Raw: 77 65 65 6b 64 61 79 73 53 68 6f 72 74 28 74 68 69 73 2c 61 29 7d 2c 64 64 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 77 65 65 6b 64 61 79 73 28 74 68 69 73 2c 61 29 7d 2c 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 65 65 6b 28 29 7d 2c 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 6f 57 65 65 6b 28 29 7d 2c 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 79 65 61 72 28 29 25 31 30 30 2c 32 29 7d 2c 59 59 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 79 65 61 72 28 29 2c 34 29 7d 2c 59 59 59 59 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: weekdaysShort(this,a)},dddd:function(a){return this.localeData().weekdays(this,a)},w:function(){return this.week()},W:function(){return this.isoWeek()},YY:function(){return r(this.year()%100,2)},YYYY:function(){return r(this.year(),4)},YYYYY:function(){re
2024-09-30 14:14:49 UTC	2226	IN	Data Raw: 6e 64 73 2d 3d 63 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 74 68 69 73 2e 5f 64 61 79 73 2d 3d 63 2e 5f 64 61 79 73 2c 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 2d 3d 63 2e 5f 6d 6f 6e 74 68 73 2c 74 68 69 73 2e 5f 62 75 62 62 6c 65 28 29 2c 74 68 69 73 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 7a 28 61 29 2c 74 68 69 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 22 73 22 5d 28 29 7d 2c 61 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 69 66 28 61 3d 7a 28 61 29 2c 22 6d 6f 6e 74 68 22 3d 3d 3d 61 7c 7c 22 79 65 61 72 22 3d 3d 3d 61 29 72 65 74 75 72 6e 20 62 3d 74 68 69 73 2e 5f 64 61 79 73 2b 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2f 38 36 34 65 35 2c 63 3d 74 68 69 73 2e 5f Data Ascii: nds-=c._milliseconds,this._days-=c._days,this._months-=c._months,this._bubble(),this},get:function(a){return a=z(a),this[a.toLowerCase()+"s"]()},as:function(a){var b,c;if(a=z(a),"month"===a\|\|"year"===a)return b=this._days+this._milliseconds/864e5,c=this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49756	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	413	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 10729 Connection: Close
2024-09-30 14:14:49 UTC	10729	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 49 66 72 61 6d 65 20 54 72 61 6e 73 70 6f 72 74 20 50 6c 75 67 69 6e 20 31 2e 38 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6c 75 65 69 6d 70 2f 6a 51 75 65 72 79 2d 46 69 6c 65 2d 55 70 6c 6f 61 64 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 53 65 62 61 73 74 69 61 6e 20 54 73 63 68 61 6e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 62 6c 75 65 69 6d 70 2e 6e 65 74 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 2f 0a 0a 2f 2a 20 67 6c 6f 62 61 6c 20 64 65 66 69 6e 65 Data Ascii: /* * jQuery Iframe Transport Plugin 1.8.3 * https://github.com/blueimp/jQuery-File-Upload * * Copyright 2011, Sebastian Tschan * https://blueimp.net * * Licensed under the MIT license: * http://www.opensource.org/licenses/MIT // global define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49755	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	390	OUT	GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 7184 Connection: Close
2024-09-30 14:14:49 UTC	7184	IN	Data Raw: 2f 2a 21 20 76 65 78 2e 6a 73 2c 20 76 65 78 2e 64 69 61 6c 6f 67 2e 6a 73 20 32 2e 33 2e 32 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 20 62 3d 21 31 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3b 72 65 74 75 72 6e 20 64 3d 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 73 74 79 6c 65 2c 62 3d 76 6f 69 64 20 30 21 3d 3d 64 2e 61 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 2e 4d 73 41 6e Data Ascii: /! vex.js, vex.dialog.js 2.3.2 /(function(){var a;a=function(a){var b,c;return b=!1,a(function(){var d;return d=(document.body\|\|document.documentElement).style,b=void 0!==d.animation\|\|void 0!==d.WebkitAnimation\|\|void 0!==d.MozAnimation\|\|void 0!==d.MsAn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49758	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:48 UTC	413	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 15863 Connection: Close
2024-09-30 14:14:49 UTC	15863	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 31 2b 43 6f 6d 6d 6f 6e 4a 53 20 2d 20 32 30 31 34 2d 30 39 2d 31 37 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 Data Ascii: /! jQuery UI - v1.11.1+CommonJS - 2014-09-17 http://jqueryui.com* Includes: widget.js* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */(function( factory ) {if ( typeof define === "function" && define.amd ) {// AMD. Re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49757	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	376	OUT	GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 25965 Connection: Close
2024-09-30 14:14:49 UTC	16127	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 40 70 72 65 73 65 72 76 65 20 46 61 73 74 43 6c 69 63 6b 3a 20 70 6f 6c 79 66 69 6c 6c 20 74 6f 20 72 65 6d 6f 76 65 20 63 6c 69 63 6b 20 64 65 6c 61 79 73 20 6f 6e 20 62 72 6f 77 73 65 72 73 20 77 69 74 68 20 74 6f 75 63 68 20 55 49 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 63 6f 64 69 6e 67 73 74 61 6e 64 61 72 64 20 66 74 6c 61 62 73 2d 6a 73 76 32 0a 09 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 54 68 65 20 46 69 6e 61 6e 63 69 61 6c 20 54 69 6d 65 73 20 4c 69 6d 69 74 65 64 20 5b 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 5d 0a 09 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 73 65 65 20 4c 49 Data Ascii: ;(function () {'use strict';/** * @preserve FastClick: polyfill to remove click delays on browsers with touch UIs. * * @codingstandard ftlabs-jsv2 * @copyright The Financial Times Limited [All Rights Reserved] * @license MIT License (see LI
2024-09-30 14:14:49 UTC	9838	IN	Data Raw: 65 76 65 6e 74 20 74 61 72 67 65 74 20 69 73 20 63 68 65 63 6b 65 64 21 0a 09 09 2f 2f 20 53 65 65 20 69 73 73 75 65 20 23 35 37 3b 20 61 6c 73 6f 20 66 69 6c 65 64 20 61 73 20 72 64 61 72 3a 2f 2f 31 33 30 34 38 35 38 39 20 2e 0a 09 09 69 66 20 28 64 65 76 69 63 65 49 73 49 4f 53 57 69 74 68 42 61 64 54 61 72 67 65 74 29 20 7b 0a 09 09 09 74 6f 75 63 68 20 3d 20 65 76 65 6e 74 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3b 0a 0a 09 09 09 2f 2f 20 49 6e 20 63 65 72 74 61 69 6e 20 63 61 73 65 73 20 61 72 67 75 6d 65 6e 74 73 20 6f 66 20 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 20 63 61 6e 20 62 65 20 6e 65 67 61 74 69 76 65 2c 20 73 6f 20 70 72 65 76 65 6e 74 20 73 65 74 74 69 6e 67 20 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 20 74 6f 20 6e Data Ascii: event target is checked!// See issue #57; also filed as rdar://13048589 .if (deviceIsIOSWithBadTarget) {touch = event.changedTouches[0];// In certain cases arguments of elementFromPoint can be negative, so prevent setting targetElement to n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49761	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	407	OUT	GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 63354 Connection: Close
2024-09-30 14:14:49 UTC	16127	IN	Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 69 6c 65 20 55 70 6c 6f 61 64 20 50 6c 75 67 69 6e 20 35 2e 34 32 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 6c 75 65 69 6d 70 2f 6a 51 75 65 72 79 2d 46 69 6c 65 2d 55 70 6c 6f 61 64 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 53 65 62 61 73 74 69 61 6e 20 54 73 63 68 61 6e 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 62 6c 75 65 69 6d 70 2e 6e 65 74 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 2f 0a 0a 2f 2a 20 6a 73 68 69 6e 74 20 6e 6f 6d 65 6e 3a 66 61 6c 73 Data Ascii: /* * jQuery File Upload Plugin 5.42.3 * https://github.com/blueimp/jQuery-File-Upload * * Copyright 2010, Sebastian Tschan * https://blueimp.net * * Licensed under the MIT license: * http://www.opensource.org/licenses/MIT // jshint nomen:fals
2024-09-30 14:14:49 UTC	16384	IN	Data Raw: 67 72 65 73 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 61 64 65 64 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 74 61 6c 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 74 72 61 74 65 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 65 78 74 65 6e 64 28 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 2c 20 70 72 6f 67 72 65 73 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 5f 70 72 6f 67 72 65 73 73 20 3d 20 70 72 6f 67 72 65 73 73 3b 0a 20 20 20 Data Ascii: gress = { loaded: 0, total: 0, bitrate: 0 }; if (obj._progress) { $.extend(obj._progress, progress); } else { obj._progress = progress;
2024-09-30 14:14:49 UTC	16384	IN	Data Raw: 20 26 26 20 28 75 62 20 7c 7c 20 6d 63 73 20 3c 20 66 73 29 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 65 73 74 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 75 62 20 3e 3d 20 66 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 65 72 72 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 69 31 38 6e 28 27 75 70 6c 6f 61 64 65 64 Data Ascii: && (ub \|\| mcs < fs)) \|\| options.data) { return false; } if (testOnly) { return true; } if (ub >= fs) { file.error = options.i18n('uploaded
2024-09-30 14:14:49 UTC	14459	IN	Data Raw: 20 20 20 20 20 20 20 64 69 72 52 65 61 64 65 72 2e 72 65 61 64 45 6e 74 72 69 65 73 28 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 75 6c 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 73 75 6c 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 48 61 6e 64 6c 65 72 28 65 6e 74 72 69 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 74 72 69 65 73 20 3d 20 65 6e 74 72 69 65 73 2e 63 6f 6e 63 61 74 28 72 65 73 75 6c 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: dirReader.readEntries(function (results) { if (!results.length) { successHandler(entries); } else { entries = entries.concat(results);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49764	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	742	OUT	GET /favicon-32x32.png HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
2024-09-30 14:14:49 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1565 Connection: Close
2024-09-30 14:14:49 UTC	1565	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 e0 50 4c 54 45 00 00 00 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 Data Ascii: PNGIHDR DgAMAa cHRMz&u0`:pQ<PLTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49763	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	594	OUT	GET /manifest.json HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	235	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 491 Connection: Close
2024-09-30 14:14:49 UTC	491	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 45 6e 63 68 61 6e 74 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 45 6e 63 68 61 6e 74 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 35 31 32 78 35 Data Ascii: { "name": "Enchant", "short_name": "Enchant", "icons": [ { "src": "/android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { "src": "/android-chrome-512x5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49768	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	379	OUT	GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	257	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 23318 Connection: Close
2024-09-30 14:14:49 UTC	16127	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 2e 73 65 6c 66 3d 3d 3d 73 65 6c 66 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 6c 6f 62 61 6c 2e 67 6c 6f 62 61 6c 3d 3d 3d 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 6a 71 75 65 72 79 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 72 2c 6e 29 7b 65 2e 42 61 63 6b 62 6f 6e 65 3d 74 28 65 2c 6e 2c 69 2c 72 29 7d 29 7d 65 6c 73 65 20 69 66 28 74 Data Ascii: (function(t){var e=typeof self=="object"&&self.self===self&&self\|\|typeof global=="object"&&global.global===global&&global;if(typeof define==="function"&&define.amd){define(["underscore","jquery","exports"],function(i,r,n){e.Backbone=t(e,n,i,r)})}else if(t
2024-09-30 14:14:49 UTC	7191	IN	Data Raw: 69 62 75 74 65 73 28 74 29 7d 65 6c 73 65 7b 74 68 69 73 2e 73 65 74 45 6c 65 6d 65 6e 74 28 69 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 65 6c 22 29 29 7d 7d 2c 5f 73 65 74 41 74 74 72 69 62 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 24 65 6c 2e 61 74 74 72 28 74 29 7d 7d 29 3b 65 2e 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 73 3d 48 5b 74 5d 3b 69 2e 64 65 66 61 75 6c 74 73 28 6e 7c 7c 28 6e 3d 7b 7d 29 2c 7b 65 6d 75 6c 61 74 65 48 54 54 50 3a 65 2e 65 6d 75 6c 61 74 65 48 54 54 50 2c 65 6d 75 6c 61 74 65 4a 53 4f 4e 3a 65 2e 65 6d 75 6c 61 74 65 4a 53 4f 4e 7d 29 3b 76 61 72 20 61 3d 7b 74 79 70 65 3a 73 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 7d 3b 69 66 28 21 6e 2e 75 72 6c 29 7b 61 2e Data Ascii: ibutes(t)}else{this.setElement(i.result(this,"el"))}},_setAttributes:function(t){this.$el.attr(t)}});e.sync=function(t,r,n){var s=H[t];i.defaults(n\|\|(n={}),{emulateHTTP:e.emulateHTTP,emulateJSON:e.emulateJSON});var a={type:s,dataType:"json"};if(!n.url){a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49767	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	413	OUT	GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1696 Connection: Close
2024-09-30 14:14:49 UTC	1696	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 66 75 5f 72 65 71 75 65 73 74 28 6d 65 74 68 6f 64 2c 20 70 61 74 68 2c 20 64 61 74 61 2c 20 63 61 6c 6c 62 61 63 6b 73 29 20 7b 0d 0a 20 20 6d 65 74 68 6f 64 20 3d 20 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 0d 0a 20 20 76 61 72 20 72 65 71 75 65 73 74 20 3d 20 7b 0d 0a 20 20 20 20 74 79 70 65 3a 20 6d 65 74 68 6f 64 2c 0d 0a 20 20 20 20 75 72 6c 3a 20 22 2f 61 70 69 2f 76 31 22 20 2b 20 70 61 74 68 0d 0a 20 20 7d 3b 0d 0a 0d 0a 20 20 69 66 28 64 61 74 61 29 20 7b 0d 0a 20 20 20 20 72 65 71 75 65 73 74 2e 64 61 74 61 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 69 66 28 24 2e 69 6e 41 72 72 61 79 28 6d 65 74 68 6f 64 2c 20 5b 22 70 Data Ascii: function sfu_request(method, path, data, callbacks) { method = method.toLowerCase(); var request = { type: method, url: "/api/v1" + path }; if(data) { request.data = JSON.stringify(data); } if($.inArray(method, ["p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	49769	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	397	OUT	GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1845 Connection: Close
2024-09-30 14:14:49 UTC	1845	IN	Data Raw: 69 66 20 28 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 29 20 7b 0a 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 65 61 72 63 68 53 74 72 69 6e 67 2c 20 70 6f 73 69 74 69 6f 6e 29 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 20 3d 20 70 6f 73 69 74 69 6f 6e 20 7c 7c 20 30 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 73 65 61 72 63 68 53 74 72 69 6e 67 2c 20 70 6f 73 69 74 69 6f 6e 29 20 3d 3d 3d 20 70 6f 73 69 74 69 6f 6e 3b 0a 20 20 7d 3b 0a 7d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 24 28 27 23 66 6f 72 6d 2d 73 65 61 72 63 68 27 29 2e 73 75 Data Ascii: if (!String.prototype.startsWith) { String.prototype.startsWith = function(searchString, position) { position = position \|\| 0; return this.indexOf(searchString, position) === position; };}$(document).ready(function(){ $('#form-search').su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49766	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 14:14:50 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25945 Date: Mon, 30 Sep 2024 14:14:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 14:14:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49770	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	366	OUT	GET /images/logotext.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:49 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3994 Connection: Close
2024-09-30 14:14:49 UTC	3994	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	49771	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:49 UTC	378	OUT	GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:50 UTC	258	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:49 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 179266 Connection: Close
2024-09-30 14:14:50 UTC	16126	IN	Data Raw: 2f 2a 2a 21 0a 0a 20 40 6c 69 63 65 6e 73 65 0a 20 68 61 6e 64 6c 65 62 61 72 73 20 76 34 2e 37 2e 36 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 31 2d 32 30 31 39 20 62 79 20 59 65 68 75 64 61 20 4b 61 74 7a 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 Data Ascii: /**! @license handlebars v4.7.6Copyright (C) 2011-2019 by Yehuda KatzPermission is hereby granted, free of charge, to any person obtaining a copyof this software and associated documentation files (the "Software"), to dealin the Software without
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 09 20 20 69 73 45 6e 75 6d 3a 20 20 20 20 20 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 0a 09 20 20 67 65 74 44 65 73 63 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 0a 09 20 20 73 65 74 44 65 73 63 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 0a 09 20 20 73 65 74 44 65 73 63 73 3a 20 20 20 24 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 2c 0a 09 20 20 67 65 74 4b 65 79 73 3a 20 20 20 20 24 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 0a 09 20 20 67 65 74 4e 61 6d 65 73 3a 20 20 20 24 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 Data Ascii: bject.getPrototypeOf, isEnum: {}.propertyIsEnumerable, getDesc: $Object.getOwnPropertyDescriptor, setDesc: $Object.defineProperty, setDescs: $Object.defineProperties, getKeys: $Object.keys, getNames: $Object.getOwnProper
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 72 28 27 69 6e 6c 69 6e 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 2c 20 70 72 6f 70 73 2c 20 63 6f 6e 74 61 69 6e 65 72 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 76 61 72 20 72 65 74 20 3d 20 66 6e 3b 0a 09 20 20 20 20 69 66 20 28 21 70 72 6f 70 73 2e 70 61 72 74 69 61 6c 73 29 20 7b 0a 09 20 20 20 20 20 20 70 72 6f 70 73 2e 70 61 72 74 69 61 6c 73 20 3d 20 7b 7d 3b 0a 09 20 20 20 20 20 20 72 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 61 72 74 69 61 6c 73 20 73 74 61 63 6b 20 66 72 61 6d 65 20 70 72 69 6f 72 20 74 6f 20 65 78 65 63 2e 0a 09 20 20 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c Data Ascii: r('inline', function (fn, props, container, options) { var ret = fn; if (!props.partials) { props.partials = {}; ret = function (context, options) { // Create a new partials stack frame prior to exec. var original
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 20 3d 20 64 65 63 6c 61 72 65 64 42 6c 6f 63 6b 50 61 72 61 6d 73 20 7c 7c 20 30 3b 0a 09 20 20 72 65 74 75 72 6e 20 70 72 6f 67 3b 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 54 68 69 73 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 50 49 2c 20 74 68 65 72 65 66 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 64 65 74 61 69 6c 73 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 68 61 6e 67 65 64 2e 0a 09 20 2a 2f 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 50 61 72 74 69 61 6c 28 70 61 72 74 69 61 6c 2c 20 63 6f 6e 74 65 78 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 20 20 69 66 20 28 21 70 61 72 74 69 61 6c 29 20 7b 0a 09 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 6e Data Ascii: = declaredBlockParams \|\| 0; return prog;}/** * This is currently part of the official API, therefore implementation details should not be changed. */function resolvePartial(partial, context, options) { if (!partial) { if (options.n
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 20 3d 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 53 75 62 45 78 70 72 65 73 73 69 6f 6e 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 3a 20 24 24 5b 24 30 20 2d 20 33 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 73 3a 20 24 24 5b 24 30 20 2d 20 32 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 61 73 68 3a 20 24 24 5b 24 30 20 2d 20 31 5d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 3a 20 79 79 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 Data Ascii: this.$ = { type: 'SubExpression', path: $$[$0 - 3], params: $$[$0 - 2], hash: $$[$0 - 1], loc: yy.locInfo(this
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 2c 20 37 38 3a 20 32 36 2c 20 37 39 3a 20 32 37 2c 20 38 30 3a 20 5b 31 2c 20 32 38 5d 2c 20 38 31 3a 20 5b 31 2c 20 32 39 5d 2c 20 38 32 3a 20 5b 31 2c 20 33 30 5d 2c 20 38 33 3a 20 5b 31 2c 20 33 31 5d 2c 20 38 34 3a 20 5b 31 2c 20 33 32 5d 2c 20 38 35 3a 20 5b 31 2c 20 33 34 5d 2c 20 38 36 3a 20 33 33 20 7d 2c 20 7b 20 33 33 3a 20 5b 31 2c 20 31 31 37 5d 20 7d 2c 20 7b 20 33 32 3a 20 31 31 38 2c 20 33 33 3a 20 5b 32 2c 20 36 32 5d 2c 20 37 34 3a 20 31 31 39 2c 20 37 35 3a 20 5b 31 2c 20 31 32 30 5d 20 7d 2c 20 7b 20 33 33 3a 20 5b 32 2c 20 35 39 5d 2c 20 36 35 3a 20 5b 32 2c 20 35 39 5d 2c 20 37 32 3a 20 5b 32 2c 20 35 39 5d 2c 20 37 35 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 30 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 31 3a 20 5b 32 2c 20 35 39 5d 2c 20 38 32 Data Ascii: , 78: 26, 79: 27, 80: [1, 28], 81: [1, 29], 82: [1, 30], 83: [1, 31], 84: [1, 32], 85: [1, 34], 86: 33 }, { 33: [1, 117] }, { 32: 118, 33: [2, 62], 74: 119, 75: [1, 120] }, { 33: [2, 59], 65: [2, 59], 72: [2, 59], 75: [2, 59], 80: [2, 59], 81: [2, 59], 82
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 78 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 62 65 67 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 62 65 67 69 6e 28 63 6f 6e 64 69 74 69 6f 6e 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6f 6e 64 69 74 69 6f 6e 53 74 61 63 6b 2e 70 75 73 68 28 63 6f 6e 64 69 74 69 6f 6e 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 70 53 74 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 70 6f 70 53 74 61 74 65 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: return this.lex(); } }, begin: function begin(condition) { this.conditionStack.push(condition); }, popState: function popState() { retur
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 68 69 6c 64 20 65 6c 65 6d 65 6e 74 73 2e 0a 09 20 20 61 63 63 65 70 74 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 20 61 63 63 65 70 74 41 72 72 61 79 28 61 72 72 61 79 29 20 7b 0a 09 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0a 09 20 20 20 20 20 20 74 68 69 73 2e 61 63 63 65 70 74 4b 65 79 28 61 72 72 61 79 2c 20 69 29 3b 0a 0a 09 20 20 20 20 20 20 69 66 20 28 21 61 72 72 61 79 5b 69 5d 29 20 7b 0a 09 20 20 20 20 20 20 20 20 61 72 72 61 79 2e 73 70 6c 69 63 65 28 69 2c 20 31 29 3b 0a 09 20 20 20 20 20 20 20 20 69 2d 2d 3b 0a 09 20 20 20 20 20 20 20 20 6c 2d 2d 3b 0a 09 20 20 20 20 20 20 7d 0a 09 20 20 20 20 7d 0a 09 20 20 7d 2c 0a 0a 09 20 20 Data Ascii: hild elements. acceptArray: function acceptArray(array) { for (var i = 0, l = array.length; i < l; i++) { this.acceptKey(array, i); if (!array[i]) { array.splice(i, 1); i--; l--; } } },
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 20 70 61 74 68 2e 6f 72 69 67 69 6e 61 6c 2c 20 5f 61 73 74 32 5b 27 64 65 66 61 75 6c 74 27 5d 2e 68 65 6c 70 65 72 73 2e 73 69 6d 70 6c 65 49 64 28 70 61 74 68 29 29 3b 0a 09 20 20 20 20 7d 0a 09 20 20 7d 2c 0a 0a 09 20 20 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 28 70 61 74 68 29 20 7b 0a 09 20 20 20 20 74 68 69 73 2e 61 64 64 44 65 70 74 68 28 70 61 74 68 2e 64 65 70 74 68 29 3b 0a 09 20 20 20 20 74 68 69 73 2e 6f 70 63 6f 64 65 28 27 67 65 74 43 6f 6e 74 65 78 74 27 2c 20 70 61 74 68 2e 64 65 70 74 68 29 3b 0a 0a 09 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 70 61 74 68 2e 70 61 72 74 73 5b 30 5d 2c 0a 09 20 20 20 20 20 20 20 20 73 63 6f 70 65 64 Data Ascii: s.length, path.original, _ast2['default'].helpers.simpleId(path)); } }, PathExpression: function PathExpression(path) { this.addDepth(path.depth); this.opcode('getContext', path.depth); var name = path.parts[0], scoped
2024-09-30 14:14:50 UTC	16384	IN	Data Raw: 20 20 7d 2c 0a 09 20 20 6d 65 72 67 65 53 6f 75 72 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 53 6f 75 72 63 65 28 76 61 72 44 65 63 6c 61 72 61 74 69 6f 6e 73 29 20 7b 0a 09 20 20 20 20 76 61 72 20 69 73 53 69 6d 70 6c 65 20 3d 20 74 68 69 73 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 69 73 53 69 6d 70 6c 65 2c 0a 09 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 6e 6c 79 20 3d 20 21 74 68 69 73 2e 66 6f 72 63 65 42 75 66 66 65 72 2c 0a 09 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 46 69 72 73 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 20 20 20 20 73 6f 75 72 63 65 53 65 65 6e 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 20 20 20 20 62 75 66 66 65 72 53 74 61 72 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 2c 0a 09 20 20 20 20 Data Ascii: }, mergeSource: function mergeSource(varDeclarations) { var isSimple = this.environment.isSimple, appendOnly = !this.forceBuffer, appendFirst = undefined, sourceSeen = undefined, bufferStart = undefined,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49772	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:50 UTC	751	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
2024-09-30 14:14:50 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Sep 2024 14:14:50 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3853 Connection: Close
2024-09-30 14:14:50 UTC	3853	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 f4 50 4c 54 45 02 91 d9 04 92 d9 0d 96 db 19 9b dc 28 a1 df 38 a8 e1 45 ae e3 53 b4 e5 5e b9 e7 66 bd e8 6c bf e9 6f c0 e9 6d c0 e9 67 bd e8 5c b8 e7 4e b2 e4 3e ab e2 2b a3 df 1a 9b dd 0b 95 da 03 91 d9 08 94 da 1c 9c dd 3b aa e1 84 ca ed a6 d8 f2 c2 e5 f6 d7 ee f9 e6 f4 fb f1 f9 fd f7 fc fe fc fe ff fe ff ff ff ff ff fa fd fe f4 fa fd e9 f6 fc be e3 f5 99 d3 f0 41 ac e2 06 93 da 07 93 da 21 9e de 4c b1 e4 82 c9 ec b4 de f4 d9 ef f9 fd fe ff d8 ee f9 a8 d9 f2 69 be e8 2e Data Ascii: PNGIHDRe5gAMAa cHRMz&u0`:pQ<PLTE(8ES^flomg\N>+;A!Li.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	49773	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:50 UTC	383	OUT	GET /assets/modernizr/modernizr.custom.js HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:50 UTC	256	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:50 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3883 Connection: Close
2024-09-30 14:14:50 UTC	3883	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 36 2e 32 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 63 73 73 74 72 61 6e 73 69 74 69 6f 6e 73 2d 68 69 73 74 6f 72 79 2d 69 6e 70 75 74 2d 69 6e 70 75 74 74 79 70 65 73 2d 77 65 62 73 6f 63 6b 65 74 73 2d 74 65 73 74 73 74 79 6c 65 73 2d 74 65 73 74 70 72 6f 70 2d 74 65 73 74 61 6c 6c 70 72 6f 70 73 2d 64 6f 6d 70 72 65 66 69 78 65 73 2d 66 6f 72 6d 73 5f 70 6c 61 63 65 68 6f 6c 64 65 72 0a 20 2a 2f 0a 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 Data Ascii: /* Modernizr 2.6.2 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-teststyles-testprop-testallprops-domprefixes-forms_placeholder */;window.Modernizr=function(a,b,c){fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	49775	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:50 UTC	371	OUT	GET /images/icons/email_m.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:50 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:50 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1001 Connection: Close
2024-09-30 14:14:50 UTC	1001	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49774	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:50 UTC	370	OUT	GET /images/icons/lock_m.svg HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 14:14:50 UTC	233	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 30 Sep 2024 14:14:50 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1588 Connection: Close
2024-09-30 14:14:50 UTC	1588	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49776	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:50 UTC	447	OUT	GET /favicon-32x32.png HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
2024-09-30 14:14:50 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Sep 2024 14:14:50 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 1565 Connection: Close
2024-09-30 14:14:50 UTC	1565	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 e0 50 4c 54 45 00 00 00 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 91 d9 02 Data Ascii: PNGIHDR DgAMAa cHRMz&u0`:pQ<PLTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49779	54.205.78.181	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:51 UTC	456	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
2024-09-30 14:14:51 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 30 Sep 2024 14:14:51 GMT Last-Modified: Sun, 25 Sep 2022 21:05:12 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 3853 Connection: Close
2024-09-30 14:14:51 UTC	3853	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 f4 50 4c 54 45 02 91 d9 04 92 d9 0d 96 db 19 9b dc 28 a1 df 38 a8 e1 45 ae e3 53 b4 e5 5e b9 e7 66 bd e8 6c bf e9 6f c0 e9 6d c0 e9 67 bd e8 5c b8 e7 4e b2 e4 3e ab e2 2b a3 df 1a 9b dd 0b 95 da 03 91 d9 08 94 da 1c 9c dd 3b aa e1 84 ca ed a6 d8 f2 c2 e5 f6 d7 ee f9 e6 f4 fb f1 f9 fd f7 fc fe fc fe ff fe ff ff ff ff ff fa fd fe f4 fa fd e9 f6 fc be e3 f5 99 d3 f0 41 ac e2 06 93 da 07 93 da 21 9e de 4c b1 e4 82 c9 ec b4 de f4 d9 ef f9 fd fe ff d8 ee f9 a8 d9 f2 69 be e8 2e Data Ascii: PNGIHDRe5gAMAa cHRMz&u0`:pQ<PLTE(8ES^flomg\N>+;A!Li.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49791	54.158.82.124	443	6764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 14:14:56 UTC	794	OUT	GET /auth/forget HTTP/1.1 Host: customersio.enchant.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1; _ga_YFMJZ2K9XT=GS1.2.1727705690.1.0.1727705690.0.0.0
2024-09-30 14:14:56 UTC	197	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Date: Mon, 30 Sep 2024 14:14:56 GMT Server: nginx Strict-Transport-Security: max-age=31536000; Content-Length: 4973 Connection: Close
2024-09-30 14:14:56 UTC	4973	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 45 6e 63 68 61 6e 74 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 Data Ascii: <!DOCTYPE html><html><head><title>Enchant</title><meta charset="utf-8"><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="imag

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2640, Parent PID: 6676

General

Target ID:	0
Start time:	10:14:35
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6764, Parent PID: 2640

General

Target ID:	2
Start time:	10:14:39
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4856, Parent PID: 6676

General

Target ID:	3
Start time:	10:14:42
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Windows Analysis Report
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda