Edit tour

Windows Analysis Report
http://joeandvelma.wixsite.com/my-site/

Overview

General Information

Sample URL:	http://joeandvelma.wixsite.com/my-site/
Analysis ID:	1527750
Tags:	openphish
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1700,i,13956753567713390500,11472699758917908405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://joeandvelma.wixsite.com/my-site/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=1&is_sav_rollout=0&is_dac_rollout=0&dc=42&microPop=42_g&is_cached=true&msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed&session_id=2163eaa0-4184-42a1-bad6-e8c90bbf7c5f&ish=false&isb=false&vsi=13663b67-71aa-4efb-83a6-b774c8cc35a9&caching=hit,hit&pv=visible&pn=1&v=1.14629.0&url=https%3A%2F%2Fjoeandvelma.wixsite.com%2Fmy-site%2F&st=2&ts=260&tsn=1467&platformOnSite=true HTTP/1.1Host: frog.wix.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://joeandvelma.wixsite.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://joeandvelma.wixsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://joeandvelma.wixsite.com/my-site/	LLM: Score: 9 Reasons: The brand AT&T is a well-known telecommunications company with a legitimate domain of att.com., The URL joeandvelma.wixsite.com does not match the legitimate domain of AT&T., Wixsite.com is a platform for creating websites, which can be used by anyone, increasing the risk of phishing., The presence of a User ID input field on a non-official domain is suspicious and could be used for phishing., The URL does not contain any direct association with AT&T, which is a red flag for phishing. DOM: 0.0.pages.csv
Source: https://joeandvelma.wixsite.com/my-site/	LLM: Score: 9 Reasons: The brand AT&T is a well-known telecommunications company with a legitimate domain of att.com., The URL joeandvelma.wixsite.com does not match the legitimate domain of AT&T., Wixsite.com is a platform for creating websites, which can be used by anyone, increasing the risk of phishing., The presence of a User ID input field on a non-official domain is suspicious and could be used for phishing., The URL does not contain any direct association with AT&T, which is a red flag. DOM: 0.2.pages.csv

Source: https://joeandvelma.wixsite.com/my-site/	Matcher: Template: att matched
Source: https://joeandvelma.wixsite.com/my-site/	Matcher: Template: att matched
Source: https://joeandvelma.wixsite.com/my-site/	Matcher: Template: att matched

Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="author".. found
Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="author".. found
Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="author".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="author".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="author".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="author".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="author".. found

Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="copyright".. found
Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="copyright".. found
Source: https://joeandvelma.wixsite.com/my-site/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50540 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_413.2.dr, chromecache_453.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_413.2.dr, chromecache_453.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_413.2.dr, chromecache_453.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_436.2.dr, chromecache_331.2.dr, chromecache_388.2.dr, chromecache_382.2.dr, chromecache_559.2.dr, chromecache_491.2.dr, chromecache_593.2.dr, chromecache_458.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_628.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_628.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_628.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_413.2.dr, chromecache_453.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: joeandvelma.wixsite.com
Source: global traffic	DNS traffic detected: DNS query: static.parastorage.com
Source: global traffic	DNS traffic detected: DNS query: static.wixstatic.com
Source: global traffic	DNS traffic detected: DNS query: siteassets.parastorage.com
Source: global traffic	DNS traffic detected: DNS query: frog.wix.com
Source: global traffic	DNS traffic detected: DNS query: panorama.wixapps.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.wix.com
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: sentry-next.wixpress.com
Source: global traffic	DNS traffic detected: DNS query: manage.editorx.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 4382365.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: bundler.wix-code.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1700,i,13956753567713390500,11472699758917908405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://joeandvelma.wixsite.com/my-site/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1700,i,13956753567713390500,11472699758917908405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://joeandvelma.wixsite.com/my-site/	16%	Virustotal		Browse
http://joeandvelma.wixsite.com/my-site/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
browser.sentry-cdn.com	0%	Virustotal	Browse
dart.l.doubleclick.net	0%	Virustotal	Browse
adservice.google.com	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
platform.twitter.map.fastly.net	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
spdc-global.pbp.gysm.yahoodns.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
t.co	0%	Virustotal	Browse
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
google.com	0%	Virustotal	Browse
ax-0001.ax-dc-msedge.net	0%	Virustotal	Browse
s.twitter.com	0%	Virustotal	Browse
td-ccm-neg-87-45.wixdns.net	0%	Virustotal	Browse
ax-0001.ax-msedge.net	1%	Virustotal	Browse
analytics-alv.google.com	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
ad.doubleclick.net	0%	Virustotal	Browse
sentry-ssl-462500017.us-east-1.elb.amazonaws.com	0%	Virustotal	Browse
username-ccm-206-118.wix.com	0%	Virustotal	Browse
glb-editor.wix.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
d1cq301dpr7fww.cloudfront.net	0%	Virustotal	Browse
edge.gycpi.b.yahoodns.net	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
sp.analytics.yahoo.com	0%	Virustotal	Browse
static.ads-twitter.com	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
static.parastorage.com	0%	Virustotal	Browse
d3ok6da481jyw8.cloudfront.net	0%	Virustotal	Browse
bundler.wix-code.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/platformPubsub.236f41ee.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_22.c72c096c.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/platformPubsub.236f41ee.chunk.min.js.ma	0%	URL Reputation	safe
https://static.parastorage.com/services/editor-elements-design-systems/dist/thunderbolt/	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/BuilderPathsContainer.691f2882.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.13d622e8.chunk.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_bootstra	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_45.9ec687ae.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/environmentWixCodeSdk.7690a40b.chunk.mi	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/tslib.inline.4901af4a.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/panorama.051dc072.chunk.min.js	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/platform.08affa9c.chunk.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/tpaCommons.1b788520.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_41.01e6cb7c.chunk.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/createPlatformWorker.inline.08729d0b.bu	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.b203996e.bundle.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/environmentWixCodeSdk.7690a40b.chunk.min.js	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/router.a5287863.chunk.min.js.map	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/cyclicTabbing.e156be92.chunk.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/auto-frontend-modules/dist/webworker/auto-frontend-modules.0c6f3531.umd.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/animations.0c47ed2a.chunk.min.js.map	0%	URL Reputation	safe
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_bootstrap.2a947f3f.bundle.min.js	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.bae0ce0c.chunk.min.css	0%	URL Reputation	safe
https://greensock.com/standard-license	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/usedPlatformApis.c3e70464.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/forms-viewer/1.878.0/viewerScript.bundle.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[SkipToContentButton].69abe737.bundle.min.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_24.a69ee074.chunk.min.js.map	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.13d622e8.chunk.min.js	0%	URL Reputation	safe
https://static.parastorage.com/unpkg/react-dom@18.3.1/umd/react-dom.production.min.js	0%	URL Reputation	safe
https://s.yimg.com/wi/ytc.js	0%	URL Reputation	safe
https://static.parastorage.com/services/wix-thunderbolt/dist/sendBeat12.inline.1d5ac45a.bundle.min.j	0%	URL Reputation	safe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dart.l.doubleclick.net	142.250.186.70	true	false	0%, Virustotal, Browse	unknown
browser.sentry-cdn.com	151.101.130.217	true	false	0%, Virustotal, Browse	unknown
adservice.google.com	216.58.212.130	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	0%, Virustotal, Browse	unknown
spdc-global.pbp.gysm.yahoodns.net	54.246.144.89	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	108.177.15.155	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	0%, Virustotal, Browse	unknown
t.co	172.66.0.227	true	true	0%, Virustotal, Browse	unknown
td-static-34-49-229-81.parastorage.com	34.49.229.81	true	false		unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com	44.213.232.30	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	0%, Virustotal, Browse	unknown
google.com	142.250.74.206	true	false	0%, Virustotal, Browse	unknown
ax-0001.ax-dc-msedge.net	150.171.30.10	true	false	0%, Virustotal, Browse	unknown
s.twitter.com	104.244.42.195	true	false	0%, Virustotal, Browse	unknown
ad.doubleclick.net	142.250.185.230	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
td-ccm-neg-87-45.wixdns.net	34.149.87.45	true	false	0%, Virustotal, Browse	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	1%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.34.181	true	false	0%, Virustotal, Browse	unknown
glb-editor.wix.com	34.149.206.255	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.186.66	true	false	0%, Virustotal, Browse	unknown
sentry-ssl-462500017.us-east-1.elb.amazonaws.com	23.22.245.167	true	false	0%, Virustotal, Browse	unknown
username-ccm-206-118.wix.com	34.144.206.118	true	false	0%, Virustotal, Browse	unknown
d1cq301dpr7fww.cloudfront.net	99.86.4.125	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	216.58.206.34	true	false	0%, Virustotal, Browse	unknown
d3ok6da481jyw8.cloudfront.net	18.66.147.129	true	false	0%, Virustotal, Browse	unknown
edge.gycpi.b.yahoodns.net	87.248.119.251	true	false	0%, Virustotal, Browse	unknown
sp.analytics.yahoo.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.ads-twitter.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
4382365.fls.doubleclick.net	unknown	unknown	false		unknown
manage.editorx.com	unknown	unknown	false		unknown
bundler.wix-code.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.parastorage.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.facebook.com	unknown	unknown	false		unknown
static.wixstatic.com	unknown	unknown	false		unknown
siteassets.parastorage.com	unknown	unknown	false		unknown
sentry-next.wixpress.com	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
connect.facebook.net	unknown	unknown	false		unknown
panorama.wixapps.net	unknown	unknown	false		unknown
joeandvelma.wixsite.com	unknown	unknown	true		unknown
s.yimg.com	unknown	unknown	false		unknown
analytics.twitter.com	unknown	unknown	false		unknown
frog.wix.com	unknown	unknown	false		unknown
snap.licdn.com	unknown	unknown	false		unknown
analytics.tiktok.com	unknown	unknown	false		unknown
analytics.google.com	unknown	unknown	false		unknown
www.wix.com	unknown	unknown	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcd	chromecache_447.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_413.2.dr, chromecache_453.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/customCss.031d9d02.chunk.min.js.map	chromecache_591.2.dr, chromecache_365.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/platformPubsub.236f41ee.chunk.min.js.ma	chromecache_463.2.dr, chromecache_439.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/editor-elements-design-systems/dist/thunderbolt/	chromecache_362.2.dr, chromecache_369.2.dr, chromecache_526.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.13d622e8.chunk.min.js.map	chromecache_540.2.dr, chromecache_658.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_bootstra	chromecache_630.2.dr, chromecache_501.2.dr	false	URL Reputation: safe	unknown
https://manage.editorx.com/_api/synchronize-cookie	chromecache_364.2.dr, chromecache_341.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/environmentWixCodeSdk.7690a40b.chunk.mi	chromecache_514.2.dr, chromecache_474.2.dr, chromecache_580.2.dr	false	URL Reputation: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_491.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_447.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_4.7ec75ae0.chunk.min.js.map	chromecache_414.2.dr, chromecache_377.2.dr, chromecache_419.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/platform.08affa9c.chunk.min.js.map	chromecache_333.2.dr, chromecache_460.2.dr, chromecache_562.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/triggersAndReactions.66bcbb0c.chunk.min	chromecache_665.2.dr, chromecache_609.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_41.01e6cb7c.chunk.min.js.map	chromecache_384.2.dr, chromecache_570.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/createPlatformWorker.inline.08729d0b.bu	chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://www.att.com/acctmgmt/passthrough/PROFILEOVERVIEW?source=EU00AN000U9V0100E&wtExtndSource=Mail	chromecache_521.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.b203996e.bundle.min.js.map	chromecache_447.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/initCustomElements.inline.1d2da1fc.bund	chromecache_447.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse	unknown
https://openjsf.org/	chromecache_641.2.dr, chromecache_443.2.dr, chromecache_394.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/router.a5287863.chunk.min.js.map	chromecache_375.2.dr, chromecache_353.2.dr, chromecache_392.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/ooi.23a751c1.chunk.min.js.map	chromecache_434.2.dr, chromecache_420.2.dr	false	0%, Virustotal, Browse	unknown
http://www.wix.com/about/privacy	chromecache_391.2.dr	false	0%, Virustotal, Browse	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_23.3eeabd9c.chunk.min.js.map	chromecache_329.2.dr, chromecache_374.2.dr	false		unknown
http://polymer.github.io/PATENTS.txt	chromecache_447.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/bi-common.inline.b541b5a5.bundle.min.js	chromecache_447.2.dr, chromecache_391.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/cyclicTabbing.e156be92.chunk.min.js.map	chromecache_496.2.dr, chromecache_466.2.dr, chromecache_655.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/reporter-api.d81e6559.chunk.min.js.map	chromecache_522.2.dr, chromecache_411.2.dr, chromecache_343.2.dr	false	0%, Virustotal, Browse	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/animations.0c47ed2a.chunk.min.js.map	chromecache_437.2.dr, chromecache_441.2.dr, chromecache_568.2.dr	false	URL Reputation: safe	unknown
http://underscorejs.org/LICENSE	chromecache_641.2.dr, chromecache_443.2.dr, chromecache_394.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_334.2.dr, chromecache_628.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.bae0ce0c.chunk.min.css	chromecache_447.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid~core.b05	chromecache_533.2.dr, chromecache_475.2.dr	false		unknown
https://greensock.com/standard-license	chromecache_398.2.dr, chromecache_509.2.dr, chromecache_518.2.dr	false	URL Reputation: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_30.1366504b.chunk.min.js.map	chromecache_604.2.dr, chromecache_659.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/motion.53152441.chunk.min.js.map	chromecache_661.2.dr, chromecache_588.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_24.a69ee074.chunk.min.js.map	chromecache_467.2.dr, chromecache_395.2.dr	false	URL Reputation: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_641.2.dr, chromecache_443.2.dr, chromecache_394.2.dr	false	URL Reputation: safe	unknown
https://static.wixstatic.com/media/0784b1_c0244919bb3a46f6bbc7f7478de23bb4~mv2.webp/v1/fill/w_149	chromecache_391.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/passwordProtectedPage.1d2bf9a9.chunk.mi	chromecache_498.2.dr, chromecache_579.2.dr, chromecache_613.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_11.3fa95a07.chunk.min.js.map	chromecache_386.2.dr, chromecache_418.2.dr	false		unknown
https://static.wixstatic.com/ufonts/baac51_1dcf55256299497d8dcc69186d5be155/woff2/file.woff2	chromecache_391.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/group_5.9009bcc2.chunk.min.js.map	chromecache_638.2.dr, chromecache_657.2.dr, chromecache_456.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/svgLoader.67cd7ecf.chunk.min.js.map	chromecache_355.2.dr, chromecache_560.2.dr	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/sendBeat12.inline.1d5ac45a.bundle.min.j	chromecache_447.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
108.177.15.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.74.206	google.com	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
151.101.130.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
99.86.4.105	unknown	United States	16509	AMAZON-02US	false
142.250.186.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.66.217	unknown	United States	54113	FASTLYUS	false
34.149.206.255	glb-editor.wix.com	United States	2686	ATGS-MMD-ASUS	false
162.159.140.229	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
18.66.147.89	unknown	United States	3	MIT-GATEWAYSUS	false
54.246.144.89	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
54.85.229.148	unknown	United States	14618	AMAZON-AESUS	false
216.58.212.166	unknown	United States	15169	GOOGLEUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
99.86.4.125	d1cq301dpr7fww.cloudfront.net	United States	16509	AMAZON-02US	false
44.213.232.30	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
87.248.119.251	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
52.21.166.98	unknown	United States	14618	AMAZON-AESUS	false
87.248.119.252	unknown	United Kingdom	203220	YAHOO-DEBDE	false
150.171.30.10	ax-0001.ax-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.149.87.45	td-ccm-neg-87-45.wixdns.net	United States	2686	ATGS-MMD-ASUS	false
216.58.212.130	adservice.google.com	United States	15169	GOOGLEUS	false
142.250.74.198	unknown	United States	15169	GOOGLEUS	false
18.66.147.129	d3ok6da481jyw8.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
23.22.245.167	sentry-ssl-462500017.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.244.42.67	unknown	United States	13414	TWITTERUS	false
34.49.229.81	td-static-34-49-229-81.parastorage.com	United States	2686	ATGS-MMD-ASUS	false
34.144.206.118	username-ccm-206-118.wix.com	United States	2686	ATGS-MMD-ASUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	true
142.250.186.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527750
Start date and time:	2024-10-07 09:31:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://joeandvelma.wixsite.com/my-site/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@25/551@134/46
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.wix.com/lpviral/enviral?utm_campaign=vir_wixad_live&adsVersion=white&orig_msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed

Input	Output
URL: https://joeandvelma.wixsite.com/my-site/ Model: jbxai	{ "brand":["AT&T"], "contains_trigger_text":true, "trigger_text":"Sign in to access AT&T Mail and Currently.com", "prominent_button_name":"Continue", "text_input_field_labels":["User ID", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This site was designed with the WIX.com website builder. Create your website today. Start Now", "has_visible_qrcode":false}

URL: https://joeandvelma.wixsite.com/my-site/ Model: jbxai	{ "phishing_score":9, "brands":"AT&T", "legit_domain":"att.com", "classification":"wellknown", "reasons":["The brand AT&T is a well-known telecommunications company with a legitimate domain of att.com.", "The URL joeandvelma.wixsite.com does not match the legitimate domain of AT&T.", "Wixsite.com is a platform for creating websites, which can be used by anyone, increasing the risk of phishing.", "The presence of a User ID input field on a non-official domain is suspicious and could be used for phishing.", "The URL does not contain any direct association with AT&T, which is a red flag for phishing."], "brand_matches":[false], "url_match":false, "brand_input":"AT&T", "input_fields":"User ID"}

URL: https://joeandvelma.wixsite.com/my-site/ Model: jbxai	{ "brand":["AT&T"], "contains_trigger_text":true, "trigger_text":"Sign in to access AT&T Mail and Currently.com", "prominent_button_name":"Continue", "text_input_field_labels":["User ID", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This site was designed with the WIX.com website builder. Create your website today. Start Now", "has_visible_qrcode":false}

URL: https://joeandvelma.wixsite.com/my-site/ Model: jbxai	{ "phishing_score":9, "brands":"AT&T", "legit_domain":"att.com", "classification":"wellknown", "reasons":["The brand AT&T is a well-known telecommunications company with a legitimate domain of att.com.", "The URL joeandvelma.wixsite.com does not match the legitimate domain of AT&T.", "Wixsite.com is a platform for creating websites, which can be used by anyone, increasing the risk of phishing.", "The presence of a User ID input field on a non-official domain is suspicious and could be used for phishing.", "The URL does not contain any direct association with AT&T, which is a red flag."], "brand_matches":[false], "url_match":false, "brand_input":"AT&T", "input_fields":"User ID"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 06:32:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9793706603020236
Encrypted:	false
SSDEEP:	48:8EdCTO+eHPidAKZdA19ehwiZUklqehHy+3:8N3WAy
MD5:	896AEC8CFF3448F34D12681AE11F9149
SHA1:	0ECE903BD51BCCAD9599D35734DF77ECBC8D79AC
SHA-256:	AFC9E1118B95323AF50FDE8E45C6A3FD01B559ACAB9E8F54DD07F866BD780250
SHA-512:	930A543F36473B3F43D9AC687F721E4F1423F93190F77792EF2B175B4C94EAA68CEE8D709E86F293E7EFC0D10AA6072EF203B76D180B6C102CB385BBCEED299E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....!1.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY.<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY.<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 09:32:49.332755089 CEST	192.168.2.5	1.1.1.1	0x93f9	Standard query (0)	joeandvelma.wixsite.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:49.334583998 CEST	192.168.2.5	1.1.1.1	0x84b1	Standard query (0)	joeandvelma.wixsite.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:49.812158108 CEST	192.168.2.5	1.1.1.1	0x44f3	Standard query (0)	joeandvelma.wixsite.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:49.812640905 CEST	192.168.2.5	1.1.1.1	0x9440	Standard query (0)	joeandvelma.wixsite.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:50.489330053 CEST	192.168.2.5	1.1.1.1	0x936e	Standard query (0)	static.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:50.489469051 CEST	192.168.2.5	1.1.1.1	0x6faa	Standard query (0)	static.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:50.490794897 CEST	192.168.2.5	1.1.1.1	0xfbf3	Standard query (0)	static.wixstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:50.490951061 CEST	192.168.2.5	1.1.1.1	0x4161	Standard query (0)	static.wixstatic.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:50.517031908 CEST	192.168.2.5	1.1.1.1	0x1f19	Standard query (0)	siteassets.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:50.517265081 CEST	192.168.2.5	1.1.1.1	0x6241	Standard query (0)	siteassets.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:51.348002911 CEST	192.168.2.5	1.1.1.1	0x6140	Standard query (0)	frog.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:51.371794939 CEST	192.168.2.5	1.1.1.1	0x1641	Standard query (0)	frog.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:51.373142958 CEST	192.168.2.5	1.1.1.1	0x9eaf	Standard query (0)	panorama.wixapps.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:51.373409033 CEST	192.168.2.5	1.1.1.1	0xb031	Standard query (0)	panorama.wixapps.net	65	IN (0x0001)	false
Oct 7, 2024 09:32:52.665685892 CEST	192.168.2.5	1.1.1.1	0xf064	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:52.667573929 CEST	192.168.2.5	1.1.1.1	0xb5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:52.678567886 CEST	192.168.2.5	1.1.1.1	0xdf30	Standard query (0)	joeandvelma.wixsite.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:52.679058075 CEST	192.168.2.5	1.1.1.1	0xe30	Standard query (0)	joeandvelma.wixsite.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:52.679738045 CEST	192.168.2.5	1.1.1.1	0x1cd4	Standard query (0)	static.wixstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:52.679923058 CEST	192.168.2.5	1.1.1.1	0xd61f	Standard query (0)	static.wixstatic.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:54.476414919 CEST	192.168.2.5	1.1.1.1	0x7822	Standard query (0)	static.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:54.476937056 CEST	192.168.2.5	1.1.1.1	0x7711	Standard query (0)	static.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:57.584856987 CEST	192.168.2.5	1.1.1.1	0xafab	Standard query (0)	www.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:57.584994078 CEST	192.168.2.5	1.1.1.1	0xa881	Standard query (0)	www.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:57.835407019 CEST	192.168.2.5	1.1.1.1	0x1d48	Standard query (0)	siteassets.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:57.835655928 CEST	192.168.2.5	1.1.1.1	0xa8fc	Standard query (0)	siteassets.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:32:58.322156906 CEST	192.168.2.5	1.1.1.1	0xad88	Standard query (0)	www.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:32:58.322479010 CEST	192.168.2.5	1.1.1.1	0xc77b	Standard query (0)	www.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:00.261763096 CEST	192.168.2.5	1.1.1.1	0x3df4	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:00.261965990 CEST	192.168.2.5	1.1.1.1	0x2a85	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:02.984055042 CEST	192.168.2.5	1.1.1.1	0x3ffc	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:02.984179020 CEST	192.168.2.5	1.1.1.1	0x9c23	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:03.927169085 CEST	192.168.2.5	1.1.1.1	0xc105	Standard query (0)	www.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:03.927591085 CEST	192.168.2.5	1.1.1.1	0x5219	Standard query (0)	www.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:03.974147081 CEST	192.168.2.5	1.1.1.1	0xa4a	Standard query (0)	sentry-next.wixpress.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:03.974442005 CEST	192.168.2.5	1.1.1.1	0xd1ab	Standard query (0)	sentry-next.wixpress.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:06.763165951 CEST	192.168.2.5	1.1.1.1	0xd73e	Standard query (0)	static.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:06.763613939 CEST	192.168.2.5	1.1.1.1	0x171e	Standard query (0)	static.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:06.855339050 CEST	192.168.2.5	1.1.1.1	0x7b7e	Standard query (0)	static.wixstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:06.856038094 CEST	192.168.2.5	1.1.1.1	0x7bb2	Standard query (0)	static.wixstatic.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:06.862241983 CEST	192.168.2.5	1.1.1.1	0x9a47	Standard query (0)	siteassets.parastorage.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:06.862242937 CEST	192.168.2.5	1.1.1.1	0xb4e9	Standard query (0)	siteassets.parastorage.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:07.043102026 CEST	192.168.2.5	1.1.1.1	0x5e15	Standard query (0)	frog.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:07.043554068 CEST	192.168.2.5	1.1.1.1	0x4e69	Standard query (0)	frog.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:07.076678991 CEST	192.168.2.5	1.1.1.1	0xe1a9	Standard query (0)	panorama.wixapps.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:07.077011108 CEST	192.168.2.5	1.1.1.1	0x9b87	Standard query (0)	panorama.wixapps.net	65	IN (0x0001)	false
Oct 7, 2024 09:33:07.447031975 CEST	192.168.2.5	1.1.1.1	0x15d2	Standard query (0)	manage.editorx.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:07.447312117 CEST	192.168.2.5	1.1.1.1	0x4be9	Standard query (0)	manage.editorx.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:08.131057978 CEST	192.168.2.5	1.1.1.1	0xafe4	Standard query (0)	manage.editorx.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:08.131447077 CEST	192.168.2.5	1.1.1.1	0x8c38	Standard query (0)	manage.editorx.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:52.235142946 CEST	192.168.2.5	1.1.1.1	0xb69	Standard query (0)	frog.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:52.235838890 CEST	192.168.2.5	1.1.1.1	0x832c	Standard query (0)	frog.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:54.547267914 CEST	192.168.2.5	1.1.1.1	0x539	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:54.547267914 CEST	192.168.2.5	1.1.1.1	0x5c8a	Standard query (0)	browser.sentry-cdn.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:55.418314934 CEST	192.168.2.5	1.1.1.1	0x8f50	Standard query (0)	sentry-next.wixpress.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:55.418524027 CEST	192.168.2.5	1.1.1.1	0x7057	Standard query (0)	sentry-next.wixpress.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:57.134897947 CEST	192.168.2.5	1.1.1.1	0xbb28	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:57.135171890 CEST	192.168.2.5	1.1.1.1	0xcf03	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:58.100621939 CEST	192.168.2.5	1.1.1.1	0x77c2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:58.100750923 CEST	192.168.2.5	1.1.1.1	0x9ff2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:33:59.351115942 CEST	192.168.2.5	1.1.1.1	0x14ef	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:59.351442099 CEST	192.168.2.5	1.1.1.1	0x50ad	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:59.366540909 CEST	192.168.2.5	1.1.1.1	0x9281	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:59.366883993 CEST	192.168.2.5	1.1.1.1	0x64eb	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:59.568664074 CEST	192.168.2.5	1.1.1.1	0x7077	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:59.569331884 CEST	192.168.2.5	1.1.1.1	0x93a2	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 7, 2024 09:33:59.575227022 CEST	192.168.2.5	1.1.1.1	0xe8fb	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:33:59.575869083 CEST	192.168.2.5	1.1.1.1	0xee9a	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.028953075 CEST	192.168.2.5	1.1.1.1	0xd52e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.029441118 CEST	192.168.2.5	1.1.1.1	0xec1b	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.179398060 CEST	192.168.2.5	1.1.1.1	0x5909	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.179775000 CEST	192.168.2.5	1.1.1.1	0xe375	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.181536913 CEST	192.168.2.5	1.1.1.1	0xa441	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.181895018 CEST	192.168.2.5	1.1.1.1	0x6c2	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.201931953 CEST	192.168.2.5	1.1.1.1	0x4534	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.202091932 CEST	192.168.2.5	1.1.1.1	0xf9b1	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.253334045 CEST	192.168.2.5	1.1.1.1	0xc032	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.253650904 CEST	192.168.2.5	1.1.1.1	0xaca6	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.447052956 CEST	192.168.2.5	1.1.1.1	0xca8d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.447534084 CEST	192.168.2.5	1.1.1.1	0x1b72	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.456530094 CEST	192.168.2.5	1.1.1.1	0xa097	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.456984043 CEST	192.168.2.5	1.1.1.1	0xc7cf	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:01.478588104 CEST	192.168.2.5	1.1.1.1	0xa127	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:01.478715897 CEST	192.168.2.5	1.1.1.1	0xee0	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:02.060053110 CEST	192.168.2.5	1.1.1.1	0x324d	Standard query (0)	4382365.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:02.062414885 CEST	192.168.2.5	1.1.1.1	0x7d31	Standard query (0)	4382365.fls.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:02.158869982 CEST	192.168.2.5	1.1.1.1	0x2dc3	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:02.159315109 CEST	192.168.2.5	1.1.1.1	0x7c84	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:02.263963938 CEST	192.168.2.5	1.1.1.1	0x3acf	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:02.264357090 CEST	192.168.2.5	1.1.1.1	0x52d	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.012484074 CEST	192.168.2.5	1.1.1.1	0x7152	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.012819052 CEST	192.168.2.5	1.1.1.1	0x3a69	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.044393063 CEST	192.168.2.5	1.1.1.1	0x3361	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.044809103 CEST	192.168.2.5	1.1.1.1	0xaa8c	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.265888929 CEST	192.168.2.5	1.1.1.1	0xe22e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.266160965 CEST	192.168.2.5	1.1.1.1	0x84df	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.283282042 CEST	192.168.2.5	1.1.1.1	0xa90f	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.283528090 CEST	192.168.2.5	1.1.1.1	0xd726	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.493674040 CEST	192.168.2.5	1.1.1.1	0x8f92	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.494190931 CEST	192.168.2.5	1.1.1.1	0xa8bb	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.938827991 CEST	192.168.2.5	1.1.1.1	0xd864	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.939136982 CEST	192.168.2.5	1.1.1.1	0x9529	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 7, 2024 09:34:04.942114115 CEST	192.168.2.5	1.1.1.1	0x7aa7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:04.942529917 CEST	192.168.2.5	1.1.1.1	0x8969	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.029484987 CEST	192.168.2.5	1.1.1.1	0xd5c6	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.029907942 CEST	192.168.2.5	1.1.1.1	0x532	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.138964891 CEST	192.168.2.5	1.1.1.1	0xc023	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.139406919 CEST	192.168.2.5	1.1.1.1	0xeb04	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.146893978 CEST	192.168.2.5	1.1.1.1	0x89f5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.147104025 CEST	192.168.2.5	1.1.1.1	0x1030	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.148027897 CEST	192.168.2.5	1.1.1.1	0x78cf	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.148205042 CEST	192.168.2.5	1.1.1.1	0x5f86	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.181488037 CEST	192.168.2.5	1.1.1.1	0x192	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.181627989 CEST	192.168.2.5	1.1.1.1	0x70dc	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.609097958 CEST	192.168.2.5	1.1.1.1	0xda5d	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.609337091 CEST	192.168.2.5	1.1.1.1	0x8036	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.873713970 CEST	192.168.2.5	1.1.1.1	0x532e	Standard query (0)	bundler.wix-code.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.874192953 CEST	192.168.2.5	1.1.1.1	0x152	Standard query (0)	bundler.wix-code.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:05.875413895 CEST	192.168.2.5	1.1.1.1	0x34bf	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:05.875576019 CEST	192.168.2.5	1.1.1.1	0xf6ca	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:06.869107962 CEST	192.168.2.5	1.1.1.1	0x63a1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:06.869107962 CEST	192.168.2.5	1.1.1.1	0xc1c6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:06.879930973 CEST	192.168.2.5	1.1.1.1	0xb085	Standard query (0)	bundler.wix-code.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:06.880115032 CEST	192.168.2.5	1.1.1.1	0x70c7	Standard query (0)	bundler.wix-code.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:07.481964111 CEST	192.168.2.5	1.1.1.1	0x4567	Standard query (0)	frog.wix.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:07.482328892 CEST	192.168.2.5	1.1.1.1	0xcbd5	Standard query (0)	frog.wix.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:07.644754887 CEST	192.168.2.5	1.1.1.1	0x5b03	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:07.644925117 CEST	192.168.2.5	1.1.1.1	0xed25	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:08.573196888 CEST	192.168.2.5	1.1.1.1	0x990b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:08.573371887 CEST	192.168.2.5	1.1.1.1	0xd903	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:09.927769899 CEST	192.168.2.5	1.1.1.1	0xf0cf	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:09.928462982 CEST	192.168.2.5	1.1.1.1	0x6811	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 7, 2024 09:34:10.842104912 CEST	192.168.2.5	1.1.1.1	0xf365	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 09:34:10.842520952 CEST	192.168.2.5	1.1.1.1	0x39e4	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 09:32:49.358392000 CEST	446	OUT	GET /my-site/ HTTP/1.1 Host: joeandvelma.wixsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 09:32:49.808159113 CEST	210	IN	HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://joeandvelma.wixsite.com:443/my-site/ Content-Length: 0 Date: Mon, 07 Oct 2024 07:32:49 GMT Content-Type: text/html; charset=UTF-8
Oct 7, 2024 09:33:34.820564032 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:50 UTC	674	OUT	GET /my-site/ HTTP/1.1 Host: joeandvelma.wixsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:50 UTC	1484	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 07:32:50 GMT content-type: text/html; charset=UTF-8 link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;, html-cacheable: true etag: W/"29ddb43ad05f7b46f56cc651d88effbd" content-language: en-US strict-transport-security: max-age=86400 age: 31136 x-seen-by: pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLk1Uxi5aVwrmRyfWZ8T7SgAMbwluI1yUDJty9McxOlfY,2d58ifebGbosy5xc+FRalmgp9f9+ftXCA1hP/O3JkvNYymXy9bgtXnKkW7GZ2XqW7jXK+T6yUKO9F5dm+JmXUg==,2UNV7KOq4oGjA5+PKsX47LfM9MmI0GeI1fZYvIpqbMsfbJaKSXYQ/lskq2jK6SGP vary: Accept-Encoding accept-ranges: bytes x-wix-request-id: 1728286370.400944433214120717 set-cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=42_g; Max-Age=20; Expires=Mon, 07 Oct 2024 07:33:10 GMT set-cookie: XSRF-TOKEN=1728286370\|3FH4qsZ2jqRe; Path=/; Domain=joeandvelma.wixsite.com; Secure; SameSite=None server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=42_g cache-control: private,max-age=0,must-revalidate server: Pepyaka x-content-type-options: nosniff via: 1.1 google glb-x-seen-by: zj+a2E71qOCweet+2KoAwKsDXK9Yj1hJlUA0MXxzy6E= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 32 62 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 69 64 3d 22 77 69 78 44 65 73 6b 74 6f 70 56 69 65 77 70 6f 72 74 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e Data Ascii: 2bbf<!DOCTYPE html><html lang="en"><head> <meta charset='utf-8'> <meta name="viewport" content="width=device-width, initial-scale=1" id="wixDesktopViewport" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="generator" con
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 69 6e 67 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 6e 6f 77 4f 66 66 73 65 74 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 77 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 28 29 20 2d 20 6e 6f 77 4f 66 66 73 65 74 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 20 20 7d 29 28 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 3c 21 2d 2d 20 47 6c 6f 62 61 6c 73 20 44 65 66 69 6e 69 74 69 Data Ascii: ing && performance.timing.navigationStart) { nowOffset = performance.timing.navigationStart; } window.performance.now = function now() { return Date.now() - nowOffset; }; } })(); </script> ... Globals Definiti
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 69 63 4d 65 64 69 61 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 77 69 78 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 6d 65 64 69 61 22 2c 22 6d 6f 64 75 6c 65 52 65 70 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 5c 2f 75 6e 70 6b 67 22 2c 22 66 69 6c 65 52 65 70 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 5c 2f 73 65 72 76 69 63 65 73 22 2c 22 73 69 74 65 41 73 73 65 74 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 69 74 65 61 73 73 65 74 73 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 22 2c 22 70 61 67 65 4a 73 6f 6e 53 65 72 76 65 72 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 5c 2f Data Ascii: icMediaUrl":"https:\/\/static.wixstatic.com\/media","moduleRepoUrl":"https:\/\/static.parastorage.com\/unpkg","fileRepoUrl":"https:\/\/static.parastorage.com\/services","siteAssetsUrl":"https:\/\/siteassets.parastorage.com","pageJsonServerUrls":["https:\/
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 75 74 22 3a 66 61 6c 73 65 2c 22 69 73 44 41 43 52 6f 6c 6c 6f 75 74 22 3a 30 2c 22 69 73 54 42 52 6f 6c 6c 6f 75 74 22 3a 74 72 75 65 7d 2c 22 63 6f 6d 6d 6f 6e 43 6f 6e 66 69 67 22 3a 7b 22 62 72 61 6e 64 22 3a 22 77 69 78 22 2c 22 68 6f 73 74 22 3a 22 56 49 45 57 45 52 22 2c 22 62 73 69 22 3a 22 22 2c 22 63 6f 6e 73 65 6e 74 50 6f 6c 69 63 79 22 3a 7b 7d 2c 22 63 6f 6e 73 65 6e 74 50 6f 6c 69 63 79 48 65 61 64 65 72 22 3a 7b 7d 2c 22 73 69 74 65 52 65 76 69 73 69 6f 6e 22 3a 22 35 22 2c 22 72 65 6e 64 65 72 69 6e 67 46 6c 6f 77 22 3a 22 4e 4f 4e 45 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 7d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 53 61 6d 70 6c 65 52 61 74 69 6f 22 3a 30 2e 30 31 2c 22 64 79 Data Ascii: ut":false,"isDACRollout":0,"isTBRollout":true},"commonConfig":{"brand":"wix","host":"VIEWER","bsi":"","consentPolicy":{},"consentPolicyHeader":{},"siteRevision":"5","renderingFlow":"NONE","language":"en","locale":"en-us"},"interactionSampleRatio":0.01,"dy
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 55 72 6c 3a 6c 7d 3d 77 69 6e 64 6f 77 2e 76 69 65 77 65 72 4d 6f 64 65 6c 2c 6d 3d 6c 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 29 29 29 5b 30 5d 3f 2e 73 70 6c 69 74 28 22 3d 22 29 5b 31 5d 2c 70 3d 7b 7d 3b 69 66 28 75 26 26 28 70 5b 6f 5d 3d 75 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 60 24 7b 74 7d 3d 3b 20 64 6f 6d 61 69 6e 3d 24 7b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7d 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 60 3b 69 2e Data Ascii: Url:l}=window.viewerModel,m=l,u=document.cookie.split(";").map((e=>e.trim())).filter((e=>e.startsWith(t)))[0]?.split("=")[1],p={};if(u&&(p[o]=u,(()=>{const e=`${t}=; domain=${location.hostname}; max-age=0; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT`;i.
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 2f 68 61 6e 64 6c 65 41 63 63 65 73 73 54 6f 6b 65 6e 73 2e 69 6e 6c 69 6e 65 2e 35 61 36 37 62 35 36 33 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 2e 6d 61 70 3c 2f 73 63 72 69 70 74 3e 0a 20 20 0a 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6d 6d 6f 6e 43 6f 6e 66 69 67 20 3d 20 76 69 65 77 65 72 4d 6f 64 65 6c 2e 63 6f 6d 6d 6f 6e 43 6f 6e 66 69 67 0a 20 20 20 20 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 20 20 3c 21 2d 2d 20 69 6e 69 74 43 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 20 2d 2d 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 77 69 78 2d 64 79 6e 61 6d 69 63 2d 63 75 73 74 6f 6d 2d 65 6c 65 6d 65 6e 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 3c 21 2d 2d 20 49 6e 69 74 69 61 6c 20 43 53 53 20 2d 2d Data Ascii: /handleAccessTokens.inline.5a67b563.bundle.min.js.map</script> <script> window.commonConfig = viewerModel.commonConfig </script> ... initCustomElements --> <meta name="wix-dynamic-custom-elements" content=""> ... Initial CSS --
2024-10-07 07:32:50 UTC	1484	IN	Data Raw: 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2e 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 2d 6f 70 74 69 6d 69 7a 65 64 20 23 54 49 4e 59 5f 4d 45 4e 55 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 2e 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 2d 6f 70 74 69 6d 69 7a 65 64 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 2e 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 2d 6f 70 74 69 6d 69 7a 65 64 20 23 6d 61 73 74 65 72 50 61 67 Data Ascii: .fullScreenMode.device-mobile-optimized #TINY_MENU{opacity:0;pointer-events:none}body.fullScreenMode-scrollable.device-mobile-optimized{overflow-x:hidden!important;overflow-y:auto!important}body.fullScreenMode-scrollable.device-mobile-optimized #masterPag
2024-10-07 07:32:50 UTC	819	IN	Data Raw: 74 61 2d 70 61 67 65 2d 74 72 61 6e 73 69 74 69 6f 6e 3d 53 6c 69 64 65 48 6f 72 69 7a 6f 6e 74 61 6c 5d 3a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6e 65 77 28 70 61 67 65 2d 67 72 6f 75 70 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 6c 69 64 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6e 65 77 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 38 33 2c 30 2c 2e 31 37 2c 31 29 20 62 61 63 6b 77 61 72 64 73 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6e 6f 72 6d 61 6c 7d 68 74 6d 6c 5b 64 61 74 61 2d 70 61 67 65 2d 74 72 61 6e 73 69 74 69 6f 6e 3d 53 6c 69 64 65 56 65 72 74 69 63 61 6c 5d 3a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 6c 64 28 70 61 67 65 2d 67 72 6f 75 70 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 6c 69 64 65 2d 76 65 72 Data Ascii: ta-page-transition=SlideHorizontal]::view-transition-new(page-group){animation:slide-horizontal-new .6s cubic-bezier(.83,0,.17,1) backwards;mix-blend-mode:normal}html[data-page-transition=SlideVertical]::view-transition-old(page-group){animation:slide-ver
2024-10-07 07:32:50 UTC	1390	IN	Data Raw: 32 30 38 38 0d 0a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6e 65 77 28 2a 29 2c 3a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 6c 64 28 2a 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 62 6f 64 79 2c 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 62 6f 64 79 7b 2d 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 Data Ascii: 2088:view-transition-new(),::view-transition-old(){animation:none!important}}body,html{background:transparent;border:0;margin:0;outline:0;padding:0;vertical-align:baseline}body{--scrollbar-width:0px;font-family:Arial,Helvetica,sans-serif;font-size:10p
2024-10-07 07:32:50 UTC	1390	IN	Data Raw: 6c 69 6e 65 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 69 6e 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 64 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 Data Ascii: line}input,select,textarea{box-sizing:border-box;font-family:Helvetica,Arial,sans-serif}ol,ul{list-style:none}blockquote,q{quotes:none}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}a{cursor:point

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://joeandvelma.wixsite.com/my-site/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Windows Analysis Report
http://joeandvelma.wixsite.com/my-site/

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	661	OUT	GET /my-site/_api/v1/access-tokens HTTP/1.1 Host: joeandvelma.wixsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://joeandvelma.wixsite.com/my-site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssr-caching=cache#desc=hit#varnish=hit#dc#desc=42_g; XSRF-TOKEN=1728286370\|3FH4qsZ2jqRe
2024-10-07 07:32:51 UTC	1432	IN	HTTP/1.1 200 OK date: Mon, 07 Oct 2024 07:32:51 GMT content-type: application/json; charset=utf-8 Content-Length: 18007 access-control-allow-origin: * strict-transport-security: max-age=86400 age: 39159 x-seen-by: pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLisKKfFxaoxVWh9lgIvbTC1kavE0ZtMXws1mfakihq4B,2d58ifebGbosy5xc+FRalnGbPOMS4xuQj7uT2JJ6J4CEbtulZAl0pUUbmFm5XVL9Y12anCM2p8dV2fCy8ccsdQ==,2UNV7KOq4oGjA5+PKsX47LfM9MmI0GeI1fZYvIpqbMsfbJaKSXYQ/lskq2jK6SGP vary: Accept-Encoding accept-ranges: bytes x-wix-request-id: 1728286371.112940912174121576 set-cookie: hs=165819199; Path=/; Domain=joeandvelma.wixsite.com; Secure; HTTPOnly set-cookie: svSession=dc1502e2d52201c4688741ce8f8d69919cb1f38c144f48ad58c246addcd57e33552f9cdfb46d21c34838542451b6d7b31e60994d53964e647acf431e4f798bcd394aa553e8736a39ead73c9e0563c82d0b22d95a2f4e47630cc87d51b3570c1e441bc99d68717240e9df91b7efa1bc674325f4b1f750ba3fe7a446313b57c9c4233d1ba2db9ed385f190a414f6d9bf36; Max-Age=63072000; Expires=Wed, 07 Oct 2026 07:32:51 GMT; Path=/my-site; Domain=joeandvelma.wixsite.com; Secure; HTTPOnly; SameSite=None server-timing: cache;desc=hit, varnish;desc=hit, dc;desc=42_g cache-control: private,max-age=0,must-revalidate server: Pepyaka x-content-type-options: nosniff via: 1.1 google glb-x-seen-by: zj+a2E71qOCweet+2KoAwKsDXK9Yj1hJlUA0MXxzy6E= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 7b 22 68 73 22 3a 31 36 35 38 31 39 31 39 39 2c 22 76 69 73 69 74 6f 72 49 64 22 3a 22 62 31 31 62 38 63 35 34 2d 66 39 34 63 2d 34 32 38 61 2d 39 62 65 63 2d 63 63 39 66 38 65 62 34 35 39 39 35 22 2c 22 73 76 53 65 73 73 69 6f 6e 22 3a 22 64 63 31 35 30 32 65 32 64 35 32 32 30 31 63 34 36 38 38 37 34 31 63 65 38 66 38 64 36 39 39 31 39 63 62 31 66 33 38 63 31 34 34 66 34 38 61 64 35 38 63 32 34 36 61 64 64 63 64 35 37 65 33 33 35 35 32 66 39 63 64 66 62 34 36 64 32 31 63 33 34 38 33 38 35 34 32 34 35 31 62 36 64 37 62 33 31 65 36 30 39 39 34 64 35 33 39 36 34 65 36 34 37 61 63 66 34 33 31 65 34 66 37 39 38 62 63 64 33 39 34 61 61 35 35 33 65 38 37 33 36 61 33 39 65 61 64 37 33 63 39 65 30 35 36 33 63 38 32 64 30 62 32 32 64 39 35 61 32 66 34 65 34 37 36 Data Ascii: {"hs":165819199,"visitorId":"b11b8c54-f94c-428a-9bec-cc9f8eb45995","svSession":"dc1502e2d52201c4688741ce8f8d69919cb1f38c144f48ad58c246addcd57e33552f9cdfb46d21c34838542451b6d7b31e60994d53964e647acf431e4f798bcd394aa553e8736a39ead73c9e0563c82d0b22d95a2f4e476
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 55 73 49 6d 46 70 5a 43 49 36 49 6d 49 78 4d 57 49 34 59 7a 55 30 4c 57 59 35 4e 47 4d 74 4e 44 49 34 59 53 30 35 59 6d 56 6a 4c 57 4e 6a 4f 57 59 34 5a 57 49 30 4e 54 6b 35 4e 53 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 79 4e 47 49 79 4d 7a 55 32 4d 69 30 31 5a 6a 45 7a 4c 54 41 32 59 7a 59 74 4d 7a 46 6d 4d 69 31 6b 4d 32 45 78 59 6d 4a 6d 4e 44 5a 6d 4e 44 49 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 49 30 59 54 49 79 4f 54 4d 7a 4c 54 64 69 4d 6a 55 74 4e 47 45 7a 5a 43 31 69 4d 54 6c 6b 4c 57 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 31 30 7d 2c 22 31 34 32 37 31 64 36 66 2d 62 61 36 32 2d 64 30 34 35 2d 35 34 39 62 2d 61 62 39 37 32 61 65 31 66 37 30 65 22 3a 7b 22 69 6e Data Ascii: UsImFpZCI6ImIxMWI4YzU0LWY5NGMtNDI4YS05YmVjLWNjOWY4ZWI0NTk5NSIsImJpVG9rZW4iOiIyNGIyMzU2Mi01ZjEzLTA2YzYtMzFmMi1kM2ExYmJmNDZmNDIiLCJzaXRlT3duZXJJZCI6IjI0YTIyOTMzLTdiMjUtNGEzZC1iMTlkLWE0ODMyNzY1ODg0NyJ9","intId":10},"14271d6f-ba62-d045-549b-ab972ae1f70e":{"in
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 31 31 7d 2c 22 64 37 30 62 36 38 65 32 2d 38 64 37 37 2d 34 65 30 63 2d 39 63 30 30 2d 63 32 39 32 64 36 65 30 30 32 35 65 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 4f 66 39 7a 6e 51 64 64 4b 42 6d 34 55 71 78 33 4b 56 79 31 4d 4b 48 77 31 31 39 4a 33 4b 45 49 76 72 34 66 31 6d 4e 6a 67 46 59 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 4f 47 55 34 4f 57 49 31 59 6d 49 74 59 7a 6b 77 59 53 30 30 59 6a 4a 6c 4c 57 45 7a 4d 54 67 74 4e 6d 51 77 4e 44 67 33 4e 6a 59 30 4d 6a 63 35 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 4a 6b 4e 7a 42 69 4e 6a 68 6c 4d 69 30 34 5a 44 63 33 4c 54 52 6c 4d 47 4d 74 4f 57 4d 77 4d 43 31 6a 4d 6a 6b 79 5a 44 5a Data Ascii: E0ODMyNzY1ODg0NyJ9","intId":11},"d70b68e2-8d77-4e0c-9c00-c292d6e0025e":{"instance":"Of9znQddKBm4Uqx3KVy1MKHw119J3KEIvr4f1mNjgFY.eyJpbnN0YW5jZUlkIjoiOGU4OWI1YmItYzkwYS00YjJlLWEzMTgtNmQwNDg3NjY0Mjc5IiwiYXBwRGVmSWQiOiJkNzBiNjhlMi04ZDc3LTRlMGMtOWMwMC1jMjkyZDZ
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 4d 6a 49 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 5a 6a 56 6b 5a 44 63 30 59 57 59 74 5a 47 49 32 5a 53 30 30 5a 44 4e 6c 4c 54 67 33 4d 32 55 74 5a 57 49 32 4f 47 45 31 4e 47 4d 30 4d 32 56 6b 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 77 4c 54 41 33 56 44 41 33 4f 6a 4d 79 4f 6a 55 78 4c 6a 45 79 4d 6c 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 46 70 5a 43 49 36 49 6d 49 78 4d 57 49 34 59 7a 55 30 4c 57 59 35 4e 47 4d 74 4e 44 49 34 59 53 30 35 59 6d 56 6a 4c 57 4e 6a 4f 57 59 34 5a 57 49 30 4e 54 6b 35 4e 53 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 31 4d 44 5a 6d 4e 6a 51 78 4e 69 30 31 4d 7a 56 6c 4c 54 41 77 4d 57 51 74 4d 54 5a 68 4e 53 31 Data Ascii: MjIiLCJtZXRhU2l0ZUlkIjoiZjVkZDc0YWYtZGI2ZS00ZDNlLTg3M2UtZWI2OGE1NGM0M2VkIiwic2lnbkRhdGUiOiIyMDI0LTEwLTA3VDA3OjMyOjUxLjEyMloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImIxMWI4YzU0LWY5NGMtNDI4YS05YmVjLWNjOWY4ZWI0NTk5NSIsImJpVG9rZW4iOiI1MDZmNjQxNi01MzVlLTAwMWQtMTZhNS1
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 4f 54 41 30 4d 44 55 7a 4e 6d 45 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 49 30 59 54 49 79 4f 54 4d 7a 4c 54 64 69 4d 6a 55 74 4e 47 45 7a 5a 43 31 69 4d 54 6c 6b 4c 57 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 31 35 7d 2c 22 65 61 32 38 32 31 66 63 2d 37 64 39 37 2d 34 30 61 39 2d 39 66 37 35 2d 37 37 32 66 32 39 31 37 38 34 33 30 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 51 7a 6b 38 62 57 38 62 68 65 6a 66 51 36 65 6b 31 36 74 6b 4e 49 41 31 41 74 35 44 37 34 66 31 44 6c 39 39 4c 74 30 37 47 75 77 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 4f 54 45 34 59 54 68 6a 4f 47 51 74 4e 54 67 33 4d 53 30 30 5a 6d 55 31 4c 57 49 77 4e 57 4d 74 4e 57 4d 78 5a 6a 68 6d 4d Data Ascii: OTA0MDUzNmEiLCJzaXRlT3duZXJJZCI6IjI0YTIyOTMzLTdiMjUtNGEzZC1iMTlkLWE0ODMyNzY1ODg0NyJ9","intId":15},"ea2821fc-7d97-40a9-9f75-772f29178430":{"instance":"Qzk8bW8bhejfQ6ek16tkNIA1At5D74f1Dl99Lt07Guw.eyJpbnN0YW5jZUlkIjoiOTE4YThjOGQtNTg3MS00ZmU1LWIwNWMtNWMxZjhmM
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 6c 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 49 35 59 6d 56 68 5a 44 45 32 5a 69 30 78 59 7a 63 7a 4c 54 52 6a 5a 47 45 74 59 6a 5a 6a 4e 43 30 79 4f 47 4e 6d 5a 6a 51 32 4f 54 67 34 5a 47 49 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 5a 6a 56 6b 5a 44 63 30 59 57 59 74 5a 47 49 32 5a 53 30 30 5a 44 4e 6c 4c 54 67 33 4d 32 55 74 5a 57 49 32 4f 47 45 31 4e 47 4d 30 4d 32 56 6b 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 77 4c 54 41 33 56 44 41 33 4f 6a 4d 79 4f 6a 55 78 4c 6a 45 79 4d 6c 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 46 70 5a 43 49 36 49 6d 49 78 4d 57 49 34 59 7a 55 30 4c 57 59 35 4e 47 4d 74 4e 44 49 34 59 53 30 35 59 6d 56 6a 4c 57 Data Ascii: lIiwiYXBwRGVmSWQiOiI5YmVhZDE2Zi0xYzczLTRjZGEtYjZjNC0yOGNmZjQ2OTg4ZGIiLCJtZXRhU2l0ZUlkIjoiZjVkZDc0YWYtZGI2ZS00ZDNlLTg3M2UtZWI2OGE1NGM0M2VkIiwic2lnbkRhdGUiOiIyMDI0LTEwLTA3VDA3OjMyOjUxLjEyMloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImIxMWI4YzU0LWY5NGMtNDI4YS05YmVjLW
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 34 5a 57 49 30 4e 54 6b 35 4e 53 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 77 59 6a 46 6b 59 7a 41 31 4e 53 30 30 4d 54 4d 30 4c 54 42 68 4d 7a 4d 74 4d 32 56 68 4d 69 31 69 59 7a 59 34 4f 54 63 79 5a 6a 55 77 4e 54 63 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 49 30 59 54 49 79 4f 54 4d 7a 4c 54 64 69 4d 6a 55 74 4e 47 45 7a 5a 43 31 69 4d 54 6c 6b 4c 57 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 34 7d 2c 22 32 32 62 65 66 33 34 35 2d 33 63 35 62 2d 34 63 31 38 2d 62 37 38 32 2d 37 34 64 34 30 38 35 31 31 32 66 66 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 39 61 4b 52 71 79 64 70 64 38 70 76 42 33 58 37 61 54 65 53 4d 71 49 6b 54 55 6f 4b 73 59 38 50 76 59 76 34 4f 65 5f 6b 2d Data Ascii: 4ZWI0NTk5NSIsImJpVG9rZW4iOiIwYjFkYzA1NS00MTM0LTBhMzMtM2VhMi1iYzY4OTcyZjUwNTciLCJzaXRlT3duZXJJZCI6IjI0YTIyOTMzLTdiMjUtNGEzZC1iMTlkLWE0ODMyNzY1ODg0NyJ9","intId":4},"22bef345-3c5b-4c18-b782-74d4085112ff":{"instance":"9aKRqydpd8pvB3X7aTeSMqIkTUoKsY8PvYv4Oe_k-
2024-10-07 07:32:51 UTC	1432	IN	Data Raw: 54 6b 78 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 49 78 4e 44 55 78 4e 32 55 78 59 53 30 7a 5a 6d 59 77 4c 57 46 6d 4f 54 67 74 4e 44 41 34 5a 53 30 79 59 6d 51 32 4f 54 55 7a 59 7a 4d 32 59 54 49 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 5a 6a 56 6b 5a 44 63 30 59 57 59 74 5a 47 49 32 5a 53 30 30 5a 44 4e 6c 4c 54 67 33 4d 32 55 74 5a 57 49 32 4f 47 45 31 4e 47 4d 30 4d 32 56 6b 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 77 4c 54 41 33 56 44 41 33 4f 6a 4d 79 4f 6a 55 78 4c 6a 45 79 4d 6c 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 39 79 61 57 64 70 62 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 57 51 69 4f 69 4a 6d 4e 57 45 31 5a 6d 4a 6d 4d 69 30 7a Data Ascii: TkxIiwiYXBwRGVmSWQiOiIxNDUxN2UxYS0zZmYwLWFmOTgtNDA4ZS0yYmQ2OTUzYzM2YTIiLCJtZXRhU2l0ZUlkIjoiZjVkZDc0YWYtZGI2ZS00ZDNlLTg3M2UtZWI2OGE1NGM0M2VkIiwic2lnbkRhdGUiOiIyMDI0LTEwLTA3VDA3OjMyOjUxLjEyMloiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiJmNWE1ZmJmMi0z
2024-10-07 07:32:51 UTC	1167	IN	Data Raw: 6a 55 78 4c 6a 45 79 4d 6c 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 46 70 5a 43 49 36 49 6d 49 78 4d 57 49 34 59 7a 55 30 4c 57 59 35 4e 47 4d 74 4e 44 49 34 59 53 30 35 59 6d 56 6a 4c 57 4e 6a 4f 57 59 34 5a 57 49 30 4e 54 6b 35 4e 53 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 34 4e 47 55 77 5a 6d 4d 32 4f 53 31 6a 4e 7a 4d 34 4c 54 41 79 59 57 55 74 4d 57 56 6b 4d 53 30 35 5a 44 46 6a 59 6d 45 32 59 6a 41 79 4d 7a 67 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 49 30 59 54 49 79 4f 54 4d 7a 4c 54 64 69 4d 6a 55 74 4e 47 45 7a 5a 43 31 69 4d 54 6c 6b 4c 57 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 32 31 7d 2c 22 37 65 66 61 39 39 33 36 2d Data Ascii: jUxLjEyMloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImIxMWI4YzU0LWY5NGMtNDI4YS05YmVjLWNjOWY4ZWI0NTk5NSIsImJpVG9rZW4iOiI4NGUwZmM2OS1jNzM4LTAyYWUtMWVkMS05ZDFjYmE2YjAyMzgiLCJzaXRlT3duZXJJZCI6IjI0YTIyOTMzLTdiMjUtNGEzZC1iMTlkLWE0ODMyNzY1ODg0NyJ9","intId":21},"7efa9936-
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 6a 4d 79 4f 6a 55 78 4c 6a 45 79 4d 6c 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 46 70 5a 43 49 36 49 6d 49 78 4d 57 49 34 59 7a 55 30 4c 57 59 35 4e 47 4d 74 4e 44 49 34 59 53 30 35 59 6d 56 6a 4c 57 4e 6a 4f 57 59 34 5a 57 49 30 4e 54 6b 35 4e 53 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 31 4e 6a 67 78 59 32 56 6c 4e 69 30 78 4e 6a 67 78 4c 54 41 30 4d 57 49 74 4d 32 45 30 5a 43 30 32 4e 6d 55 32 4f 57 46 6b 4f 47 49 30 4e 54 49 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 49 30 59 54 49 79 4f 54 4d 7a 4c 54 64 69 4d 6a 55 74 4e 47 45 7a 5a 43 31 69 4d 54 6c 6b 4c 57 45 30 4f 44 4d 79 4e 7a 59 31 4f 44 67 30 4e 79 4a 39 22 2c 22 69 6e 74 49 64 22 3a 36 7d 2c 22 31 34 63 65 31 32 Data Ascii: jMyOjUxLjEyMloiLCJkZW1vTW9kZSI6ZmFsc2UsImFpZCI6ImIxMWI4YzU0LWY5NGMtNDI4YS05YmVjLWNjOWY4ZWI0NTk5NSIsImJpVG9rZW4iOiI1NjgxY2VlNi0xNjgxLTA0MWItM2E0ZC02NmU2OWFkOGI0NTIiLCJzaXRlT3duZXJJZCI6IjI0YTIyOTMzLTdiMjUtNGEzZC1iMTlkLWE0ODMyNzY1ODg0NyJ9","intId":6},"14ce12

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	728	OUT	GET /media/24a229_2c1010200c124a9ba3c2067dbf4a8274~mv2.jpg/v1/fill/w_314,h_201,al_c,q_80,usm_0.66_1.00_0.01,enc_auto/photo_2024-02-14_10-40-01.jpg HTTP/1.1 Host: static.wixstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:51 UTC	599	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 5886 Connection: close Server: openresty/1.25.3.2 Date: Mon, 07 Oct 2024 07:32:51 GMT Access-Control-Allow-Origin: * Cache-Control: public, max-age=15552000, immutable Wix-Tracer: 2n6GzB4Un0LubKnLXYcWJLvfN7l X-Seen-By: image-manipulator-78f848ccd9-7lv94 Timing-Allow-Origin: * Via: 1.1 google, 1.1 49140b838a62cd29e30f20e39a82dad0.cloudfront.net (CloudFront) Vary: Accept X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: biKu6jEYMHvbT7iUQBiPICGzmf9PmEEuXF8b5K7ki5AAaqiX-WdVVA==
2024-10-07 07:32:51 UTC	5886	IN	Data Raw: 52 49 46 46 f6 16 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 28 00 00 00 39 01 00 c8 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e2 00 03 00 14 00 09 00 0e 00 1d 61 63 73 70 4d 53 46 54 00 00 00 00 73 61 77 73 63 74 72 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 68 61 6e 64 9d 91 00 3d 40 80 b0 3d 40 74 2c 81 9e a5 22 8e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 0c 00 00 00 0c 77 74 70 74 00 00 01 18 00 00 00 14 72 58 59 5a 00 00 01 2c 00 00 00 14 67 58 59 5a 00 00 01 40 00 00 00 14 62 58 59 5a 00 00 01 54 00 00 00 14 72 54 52 43 00 00 01 68 00 00 00 60 67 Data Ascii: RIFFWEBPVP8X(9ICCPlcmsmntrRGB XYZ acspMSFTsawsctrl-hand=@=@t,"desc_cprtwtptrXYZ,gXYZ@bXYZTrTRCh`g

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	2936	OUT	GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%221335%22%2C%2214271d6f-ba62-d045-549b-ab972ae1f70e%22%3A%2225%22%7D&beckyExperiments=.DatePickerPortal%2C.PayPalButtonRedirectFlow%2C.SetNoCacheOnRefComponentError%2C.TextInputAutoFillFix%2C.WRichTextVerticalTextNowidth%2C.allowAnimatedImageTransform%2C.buttonUdp%2C.carouselGalleryImageFitting%2C.dynamicLoadTpaFeature%2C.edixIsInFirstFold%2C.fetchBlocksDevCenterWidgetIds%2C.fiveGridLineStudioSkins%2C.fixAnchorSections%2C.fixDisabledLinkButtonStyles%2C.fixGoogleMapLanguage%2C.fixRatingsInputLeftShift%2C.mergeSkinDefaultsFromRegistry%2C.minMaxInCheckboxGroup%2C.motionFeature%2C.removeHeaderFooterWrappers%2C.roundBordersInResponsiveContainer%2C.useInternalBlocksRefType%2C.useSvgLoaderFeature&blocksBuilderManifestGeneratorVersion=1.92.0&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.3981.0&disableStaticPagesUrlHierarchy=false&editorName=Unknown&experiments=dm_deleteLayoutOverridesForR [TRUNCATED] Host: siteassets.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://joeandvelma.wixsite.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:51 UTC	1364	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 07:32:51 GMT Content-Type: application/json Vary: Accept-Encoding ETag: W/"126b8-ALHuc6w6mJPK2WBtuLImtANHqpY" X-Wix-Request-Id: 1728286371.46816277877611599894 Access-Control-Expose-Headers: age,via,x-cache-status,X-cache-status X-Varnish: 606202517 620339345 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google X-Varnish: 949589482 728999680 X-Varnish: 142719293 Server: Pepyaka/1.21.6 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,x-wix-client-artifact-id X-Varnish: 643655275 Content-Length: 75448 X-Cluster-Self-Is-Next: false X-Varnish: 686199424 Age: 0 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVcyGq9sXd9fRW20ZBCx8SirlIr7fQAYggB2dt0Q46uKBs Cache-Control: max-age=2419200 X-Cluster-Node-Role: proxy Accept-Ranges: bytes x-cache: miss glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: LGA-12baf686 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:51 UTC	26	IN	Data Raw: 7b 22 73 74 61 74 65 52 65 66 73 22 3a 7b 7d 2c 22 73 74 72 75 63 74 75 72 65 Data Ascii: {"stateRefs":{},"structure
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 3a 7b 22 6d 61 73 74 65 72 50 61 67 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 3a 5b 22 53 49 54 45 5f 48 45 41 44 45 52 22 2c 22 50 41 47 45 53 5f 43 4f 4e 54 41 49 4e 45 52 22 2c 22 53 49 54 45 5f 46 4f 4f 54 45 52 22 5d 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 4d 61 73 74 65 72 50 61 67 65 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 7d 2c 22 53 49 54 45 5f 48 45 41 44 45 52 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 3a 5b 5d 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 48 65 61 64 65 72 43 6f 6e 74 61 69 6e 65 72 22 2c 22 75 69 54 79 70 65 22 3a 22 54 72 61 6e 73 70 61 72 65 6e 74 53 63 72 65 65 6e 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 Data Ascii: ":{"components":{"masterPage":{"components":["SITE_HEADER","PAGES_CONTAINER","SITE_FOOTER"],"componentType":"MasterPage","pageId":"masterPage"},"SITE_HEADER":{"components":[],"componentType":"HeaderContainer","uiType":"TransparentScreen","pageId":"masterP
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 72 69 66 69 63 61 74 69 6f 6e 22 2c 22 72 65 63 61 70 74 63 68 61 5f 70 6f 70 75 70 5f 73 75 62 74 69 74 6c 65 22 3a 22 50 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 27 72 65 20 68 75 6d 61 6e 2e 22 7d 7d 2c 22 63 75 73 74 6f 6d 55 72 6c 4d 61 70 70 65 72 22 3a 7b 22 61 70 70 50 61 67 65 49 64 73 22 3a 7b 22 66 75 6c 6c 73 63 72 65 65 6e 5f 70 61 67 65 22 3a 22 7a 32 79 64 38 22 2c 22 62 6c 6f 67 22 3a 22 6b 39 72 6a 62 22 2c 22 70 6f 73 74 22 3a 22 61 65 67 66 68 22 2c 22 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 22 3a 22 6c 6c 37 77 67 22 7d 7d 2c 22 6c 69 67 68 74 62 6f 78 22 3a 7b 22 70 6f 70 75 70 50 61 67 65 73 22 3a 7b 7d 2c 22 69 73 52 65 73 70 6f 6e 73 69 76 65 22 3a 66 61 6c 73 65 7d 2c 22 6f 6f 69 54 70 61 53 68 61 72 65 64 43 6f 6e 66 Data Ascii: rification","recaptcha_popup_subtitle":"Please confirm you're human."}},"customUrlMapper":{"appPageIds":{"fullscreen_page":"z2yd8","blog":"k9rjb","post":"aegfh","search_results":"ll7wg"}},"lightbox":{"popupPages":{},"isResponsive":false},"ooiTpaSharedConf
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 73 2d 73 65 72 69 66 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 72 69 61 6c 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 72 69 61 6c 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 73 79 73 74 65 6d 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 2c 22 63 79 72 69 6c 6c 69 63 22 2c 22 68 65 62 72 65 77 22 2c 22 61 72 61 62 69 63 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 ef bd 8d ef bd 93 20 ef bd 90 e3 82 b4 e3 82 b7 e3 83 83 e3 82 af 2c 6d 73 20 70 67 6f 74 68 69 63 2c eb 8f 8b ec 9b Data Ascii: s-serif"},{"displayName":"Arial","fontFamily":"arial","cdnName":"","genericFamily":"sans-serif","provider":"system","characterSets":["latin","latin-ext","cyrillic","hebrew","arabic"],"permissions":"all","fallbacks":" ,ms pgothic,
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 46 61 6d 69 6c 79 22 3a 22 66 61 6e 74 61 73 79 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 6d 6f 6e 6f 74 79 70 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 61 76 65 6e 69 64 61 2d 77 30 32 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 31 31 32 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 76 65 6e 69 64 61 2d 77 30 31 2c 61 76 65 6e 69 64 61 2d 77 30 32 2c 66 61 6e 74 61 73 79 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 76 65 6e 69 72 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 76 65 6e 69 72 2d 6c 74 2d 77 30 31 5f 38 35 2d 68 65 61 76 79 31 34 Data Ascii: Family":"fantasy","provider":"monotype","characterSets":["latin","latin-ext"],"permissions":"all","fallbacks":"avenida-w02","spriteIndex":112,"cssFontFamily":"avenida-w01,avenida-w02,fantasy"},{"displayName":"Avenir","fontFamily":"avenir-lt-w01_85-heavy14
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 46 61 6d 69 6c 79 22 3a 22 61 7a 65 72 65 74 2d 6d 6f 6e 6f 2d 62 6c 61 63 6b 2c 61 7a 65 72 65 74 20 6d 6f 6e 6f 2c 6d 6f 6e 6f 73 70 61 63 65 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 42 61 69 20 4a 61 6d 6a 75 72 65 65 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 61 69 20 6a 61 6d 6a 75 72 65 65 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 42 61 69 2b 4a 61 6d 6a 75 72 65 65 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 67 6f 6f 67 6c 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 22 Data Ascii: Family":"azeret-mono-black,azeret mono,monospace"},{"displayName":"Bai Jamjuree","fontFamily":"bai jamjuree","cdnName":"Bai+Jamjuree","genericFamily":"sans-serif","provider":"google","characterSets":["latin","latin-ext"],"permissions":"all","fallbacks":""
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 42 69 74 74 65 72 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 69 74 74 65 72 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 42 69 74 74 65 72 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 67 6f 6f 67 6c 65 2d 73 65 6c 66 2d 68 6f 73 74 65 64 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 63 79 72 69 6c 6c 69 63 22 2c 22 63 79 72 69 6c 6c 69 63 2d 65 78 74 22 2c 22 76 69 65 74 6e 61 6d 65 73 65 22 2c 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 62 69 74 74 65 72 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 33 39 33 2c Data Ascii: displayName":"Bitter","fontFamily":"bitter","cdnName":"Bitter","genericFamily":"serif","provider":"google-self-hosted","characterSets":["cyrillic","cyrillic-ext","vietnamese","latin","latin-ext"],"permissions":"all","fallbacks":"bitter","spriteIndex":393,
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 3a 22 62 6f 64 6f 6e 69 2d 77 30 35 2d 70 6f 73 74 65 72 2c 62 6f 64 6f 6e 69 2d 70 6f 73 74 65 72 2d 77 31 30 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 31 30 38 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 6f 64 6f 6e 69 2d 77 30 31 2d 70 6f 73 74 65 72 2c 62 6f 64 6f 6e 69 2d 77 30 35 2d 70 6f 73 74 65 72 2c 62 6f 64 6f 6e 69 2d 70 6f 73 74 65 72 2d 77 31 30 2c 66 61 6e 74 61 73 79 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 42 72 61 67 67 61 64 6f 63 69 6f 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 72 61 67 67 61 64 6f 63 69 6f 2d 77 30 31 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 66 61 6e 74 61 73 79 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 6d 6f 6e 6f 74 79 Data Ascii: :"bodoni-w05-poster,bodoni-poster-w10","spriteIndex":108,"cssFontFamily":"bodoni-w01-poster,bodoni-w05-poster,bodoni-poster-w10,fantasy"},{"displayName":"Braggadocio","fontFamily":"braggadocio-w01","cdnName":"","genericFamily":"fantasy","provider":"monoty
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 33 30 39 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 63 61 76 65 61 74 2c 63 75 72 73 69 76 65 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 68 65 6c 73 65 61 20 4d 61 72 6b 65 74 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 63 68 65 6c 73 65 61 20 6d 61 72 6b 65 74 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 43 68 65 6c 73 65 61 2b 4d 61 72 6b 65 74 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 66 61 6e 74 61 73 79 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 67 6f 6f 67 6c 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a Data Ascii: sions":"all","fallbacks":"","spriteIndex":309,"cssFontFamily":"caveat,cursive"},{"displayName":"Chelsea Market","fontFamily":"chelsea market","cdnName":"Chelsea+Market","genericFamily":"fantasy","provider":"google","characterSets":["latin"],"permissions":
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 67 6c 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 31 34 38 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 63 6f 6f 6b 69 65 2c 63 75 72 73 69 76 65 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 6f 71 75 65 74 74 65 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 63 6f 71 75 65 74 74 65 2d 77 30 30 2d 6c 69 67 68 74 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 6d 6f 6e 6f 74 79 70 65 22 2c 22 Data Ascii: gle","characterSets":["latin","latin-ext"],"permissions":"all","fallbacks":"","spriteIndex":148,"cssFontFamily":"cookie,cursive"},{"displayName":"Coquette","fontFamily":"coquette-w00-light","cdnName":"","genericFamily":"sans-serif","provider":"monotype","

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	649	OUT	GET /services/third-party/fonts/Helvetica/Fonts/60be5c39-863e-40cb-9434-6ebafb62ab2b.woff HTTP/1.1 Host: static.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://joeandvelma.wixsite.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:51 UTC	1042	IN	HTTP/1.1 200 OK Content-Length: 41912 X-Amz-Version-Id: W5svUYdYeE8Wa5N08G9xYp0mppomYy9N Server: Pepyaka/1.21.6 Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-* Timing-Allow-Origin: * Access-Control-Allow-Origin: * X-Cluster-Self-Is-Next: true X-Varnish: 269748305 614216365 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVcyY2BjNCeoAk2KGUlRwmpYEQqG35YONJxus2gb4LIC8u X-Cluster-Node-Role: serve Accept-Ranges: bytes Via: 1.1 varnish (Varnish/6.0), 1.1 google Date: Wed, 02 Oct 2024 23:16:54 GMT Cache-Control: public, max-age=7776000, immutable Age: 375357 Last-Modified: Tue, 17 Apr 2018 11:11:07 GMT ETag: "30bfa073c86da82d47b52b7a0b6ad7cd-1" Content-Type: application/x-font-woff Vary: Accept-Encoding x-cache: hit glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: LGA-991dec68 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:51 UTC	348	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a3 b8 00 12 00 00 00 01 68 90 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 54 53 48 00 00 01 94 00 00 00 85 00 00 00 e2 d8 ac 83 e2 4f 53 2f 32 00 00 02 1c 00 00 00 56 00 00 00 60 65 3f 11 9a 56 44 4d 58 00 00 02 74 00 00 03 62 00 00 05 e0 70 e5 78 61 63 6d 61 70 00 00 05 d8 00 00 00 c5 00 00 00 f4 d6 8d f8 0f 63 76 74 20 00 00 06 a0 00 00 00 46 00 00 00 46 04 6b 0d 4f 66 70 67 6d 00 00 06 e8 00 00 00 fd 00 00 01 62 32 4d 73 66 67 61 73 70 00 00 07 e8 00 00 00 10 00 00 00 10 00 16 00 09 67 6c 79 66 00 00 07 f8 00 00 7d 9f 00 01 19 60 89 c2 d7 bf 68 64 6d 78 00 00 85 98 00 00 0b 46 00 00 14 28 de 83 5c e7 68 65 61 64 00 00 90 e0 00 00 00 36 00 00 00 36 e9 91 09 93 68 68 65 61 00 00 91 18 00 00 00 Data Ascii: wOFFhLTSHOS/2V`e?VDMXtbpxacmapcvt FFkOfpgmb2Msfgaspglyf}`hdmxF(\head66hhea
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 00 00 99 6c 00 00 09 6d 00 00 1d c6 ce f5 a3 6e 70 6f 73 74 00 00 a2 dc 00 00 00 13 00 00 00 20 ff b8 00 32 70 72 65 70 00 00 a2 f0 00 00 00 c7 00 00 01 6a 9d fb bf 6f 78 9c 45 8e 31 0e c2 30 0c 45 d3 95 a9 62 8d 6f 80 65 09 26 10 6b b7 d7 a1 a2 15 12 99 b8 1d 33 e2 3e 9c 05 3b 25 f0 94 6f 7d 47 96 bf 53 4a ef 0e 28 08 bc f8 b2 e5 c1 95 72 ab 8d d7 41 04 75 49 a8 a7 3f 8c 2a b6 f1 66 a5 18 86 0f e0 4b 4e 8b 9a 91 91 fa 1a 77 97 8e fc d9 65 f6 88 27 cf 35 fc 0c 53 94 40 78 ae e6 32 d3 7e 9a 91 3e 08 13 a7 4c a5 72 fc 6d d5 45 83 b8 55 24 5b e4 77 1f 38 fe 37 c2 00 00 00 78 9c 63 60 66 92 67 9c c0 c0 ca c0 c1 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 cd 18 18 98 b8 d9 58 98 40 80 a5 81 81 41 5f 80 81 81 8b 01 0a 7c 3c fd fc 81 94 82 a2 12 d3 a9 7f 8f 18 4e Data Ascii: lmnpost 2prepjoxE10Eboe&k3>;%o}GSJ(rAuI?*fKNwe'5S@x2~>LrmEU$[w87xc`fgX@A_\|<N
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 00 00 00 11 ff 41 00 0e 01 11 00 09 01 7e 00 09 02 05 00 0e 02 bc 00 00 02 ca 00 11 00 00 78 9c 5d 8f 3d 4e c4 30 10 85 6d 1c 16 72 03 24 0b c9 96 15 8a 95 57 f4 54 29 9c 48 28 4d 20 14 9e 86 1f 69 57 22 7b 07 a4 34 34 53 70 96 a1 33 5d 2e 86 60 92 8d b6 d8 c6 33 ef cd e8 f3 9b 24 84 6f 92 c8 db f8 2d e5 17 24 f9 f7 99 44 b8 fe 11 b9 50 2f cf 9b 24 a4 37 a6 ea 03 c9 57 16 67 9e 8d b5 e5 4e 79 53 93 2a ea c7 e8 c0 a0 c1 fb 2d 9a da bc bf 6d 29 2b e6 ca 83 1d c2 ad 21 d1 c5 9e df a7 68 a9 04 7d 6c 77 00 77 cc c9 26 4e 36 73 10 98 b0 5f 08 fb 99 c0 80 5f 5e 3a f7 8d 21 75 d3 c6 87 48 43 d0 54 06 d0 d6 9a 8a c6 36 d2 18 b4 05 e0 ad d5 31 29 d7 8f fe 6a c9 7c c1 99 57 6b 6e 2e 0f 94 8e 19 8c 00 c4 83 72 96 46 44 8d 7c c7 a2 93 14 a7 46 b9 18 7c f8 04 50 45 95 Data Ascii: A~x]=N0mr$WT)H(M iW"{44Sp3].`3$o-$DP/$7WgNyS*-m)+!h}lww&N6s__^:!uHCT61)j\|Wkn.rFD\|F\|PE
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: e9 4d 25 74 a4 69 6e ea 01 6e 87 18 a1 4a 81 5a 09 e5 05 5a 4f a8 57 a0 2d 84 36 0b b4 95 d0 36 49 53 a7 20 56 4f d1 dd ba ec b7 56 80 bc 94 6e 5b bb 59 b8 a9 1e d8 cc 3d b0 b9 a8 8f 42 5c 10 2a 2a 98 e4 82 49 2d 60 16 8c 70 c1 08 77 1a 11 cf c3 c4 d1 8f d3 61 48 42 56 ec 7d 37 c0 5e 01 e8 7d d4 7d 56 cd 42 dd 17 22 e4 14 68 84 50 27 21 21 8b 27 e5 f5 67 04 a0 97 d2 b9 1c 9d 4b f7 78 a8 4f 33 bd 63 06 77 57 ac b9 c6 f0 35 77 19 a2 6f b9 63 a9 43 ad 6f 73 de 92 d1 63 5f 28 af 0d 7a bd a1 da 0a 7b 6d c8 e7 0b b9 6d 1b 3b 27 5a 6b 3d 6d e3 1d 1d e3 6d 9e da d6 09 fd a6 b7 bb e2 23 1b e6 4f 5e 64 58 9a 7a e2 5e 6f bc a7 c9 9f 4e f8 7c 89 f4 0b 91 fe b5 6d ad eb fa 23 91 fe 75 ad 6d 6b fb 23 b7 bc dd 05 c6 bf 9e af 63 3a b0 68 91 85 df 19 1f 35 9e d5 52 c4 67 Data Ascii: M%tinnJZZOW-66IS VOVn[Y=B\**I-`pwaHBV}7^}}VB"hP'!!'gKxO3cwW5wocCosc_(z{mm;'Zk=mm#O^dXz^oN\|m#umk#c:h5Rg
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: c5 53 a4 2b f1 00 a2 d7 af df 9b f5 78 b2 7b d7 e3 77 4b 6f d0 e1 08 f6 b6 24 7a f8 77 8f 71 6e f5 e1 d3 23 23 a7 0f af c6 ef f3 b7 a7 d6 ed cf e5 2e 9f 4a a5 a6 2e cf e5 f6 af 4b 31 0d 65 e9 9f cb 8c af d2 67 be bf a4 ef ed 4a 97 41 e3 58 b9 2d ac 45 d3 68 3b 17 d8 25 23 f2 83 2a 25 79 3c 0f e1 bd 89 c1 09 6a 82 53 04 ee 66 ae e1 b9 7e 58 96 5a 48 03 55 d7 8d 0b 40 d4 cd c3 23 0d 1f ee 58 36 be 2a 97 b4 ed 39 f9 05 63 ad a3 a9 23 72 7e 95 fe 5b c9 23 49 22 18 1b d1 0a c9 8e 12 4a 69 ef 7e 8c e8 a7 4a 59 40 92 3c 0b 93 95 b9 5b e8 3f 74 01 91 4f e8 39 31 03 0d 49 b6 86 bd 29 c3 44 cc f5 b9 0d d4 5c 0d f0 12 c0 3e 80 39 80 a3 98 03 1e 86 31 ab 91 a7 e3 27 a4 9e 5c c1 c4 c6 43 41 05 0d 05 15 18 0a 98 3c 2b a8 6f 2b 88 38 2b 88 38 2b e4 04 ad 1a b3 ed 6a 28 Data Ascii: S+x{wKo$zwqn##.J.K1egJAX-Eh;%#%y<jSf~XZHU@#X69c#r~[#I"Ji~JY@<[?tO91I)D\>91'\CA<+o+8+8+j(
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 1c ac d1 75 c2 e6 ae be e8 15 80 7e 2c 7f 28 d3 29 eb f6 95 a4 db 57 92 6e 5f 49 67 2b 49 a0 54 c2 8e 55 49 14 56 89 35 06 0f 6c 0b 41 3c 20 88 f1 ce 04 49 bc 2d 09 13 57 27 51 55 27 08 b1 93 08 b1 93 1a b0 93 08 b1 93 08 b1 53 a8 28 41 61 fc ac 7a 53 08 b3 1c 28 7b 10 23 b8 b4 c3 7b 88 1d 46 4d f9 dc cc 24 d8 5c 34 08 aa c5 2a 53 3e f7 0a f9 dc cc f2 f9 39 fe cd 93 74 a5 34 b1 28 b0 40 69 a2 59 23 1d 44 ff a4 34 59 48 69 b2 48 e5 f2 05 7a 80 1a f8 6b c4 d8 59 45 05 35 4c 6a 56 6d 8b e6 20 86 76 88 09 4b 03 3d b8 15 54 d6 4a 54 d6 4a 5f de 4a 1f d1 4a 54 d6 0a 2a 6b 25 2a 6b 95 54 d6 a5 d3 08 5b b6 98 74 60 fe f2 59 16 cf 56 ee 2a cb 76 86 3b c3 1e 87 d5 30 7c 5b ba fb b6 0e 86 a2 63 3b fb 36 1e 18 ac 0f 8c 1d 9c 6a 9f 1a 8c 1b 2f 84 bb c2 4e 27 fd 13 ee Data Ascii: u~,()Wn_Ig+ITUIV5lA< I-W'QU'S(AazS({#{FM$\4S>9t4(@iY#D4YHiHzkYE5LjVm vK=TJTJ_JJTk%kT[t`YVv;0\|[c;6j/N'
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 33 f4 a9 6f ce 97 9d bf 7f 86 3f 57 13 da 50 0f 75 ce 1b 62 4d 20 a5 c7 97 c8 56 f8 c5 41 57 af 21 14 33 ad 5f 7e 29 65 17 30 76 bd 80 f7 2f 08 cd 89 e8 6e 33 8d 9f fb e8 30 a4 79 d3 43 05 ca 4f 6c 1f e4 e4 99 02 f0 e3 ee 18 06 e2 18 89 e7 18 c4 73 8c 2e 60 4b 50 8c 3e 39 46 62 35 26 d4 71 36 6a 74 c2 e3 a5 78 5d e6 82 4e 83 56 5e 98 a2 da 68 42 ce 56 40 27 66 19 d6 4a 32 ac 15 32 ac 95 6a d6 2a 7e 06 e8 58 2b 14 64 c9 a9 96 e2 f5 df 1a 8b 97 6d 93 39 5e ea 15 53 29 ef dc 6d b7 dd 1f 1d df 95 eb da 34 dc ec f4 47 5c 9e 48 43 f5 91 8a ba 60 9d 2b e8 ab f6 86 9a ab c7 86 4f 9e d4 7f 91 9b 9e 88 05 32 1b d2 b1 4c 4b b0 c6 15 6a e9 8d 77 8c 76 c5 dc 35 0d c1 b8 3f 94 6a 74 6c e1 b1 af 67 e1 15 e3 15 ea 9f f5 da 9e 45 63 9f 57 2c 96 72 5f a4 c5 4a 2b a3 dd 25 Data Ascii: 3o?WPubM VAW!3_~)e0v/n30yCOls.`KP>9Fb5&q6jtx]NV^hBV@'fJ22j*~X+dm9^S)m4G\HC`+O2LKjwv5?jtlgEcW,r_J+%
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 13 5d 8d 65 ef 2b eb de 7c 24 bf f9 d4 25 dd dd 97 9c da 3c 72 68 4b af 4d ff 45 b8 2f e1 ed da b8 3f 93 d9 bf b1 2b 98 59 95 9c 38 b4 b1 7d 78 e6 83 1b 37 7c 70 66 24 3a 3e 3d 24 86 29 e6 b3 87 89 cf d8 63 ed 3b 25 ab 5f 81 ee c7 84 dc d3 10 bf a3 09 f2 64 3b 84 ed 39 5e c3 55 26 13 0f d1 b2 07 fc e5 a1 5b 3c d4 b8 1e e2 2f 0f f1 97 47 f2 d7 3e a1 cb 5f 50 b4 ab f5 4a 31 13 ae 16 6e e3 3c b9 6b 30 69 37 01 c1 78 04 62 f0 08 04 55 02 62 e9 08 02 1a 8e 88 40 04 4f 14 da 11 53 b6 d4 85 52 fa 06 bd 75 eb 7b 37 b4 b4 6c 78 ef d6 f9 7f 3e 79 e3 ba 3d ec 43 b3 67 dd 8d c6 b9 81 cb 6f 9e 9a ba f9 f2 81 99 e4 ea 3d fd fd 7b 56 27 89 9e b9 6d 76 08 1b ea f7 4a e8 d9 52 68 15 73 59 68 2f 40 0e 44 3c 8e 4a ef 05 c8 a9 c5 1d 0b d6 73 73 10 8e 3b df 7a e8 2b 8e 54 b1 Data Ascii: ]e+\|$%<rhKME/?+Y8}x7\|pf$:>=$)c;%_d;9^U&[</G>_PJ1n<k0i7xbUb@OSRu{7lx>y=Cgo={V'mvJRhsYh/@D<Jss;z+T
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 45 3d 91 57 8b a0 f2 99 0e 48 7f 07 1e e5 c0 a3 1c 4a 4e 73 18 b1 2e 16 61 27 e8 d8 4c 07 7b 92 8b 79 90 e9 49 fe f7 00 ff 5b 02 ab f6 67 04 3e cd 4d c1 a5 ff 8a d3 5f 02 e8 03 a1 6c 2f 50 8c 22 94 1d 4b 28 66 a8 84 3e 98 1e bf 40 e0 ab 10 f2 9d b8 ee 53 18 03 7e 4a e0 b7 f2 b4 9d 3e bb 8c 84 4a 19 7d b5 72 ee 7b 0a d7 2f 00 ec 03 29 fd 0e 60 3b 80 69 1e fa 21 40 02 e0 5b 00 2f 15 d2 09 54 c2 70 a9 c0 00 48 f2 12 80 36 f8 8f 3e 09 30 25 81 95 c4 4f 15 71 47 95 fc aa dd 38 fd a6 00 1a 75 e6 03 d4 32 67 e8 f8 06 1d 73 3c e2 c9 81 43 35 d7 19 50 d6 8b 00 bf 05 5d 8c 2f 11 5a 0f 2f 22 3a be d8 81 8b 1d b8 d8 81 8b 1d b8 58 1a 5d f8 87 43 1c 2c f4 e3 8e 4d 9d 79 c2 f8 c6 ff 73 bd f1 ad 2b bf 65 5c 4f 12 e7 07 46 f7 f9 7e 23 79 fe c7 7c 50 f7 ae 21 d9 76 27 eb Data Ascii: E=WHJNs.a'L{yI[g>M_l/P"K(f>@S~J>J}r{/)`;i!@[/TpH6>0%OqG8u2gs<C5P]/Z/":X]C,Mys+e\OF~#y\|P!v'
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 5f d5 00 98 f3 83 e3 50 b2 cf 60 d9 7b 9a c0 21 48 a6 57 71 fa 1e 09 ec d4 ec 95 a4 18 55 52 67 ab f5 72 17 2e 59 28 18 cb eb 01 7c 60 f3 26 80 20 40 48 b2 d1 2b 54 f9 05 d8 c1 37 61 e1 f3 29 80 63 85 92 08 6e 88 d0 0d 2a 02 f6 18 86 dc 4d 00 87 21 7f 16 90 36 e7 80 74 c6 e6 aa 67 a9 ea 59 aa 7a 56 56 fd 1e b8 df bc 0a 70 06 e0 38 40 04 be 3a 2e 94 1c 44 44 47 0d 7c 75 16 38 e1 11 d7 ad 86 40 88 23 e6 48 ca 64 91 66 c9 cc 57 b0 24 9b d2 10 17 0c 15 42 3c ba e0 62 2f 97 d5 86 b0 aa c8 72 ca 4a 6d c9 36 04 2b bd dd ca 99 54 20 a7 ac 24 a7 94 e5 cc 8a 29 fb 93 18 47 3e 09 f0 1e 9c fa 32 4a ae 15 40 ae 45 c6 20 3d 63 24 3d 63 90 9e 31 92 9e 31 6a c5 18 49 cf 18 49 cf 98 7c e5 27 a8 9e 7f c5 a2 f1 84 78 81 72 d0 fd 2e c0 1b 0c f8 54 a3 00 52 7c d6 08 4a d0 84 Data Ascii: _P`{!HWqURgr.Y(\|`& @H+T7a)cn*M!6tgYzVVp8@:.DDG\|u8@#HdfW$B<b/rJm6+T $)G>2J@E =c$=c11jII\|'xr.TR\|J

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	601	OUT	GET /services/wix-thunderbolt/dist/thunderbolt-commons.8230b7cf.bundle.min.js HTTP/1.1 Host: static.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:51 UTC	1163	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 09:21:03 GMT Content-Type: application/javascript Content-Length: 133873 Vary: Accept-Encoding X-Amz-Replication-Status: COMPLETED Last-Modified: Sun, 06 Oct 2024 07:50:39 GMT ETag: "9ee8ca04ce71d6210bc573512f3a9833" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: 1dkqt7jxyyiI8E0WA.8oy8lgQmLw_l0z Server: Pepyaka/1.21.6 Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-* Timing-Allow-Origin: * Access-Control-Allow-Origin: * X-Varnish: 579778889 25903707 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google X-Cluster-Self-Is-Next: false X-Varnish: 681796101 Age: 79908 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVcyGq9sXd9fRW20ZBCx8SirlIr7fQAYggB2dt0Q46uKBs Cache-Control: public, max-age=7776000, immutable X-Cluster-Node-Role: proxy Accept-Ranges: bytes x-cache: miss glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: LGA-12baf686 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:51 UTC	227	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 5f 5f 77 69 78 5f 74 68 75 6e 64 65 72 62 6f 6c 74 5f 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 5f 5f 77 69 78 5f 74 68 75 6e 64 65 72 62 6f 6c 74 5f 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 31 5d 2c 7b 33 37 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 7b 43 4f 55 52 53 45 3a 22 63 6f 75 72 73 65 22 2c 53 45 52 56 49 43 45 3a 22 73 65 72 76 69 63 65 22 Data Ascii: "use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app\|\|[]).push([[671],{37669:function(t,e,n){n.d(e,{D:function(){return r},T:function(){return o}});var r={COURSE:"course",SERVICE:"service"
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 7d 2c 6f 3d 7b 46 49 58 45 44 3a 22 66 69 78 65 64 22 2c 56 41 52 49 45 44 3a 22 76 61 72 69 65 64 22 2c 4e 4f 5f 46 45 45 3a 22 6e 6f 5f 66 65 65 22 2c 43 55 53 54 4f 4d 3a 22 63 75 73 74 6f 6d 22 2c 55 4e 4b 4e 4f 57 4e 5f 52 41 54 45 5f 54 59 50 45 3a 22 75 6e 6b 6e 6f 77 6e 5f 72 61 74 65 5f 74 79 70 65 22 7d 7d 2c 31 35 34 39 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b 54 59 50 45 53 3a 7b 47 52 41 44 49 45 4e 54 5f 4c 49 4e 45 41 52 3a 22 47 72 61 64 69 65 6e 74 4c 69 6e 65 61 72 22 2c 47 52 41 44 49 45 4e 54 5f 45 4c 4c 49 50 53 45 3a 22 47 72 61 64 69 65 6e 74 45 6c 6c 69 70 73 65 22 2c 47 52 41 44 49 45 4e 54 5f 43 Data Ascii: },o={FIXED:"fixed",VARIED:"varied",NO_FEE:"no_fee",CUSTOM:"custom",UNKNOWN_RATE_TYPE:"unknown_rate_type"}},15490:function(t,e,n){n.d(e,{s:function(){return r}});const r={TYPES:{GRADIENT_LINEAR:"GradientLinear",GRADIENT_ELLIPSE:"GradientEllipse",GRADIENT_C
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 65 73 73 22 2c 22 69 73 53 73 72 22 5d 7d 2c 36 34 32 30 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 36 33 36 33 35 29 3b 63 6f 6e 73 74 20 6f 3d 22 5f 5f 70 61 6e 6f 72 61 6d 61 44 61 74 61 22 2c 69 3d 5b 72 2e 70 2e 42 52 4f 57 53 45 52 5f 45 58 54 45 4e 53 49 4f 4e 5d 7d 2c 32 37 35 33 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 50 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 68 74 74 70 73 3a 2f 2f 70 61 6e 6f 72 61 6d 61 2e 77 69 78 61 70 70 73 2e 6e 65 74 2f 61 70 69 Data Ascii: ess","isSsr"]},64200:function(t,e,n){n.d(e,{B:function(){return o},q:function(){return i}});var r=n(63635);const o="__panoramaData",i=[r.p.BROWSER_EXTENSION]},27537:function(t,e,n){n.d(e,{PI:function(){return r}});const r="https://panorama.wixapps.net/api
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 74 7d 2c 68 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 74 7d 2c 4c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 74 7d 2c 52 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 56 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 59 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 2c 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 74 7d 2c 44 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 6c 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 2c 75 3d 22 22 2e 63 6f 6e 63 61 74 28 22 7b 7b 22 2c 22 28 2e Data Ascii: ments:function(){return it},hI:function(){return tt},Le:function(){return ht},RR:function(){return D},Vj:function(){return U},Yu:function(){return $},un:function(){return ut},D9:function(){return w},li:function(){return u}});var r,o,i,u="".concat("{{","(.
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 73 74 2e 65 64 69 74 22 2c 74 2e 46 4f 52 55 4d 5f 50 4f 53 54 5f 50 41 47 49 4e 41 54 49 4f 4e 3d 22 77 69 78 2e 66 6f 72 75 6d 2e 73 75 62 5f 70 61 67 65 73 2e 70 6f 73 74 2e 70 61 67 69 6e 61 74 69 6f 6e 22 2c 74 2e 46 4f 52 55 4d 5f 50 4f 53 54 5f 44 45 45 50 5f 4c 49 4e 4b 5f 44 41 54 41 3d 22 77 69 78 2e 66 6f 72 75 6d 2e 73 75 62 5f 70 61 67 65 73 2e 70 6f 73 74 2e 64 65 65 70 2d 6c 69 6e 6b 2d 64 61 74 61 22 2c 74 2e 46 4f 52 55 4d 5f 50 4f 53 54 5f 50 41 47 49 4e 41 54 49 4f 4e 5f 41 4e 44 5f 44 45 45 50 5f 4c 49 4e 4b 5f 44 41 54 41 3d 22 77 69 78 2e 66 6f 72 75 6d 2e 73 75 62 5f 70 61 67 65 73 2e 70 6f 73 74 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 61 6e 64 2d 64 65 65 70 2d 6c 69 6e 6b 2d 64 61 74 61 22 2c 74 2e 47 52 4f 55 50 3d 22 77 69 78 2e 67 Data Ascii: st.edit",t.FORUM_POST_PAGINATION="wix.forum.sub_pages.post.pagination",t.FORUM_POST_DEEP_LINK_DATA="wix.forum.sub_pages.post.deep-link-data",t.FORUM_POST_PAGINATION_AND_DEEP_LINK_DATA="wix.forum.sub_pages.post.pagination-and-deep-link-data",t.GROUP="wix.g
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 22 22 2e 63 6f 6e 63 61 74 28 41 2c 22 2f 70 2d 7b 7b 70 61 67 65 7d 7d 2f 64 6c 2d 7b 7b 64 65 65 70 4c 69 6e 6b 44 61 74 61 7d 7d 22 29 7d 2c 67 29 7d 2c 53 5b 6f 2e 46 4f 52 55 4d 5f 43 41 54 45 47 4f 52 59 5d 3d 7b 76 61 72 69 61 62 6c 65 73 3a 5b 22 73 6c 75 67 22 5d 2c 72 65 71 75 69 72 65 64 3a 5b 22 73 6c 75 67 22 5d 2c 73 75 62 4d 61 70 70 69 6e 67 73 3a 28 62 3d 7b 7d 2c 62 5b 6f 2e 46 4f 52 55 4d 5f 43 41 54 45 47 4f 52 59 5f 43 52 45 41 54 45 5f 50 4f 53 54 5d 3d 7b 64 65 66 61 75 6c 74 4d 61 70 70 69 6e 67 3a 22 22 2e 63 6f 6e 63 61 74 28 41 2c 22 2f 63 72 65 61 74 65 2d 70 6f 73 74 22 29 7d 2c 62 5b 6f 2e 46 4f 52 55 4d 5f 43 41 54 45 47 4f 52 59 5f 43 52 45 41 54 45 5f 51 55 45 53 54 49 4f 4e 5d 3d 7b 64 65 66 61 75 6c 74 4d 61 70 70 69 6e Data Ascii: "".concat(A,"/p-{{page}}/dl-{{deepLinkData}}")},g)},S[o.FORUM_CATEGORY]={variables:["slug"],required:["slug"],subMappings:(b={},b[o.FORUM_CATEGORY_CREATE_POST]={defaultMapping:"".concat(A,"/create-post")},b[o.FORUM_CATEGORY_CREATE_QUESTION]={defaultMappin
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 72 3d 28 30 2c 4d 2e 5f 5f 72 65 61 64 29 28 65 2c 32 29 2c 6f 3d 28 72 5b 30 5d 2c 72 5b 31 5d 29 3b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 73 75 62 4d 61 70 70 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 74 5d 29 7d 29 29 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 6f 3d 5b 5d 3b 69 66 28 77 28 74 29 29 7b 76 61 72 20 69 3d 28 30 2c 4d 2e 5f 5f 72 65 61 64 29 28 4c 28 74 29 2c 32 29 2c 75 3d 28 69 5b 30 5d 2c 69 5b 31 5d 29 3b 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 28 30 2c 4d 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 29 28 28 30 2c 4d 2e 5f Data Ascii: unction(e){var n,r=(0,M.__read)(e,2),o=(r[0],r[1]);return Boolean(null===(n=null==o?void 0:o.subMappings)\|\|void 0===n?void 0:n[t])}))},D=function(t){var e,n,r,o=[];if(w(t)){var i=(0,M.__read)(L(t),2),u=(i[0],i[1]);o.push.apply(o,(0,M.__spreadArray)((0,M._
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 20 22 73 6c 75 67 22 3a 20 22 73 68 6f 65 73 22 20 7d 27 29 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 44 28 74 29 3b 69 66 28 21 6e 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 5b 74 5d 29 7d 29 29 7c 7c 21 6e 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 59 7d 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 6d 61 69 6e 3a 5b 5d 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 7b 7d 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6b 65 79 2c 6e 3d 74 2e 69 74 65 6d 44 61 74 61 Data Ascii: "slug": "shoes" }'),V=function(t,e){try{var n=D(t);if(!n.every((function(t){return Boolean(e[t])}))\|\|!n.length)throw new Error}catch(t){return Y}},Q=function(t,e,n,r){void 0===t&&(t={main:[]}),void 0===r&&(r={});var o=function(t){var e=t.key,n=t.itemData
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 2c 28 28 6f 3d 7b 7d 29 5b 65 5d 3d 72 5b 6e 2b 31 5d 2c 6f 29 29 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 7b 7d 7d 2c 74 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 5b 5d 29 2c 74 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 28 74 29 2e 74 65 73 74 28 65 29 7d 29 29 7d 2c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 6d 61 69 6e 3a 5b 5d 7d 29 3b 76 61 72 20 6e 3d 28 24 28 74 2c 6f 2e 42 4c 4f 47 5f 50 4f 53 54 29 7c 7c 7b 7d 29 2e 6d 61 70 70 69 6e 67 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 69 6e 63 6c 75 64 65 73 28 64 2e 62 61 73 69 63 53 6c 75 67 Data Ascii: ,((o={})[e]=r[n+1],o))}),{});return i}return{}},tt=function(t,e){return void 0===t&&(t=[]),t.find((function(t){return J(t).test(e)}))},et=function(t,e){void 0===t&&(t={main:[]});var n=($(t,o.BLOG_POST)\|\|{}).mapping;if(null==n?void 0:n.includes(d.basicSlug
2024-10-07 07:32:51 UTC	1390	IN	Data Raw: 3a 76 6f 69 64 20 30 7d 2c 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 6d 61 69 6e 3a 5b 5d 7d 29 3b 76 61 72 20 75 3d 6a 28 6e 29 2c 61 3d 28 6e 74 28 74 2c 75 29 7c 7c 7b 7d 29 2e 6b 65 79 2c 73 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 61 69 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 61 70 70 69 6e 67 7c 7c 22 22 7d 29 29 2e 73 6f 72 74 28 4b 29 2c 63 3d 74 74 28 73 2c 75 29 2c 6c 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 61 69 6e 29 7c Data Ascii: :void 0},ut=function(t,e,n){var r,o,i;void 0===t&&(t={main:[]});var u=j(n),a=(nt(t,u)\|\|{}).key,s=null===(r=null==t?void 0:t.main)\|\|void 0===r?void 0:r.map((function(t){return t.mapping\|\|""})).sort(K),c=tt(s,u),l=null===(i=null===(o=null==t?void 0:t.main)\|

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	1003	OUT	POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=1&is_sav_rollout=0&is_dac_rollout=0&dc=42&microPop=42_g&is_cached=true&msid=f5dd74af-db6e-4d3e-873e-eb68a54c43ed&session_id=2163eaa0-4184-42a1-bad6-e8c90bbf7c5f&ish=false&isb=false&vsi=13663b67-71aa-4efb-83a6-b774c8cc35a9&caching=hit,hit&pv=visible&pn=1&v=1.14629.0&url=https%3A%2F%2Fjoeandvelma.wixsite.com%2Fmy-site%2F&st=2&ts=260&tsn=1467&platformOnSite=true HTTP/1.1 Host: frog.wix.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://joeandvelma.wixsite.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:52 UTC	388	IN	HTTP/1.1 204 No Content Date: Mon, 07 Oct 2024 07:32:51 GMT Connection: close Server: nginx Access-Control-Allow-Origin: https://joeandvelma.wixsite.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:51 UTC	643	OUT	POST /api/v1/bulklog HTTP/1.1 Host: panorama.wixapps.net Connection: keep-alive Content-Length: 497 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://joeandvelma.wixsite.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:51 UTC	497	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 66 75 6c 6c 41 72 74 69 66 61 63 74 49 64 22 3a 22 63 6f 6d 2e 77 69 78 70 72 65 73 73 2e 68 74 6d 6c 2d 63 6c 69 65 6e 74 2e 77 69 78 2d 74 68 75 6e 64 65 72 62 6f 6c 74 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 49 64 22 3a 22 74 68 75 6e 64 65 72 62 6f 6c 74 22 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 76 69 65 77 65 72 22 2c 22 6d 73 69 64 22 3a 22 66 35 64 64 37 34 61 66 2d 64 62 36 65 2d 34 64 33 65 2d 38 37 33 65 2d 65 62 36 38 61 35 34 63 34 33 65 64 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 32 31 36 33 65 61 61 30 2d 34 31 38 34 2d 34 32 61 31 2d 62 61 64 36 2d 65 38 63 39 30 62 62 66 37 63 35 66 22 2c 22 73 65 73 73 69 6f 6e 54 69 6d 65 22 3a 32 36 31 2c 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c Data Ascii: {"messages":[{"fullArtifactId":"com.wixpress.html-client.wix-thunderbolt","componentId":"thunderbolt","platform":"viewer","msid":"f5dd74af-db6e-4d3e-873e-eb68a54c43ed","sessionId":"2163eaa0-4184-42a1-bad6-e8c90bbf7c5f","sessionTime":261,"logLevel":"INFO",
2024-10-07 07:32:52 UTC	864	IN	HTTP/1.1 204 No Content date: Mon, 07 Oct 2024 07:32:52 GMT x-wix-responded-by: wix.monitoring.panorama.v1.log_entity:BulkLog:com.wixpress.monitoring.panorama vary: Accept-Encoding x-seen-by: oDbbMvfdXCdtsgjD2KgaM8iHE4dbw+wewoJ5nvKoyjE=,m0j2EEknGIVUW/liY8BLLnKSuOJm36XoO3pc28fxeJOWWveFEnegpnkLxzZh8fhS,jdDt270t0fniy2BugWKBrfPeHxIa1ehhMnMTHkSuoKuqIXnHwzry/fRu1OrE4paFe64iW9s+zBGwa7r7XJuGXw==,r6yY0ta7bIKrqK70x072lVOAiB5ItQ7htb8deLBaYwQ=,bC7gDtr07KdIhJekawOEFVK6pO5d0bSeMx3Nnjsj5BfZ1y9bJ6AjWUSPG7YUP0gUum9ERptTqoQvyEytQ6eWAg== x-wix-request-id: 1728286371.99932779683489921121 server: Pepyaka x-content-type-options: nosniff access-control-allow-origin: * referrer-policy: no-referrer-when-downgrade via: 1.1 google glb-x-seen-by: wMMTADooq5AJ3cFomJ/MuXOQWGce7NCZXKms1ErOpBs= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:52 UTC	656	OUT	GET /services/third-party/fonts/user-site-fonts/fonts/0078f486-8e52-42c0-ad81-3c8d3d43f48e.woff2 HTTP/1.1 Host: static.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://joeandvelma.wixsite.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:52 UTC	1107	IN	HTTP/1.1 200 OK Content-Length: 17216 X-Amz-Version-Id: ZJhEgw5338rDGW18OcyggGHIv4bi5qCO Access-Control-Allow-Methods: GET,GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-* Timing-Allow-Origin: * Access-Control-Allow-Origin: * X-Varnish: 198646359 989017140 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVc7p8SMHhkq3MZFlnEUNde6ywhpF+YHIbCRJLAAjJ+LwK Accept-Ranges: bytes Server: Pepyaka/1.21.6 X-Wix-Request-Id: 1723454840.585119745078644830123 Via: 1.1 varnish (Varnish/6.0), 1.1 google Access-Control-Max-Age: 3000 X-Cluster-Self-Is-Next: true X-Cluster-Node-Role: serve Date: Mon, 09 Sep 2024 10:29:08 GMT Cache-Control: public, max-age=7776000, immutable Age: 2408624 Last-Modified: Tue, 17 Apr 2018 11:11:01 GMT ETag: "ef4257ccfa0fce4d914b23a28aa6fdf4-1" Content-Type: application/octet-stream x-cache: hit glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: LGA-991dec68 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:52 UTC	283	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 43 40 00 10 00 00 00 00 8e f0 00 00 42 e1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 90 34 06 60 16 8b 60 00 83 46 08 81 1e 09 8f 34 11 08 0a 81 ba 54 81 a1 06 01 36 02 24 03 87 24 0b 87 28 00 04 20 05 9e 42 07 20 0c 81 4a 1b 63 7d 07 d0 d3 76 5c b8 ba 2b fe 79 66 2f 0e e5 02 6e 0c f5 1e 07 e0 36 99 45 23 62 b7 83 a2 b2 fd b7 cb fe ff cf 38 6e c8 10 5c 88 ae b6 fe de 21 4e 17 4c 16 da 9c 13 a7 a9 2e 32 0c 21 a1 76 05 a2 a6 85 ac 7d 27 ad f9 a1 d4 45 77 b0 c8 29 4d 5a df 8a bf a6 36 5c 19 3c 23 35 23 c1 98 50 60 73 06 17 cf 8c 27 e9 88 4d 37 36 ff 30 17 79 c4 f8 64 f0 60 f7 31 17 32 12 55 f4 c2 a3 86 b0 d9 c8 83 3c f0 52 c7 c2 9b e7 81 d7 70 8f b9 b9 52 c1 4f e1 a9 61 29 de 8a ee 5f b2 f5 66 b6 Data Ascii: wOF2C@B4``F4T6$$( B Jc}v\+yf/n6E#b8n\!NL.2!v}'Ew)MZ6\<#5#P`s'M760yd`12U<RpROa)_f
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 18 bb 1e 84 4e 33 4b 8e 3c 8d e7 de dd fd bd 71 0d ec 25 56 04 39 c7 81 97 e8 b7 c0 6e 78 7e 6e ff e7 5e a2 44 1d 8c 70 d4 c0 d1 03 2e 35 36 76 19 ab 64 6b b6 11 6b c6 88 14 fa c9 44 29 b1 02 23 31 b1 50 b1 79 39 ed 87 bc f2 95 5d ff 7d f5 25 ca e5 4f f3 25 b0 7d 33 bb e9 a5 a8 60 74 39 c5 c6 17 7c 21 bd 88 5f f4 9b d2 5f eb 0d d0 bc 1f 97 7e 29 e9 a9 96 91 a6 7b 6c ff d2 b6 35 df a5 5c 2d 00 ee a1 14 b4 01 ec 07 b0 45 f0 d3 63 0b 60 10 0c 0f fd ef d7 ee cc fb 8b 4a 28 bb a5 a3 49 34 14 b1 04 89 12 49 8d 54 45 33 a7 13 bd 32 8b aa 9a eb c4 99 c9 d8 ed f6 97 31 07 24 42 12 6d 92 50 40 50 2a cf b3 01 50 00 ff 03 f3 0c b5 0f e4 21 36 c8 67 73 16 64 8d 83 a1 50 88 ca 4e db 07 a7 96 39 3a 28 d2 88 9c f6 78 6f 30 75 00 7a 2b 36 17 4e 38 24 b4 e8 ae 4d e9 ac 6a Data Ascii: N3K<q%V9nx~n^Dp.56vdkkD)#1Py9]}%O%}3`t9\|!__~){l5\-Ec`J(I4ITE321$BmP@P*P!6gsdPN9:(xo0uz+6N8$Mj
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 59 64 17 72 40 2e 02 f9 c1 1b f2 03 05 50 c2 94 05 0e d7 12 9e 25 02 cb 92 42 84 5a a6 fc 0f 2a ae 33 2f 73 a4 a3 55 aa ff a0 c6 cc ca 1c e5 68 ad ba 40 bd 33 2d 62 f1 00 96 14 96 3a 13 03 8d 03 28 8e 60 65 c4 c5 cf db d0 06 12 54 93 28 36 f9 64 37 83 6e 00 e7 5e c2 c5 b9 a2 0f 0c 60 f4 12 f0 b9 62 3f 83 5f a0 0c 0e 4e d4 c2 0c 0e 2e 34 c2 7f 60 81 72 63 c0 8d a0 31 04 17 0d 29 e8 06 d8 06 c2 41 c4 18 85 cc bf b1 01 88 da 40 34 14 66 ff b0 20 0e c4 43 11 f2 ef 76 70 12 0b 49 50 e4 fd a3 2c 21 15 a4 6d 50 f4 fd 65 14 32 41 16 c8 36 3f 11 88 3c e4 06 f2 a0 f8 8f b7 80 a6 10 14 01 91 45 cc 2b 17 58 1c 36 c9 38 43 ce fd 8c 07 1e 29 f9 a6 1a 6a e1 47 4e 88 90 56 d4 74 b5 5e ec dd 20 2e a3 a4 99 6a b3 d4 9b 45 5a 56 19 d9 64 6b bb dc ab 43 5e 4e 05 73 0d b7 d2 Data Ascii: Ydr@.P%BZ*3/sUh@3-b:(`eT(6d7n^`b?_N.4`rc1)A@4f CvpIP,!mPe2A6?<E+X68C)jGNVt^ .jEZVdkC^Ns
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 3d 48 47 12 7f 0c 85 1b 5c c3 5c 86 17 e4 f8 3c 8c cf 16 a4 ea 34 15 5e a5 ea eb de 92 29 d1 87 85 d5 2b 80 c2 08 bd 53 e5 6c d7 a6 89 03 89 b8 be 10 16 bc 38 c8 9c 7e 0c d1 8b c7 3d d7 83 ad e7 28 f4 d2 8f 94 2f 21 d4 02 0d 64 d7 99 d8 f0 9b a8 cf f9 1e 71 75 85 5b 2a 9b 23 84 a5 40 59 08 e9 4c 28 b7 73 7d e3 fa fb ec 45 4d 36 28 1a 93 04 80 b6 72 d5 f0 55 b8 a0 9c bd 3e f4 99 92 a3 b4 33 e4 0f 30 09 1b a0 20 da 63 fa 8c e4 62 31 40 13 18 68 3d 20 b4 bc 8d 9e c6 17 3e 65 81 02 44 02 a2 17 f9 1f 18 06 f2 12 0c 1c 0a 6c 1b 47 3f 2b 9b 21 90 05 40 0a 5c 8a 1f 54 2f cd 20 59 48 44 bb 2a cc e8 02 8a ce c3 57 8f c8 6d e8 46 03 9b 08 ce 1a f9 01 59 95 37 30 de 30 3e 6f d8 6d 42 c9 16 18 dc 70 2f f9 1d 18 58 69 b6 9b ea 4a 18 d8 09 2f 2c 7a cc cc cd af 3b d2 f1 Data Ascii: =HG\\<4^)+Sl8~=(/!dqu[#@YL(s}EM6(rU>30 cb1@h= >eDlG?+!@\T/ YHDWmFY700>omBp/XiJ/,z;
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: e2 45 dd bf 4d e7 20 e8 82 ce 07 d4 75 85 41 37 84 01 c4 e1 fb 27 b4 3c f0 8f 5c 24 6d 17 01 46 63 4d a0 86 f8 a8 43 f7 6c 1b e3 9a d4 6c 87 93 04 99 21 ad 34 c8 22 58 76 2c cd 15 c7 67 4a 17 2b d1 7a c4 8c 87 07 89 82 f0 ea 09 a9 43 e4 6f 2d 59 f3 99 33 76 4f d8 5e 88 1e be 55 69 5a 03 e7 39 0e 15 c7 16 56 79 0d 4f 41 27 f3 d5 c8 d7 96 34 27 01 f2 19 0a af 87 11 f8 b0 0e c6 66 a9 ac 41 48 2f 09 92 cc ce 1d f2 b0 d1 d3 d6 1a f7 62 45 28 42 3b c4 01 dd 3b 68 fa 77 38 96 38 85 11 68 65 1f 5e b3 16 f4 9b 11 9b 9a 36 a6 5a 71 da 3b ec c0 aa e3 36 d0 16 b6 88 95 4e 5d 7b e2 0b 92 1d 73 7a d5 7a e8 87 80 57 69 c0 bf 81 d9 2b 63 fb 1d 4d 06 43 a2 08 fc b0 0a bf 9b f2 9f 20 16 83 87 41 8d 3a 3f d7 06 8a 79 f3 0f 72 61 c4 04 b4 66 09 49 46 04 df b7 c8 1c 30 10 04 Data Ascii: EM uA7'<\$mFcMCll!4"Xv,gJ+zCo-Y3vO^UiZ9VyOA'4'fAH/bE(B;;hw88he^6Zq;6N]{szzWi+cMC A:?yrafIF0
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 3a d4 5e ac c7 8a f3 1c e4 59 bd fd 92 d4 fa 18 ee 9c 45 94 a2 1c 81 a3 46 ea d3 f4 64 1b c2 e6 a4 67 b0 38 88 93 30 f1 fb 52 d9 4d ed 5c 8b 09 12 08 6c 26 0e e0 59 6c 80 c3 b3 59 ce fe 4a 00 d2 ab fc 0c 14 22 cf 7c 27 7f 0b be 79 f9 e5 35 56 78 a2 41 58 e5 ba c6 20 b0 c4 99 0c bd 1c 5d 20 89 cb a4 c7 25 da 52 92 9e cc c8 9a 95 97 93 27 37 64 1c 38 61 3b c5 ee ba bf 7d 9f ce 51 9f c1 2a cf a5 97 b6 36 02 1d 53 5c a2 42 fe ce 66 a2 5c b3 b6 00 e2 e8 34 26 cb 43 72 03 b0 7f 9d a3 0a 39 0f 6a 6a 68 17 98 8e d7 cc 62 d1 ab 86 66 fe 2b 86 16 97 7b 93 51 24 7e de dc 2a 78 46 d7 a7 51 f8 bc 87 b5 f5 34 17 b3 1c 77 d1 85 0c 2d 4f 7b bb 3c 55 df 26 2e e9 d4 76 76 c6 b1 56 a6 df 5a 95 96 91 95 82 3c 7d 5a 7e 0b 3d a3 13 3f a4 32 1e 62 a2 bd 48 7f 91 30 0b 9e 10 86 Data Ascii: :^YEFdg80RM\l&YlYJ"\|'y5VxAX ] %R'7d8a;}Q6S\Bf\4&Cr9jjhbf+{Q$~xFQ4w-O{<U&.vvVZ<}Z~=?2bH0
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 6c 54 dc cd c7 6c 52 9f c6 3f a4 44 31 e4 86 f4 77 a9 d0 6d 55 3a 33 dd ef 0f c1 c7 45 da 2e 3f 88 7e ca da a2 1c 42 73 ee de 44 f4 a1 7a 64 5d 6b 24 f9 69 da 3f 8c d4 7f 30 67 6e b6 ae db de ac c8 6c 57 ea 43 17 f9 9b a5 5f 2f a5 04 bd 13 66 bc cf c0 08 5c f6 e5 19 3d cb 31 cd 5d 71 93 29 f2 02 95 00 cf 2f b6 e5 f4 25 96 e8 d4 40 3c 50 b7 94 5c 4a 84 d3 35 b5 a2 42 c1 4c c9 22 49 8b 30 8c c2 c9 41 65 ae 84 59 46 d1 0d 68 7d 22 6b a8 90 40 72 5b 95 4c 51 56 21 97 d6 54 e5 8c a3 2d f0 66 5b 1a a5 aa 77 d0 5e 39 d0 5b 0e a8 65 99 e5 b0 1c 25 25 fc 66 e5 49 df 6d 61 15 94 39 80 42 69 2f 97 00 61 da 0d 26 81 02 47 5f 1f 54 61 ef 1d 48 a8 7f 52 42 38 a4 05 75 15 90 bc a0 a6 fa 7b 71 84 8a b1 ee 0c fa 1e 95 c3 83 65 08 c5 3e d0 0b 55 fa 74 95 10 d5 82 6c 82 f3 Data Ascii: lTlR?D1wmU:3E.?~BsDzd]k$i?0gnlWC_/f\=1]q)/%@<P\J5BL"I0AeYFh}"k@r[LQV!T-f[w^9[e%%fIma9Bi/a&G_TaHRB8u{qe>Utl
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 41 be d7 4c ed 16 16 61 74 bc c5 79 1d 61 f0 6b 0a 41 8e f2 b9 a1 26 1f 2f 20 96 98 19 a1 03 db 71 c5 33 2e 71 04 af 80 df c4 cd f3 f4 fe 8b 43 5f 99 f5 47 a6 b8 dc 1c ba c1 4b 23 8c 37 58 ec 29 0e 97 c4 28 0e 00 78 0e 50 c4 c8 d2 66 a4 cf 84 78 62 09 87 a1 50 d3 57 c5 49 35 1b 12 41 e2 d2 0a 85 ca 58 2e 12 98 aa f6 ef 5c 8c 36 b4 94 e6 d2 cc d5 f3 40 45 0c 54 1c 15 c2 91 ab 7f 97 be b4 7a f8 72 39 99 61 03 9f 0d 40 f6 72 e7 c0 bc c0 98 e9 db da 08 e4 e4 0c f9 34 7c 3d 53 54 ad 29 73 76 34 41 81 63 b9 fd e1 0a 53 29 10 ab 6d e6 e2 d9 24 3f 26 9f 43 a5 f2 58 b9 3c a1 45 33 1b 0d 75 d4 7e 26 f3 47 c9 40 6d 2f 93 a6 b2 2a 52 92 41 6a ed 99 d4 1a d0 bd 18 94 55 f4 7b 7b 2b 6a 42 0e f8 25 21 4d d9 74 1f 5c 3d cb 33 ec cb 31 1b 5d 95 cb 19 b2 4a 04 d4 88 11 94 Data Ascii: ALatyakA&/ q3.qC_GK#7X)(xPfxbPWI5AX.\6@ETzr9a@r4\|=ST)sv4AcS)m$?&CX<E3u~&G@m/*RAjU{{+jB%!Mt\=31]J
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 68 4e d8 ac d0 50 98 c2 8d 17 c6 c6 f2 e3 e3 5a e2 e3 5b 82 a0 61 27 4d 51 af ae 27 39 96 73 83 68 7d 94 66 73 5c 07 19 fe b1 61 3a 3e c7 c0 6d 4c 56 73 25 af c6 03 e0 53 30 4b 21 c5 94 52 ee 82 92 c0 d7 1e 05 41 85 79 05 c2 9a f8 0a c4 35 f4 04 ab c0 7f 06 79 8e 34 f0 d8 87 7d dc f2 79 ba 98 be 29 4d 71 4d 06 7d 46 d1 c6 f3 d3 59 0a 29 a6 d4 f1 96 a4 b0 62 9e 50 c8 2a da 3b 90 82 f0 5c 81 d8 1a 42 41 49 ed 5e e8 f8 38 8f 7d cb d6 b9 1e bf 42 89 6a fe 0a 24 af 15 48 55 fb 57 90 ea 2e 2a 7c be 76 2b 58 63 4e 0d a9 ec 74 ac b2 b5 3d 5f f6 c5 be 84 9a 50 e4 62 3c b1 28 32 7a c1 7d 96 8a 54 a6 aa d3 a1 b9 3e 8c 0f 1d 6b 35 a4 da 54 9b 6a cf 8b 65 37 0d 8f 87 ba ee 69 09 af 3c 9b 08 f1 47 f6 e2 87 ff 5b 18 3f 3e a3 98 d4 ef 2f 7a fc 93 7b ab b7 3b a2 96 4f 5f Data Ascii: hNPZ[a'MQ'9sh}fs\a:>mLVs%S0K!RAy5y4}y)MqM}FY)bP;\BAI^8}Bj$HUW.\|v+XcNt=_Pb<(2z}T>k5Tje7i<G[?>/z{;O_
2024-10-07 07:32:52 UTC	1390	IN	Data Raw: 41 cb 96 6a a8 c1 8d b6 9c 61 e2 7f 35 3a 94 90 4c 40 c7 53 78 3a 91 5a 70 1a e1 d1 71 95 44 14 23 7b f3 f4 7e 64 fe 38 6b 1a ed b1 06 a6 58 6b 8c d8 f5 c0 c3 d1 d0 36 5a 72 eb 85 f0 9b d3 00 ec 06 87 23 c7 66 6c 21 28 da 51 12 63 51 96 1e f3 65 25 6c f2 82 45 2e bc a3 11 78 88 99 aa 71 82 11 0d 23 f5 7a e0 bd ad 11 90 fd d4 14 6b d4 26 4c c6 cd 24 41 e9 e8 58 96 ae e8 ff 62 24 07 14 59 41 d2 89 b1 52 6c 6b 5e 71 40 66 77 04 4f 81 14 0e a0 8d 21 29 36 b8 41 eb 4d 1d c6 72 b0 b3 ec 03 76 c1 b2 03 43 0f 34 18 2b 99 55 c9 76 e0 35 08 1d db 5c 3c 5e a9 06 52 4a e0 e3 00 e7 85 60 ca e2 14 81 88 9b e3 46 c6 35 72 03 71 c1 aa d3 8c 24 07 67 1d e6 2a bd c7 0f fc 1f b1 b7 eb 61 18 59 b1 a9 d3 59 b0 a7 b0 7c 0a 1f 62 e3 bf b9 91 30 00 92 dd b6 96 68 12 82 9d 70 be Data Ascii: Aja5:L@Sx:ZpqD#{~d8kXk6Zr#fl!(QcQe%lE.xq#zk&L$AXb$YARlk^q@fwO!)6AMrvC4+Uv5\<^RJ`F5rq$g*aYY\|b0hp

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:52 UTC	2653	OUT	GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2214bcded7-0066-7c35-14d7-466cb3f09103%22%3A%221335%22%2C%2214271d6f-ba62-d045-549b-ab972ae1f70e%22%3A%2225%22%7D&beckyExperiments=.DatePickerPortal%2C.PayPalButtonRedirectFlow%2C.SetNoCacheOnRefComponentError%2C.TextInputAutoFillFix%2C.WRichTextVerticalTextNowidth%2C.buttonUdp%2C.carouselGalleryImageFitting%2C.dynamicLoadTpaFeature%2C.edixIsInFirstFold%2C.fetchBlocksDevCenterWidgetIds%2C.fiveGridLineStudioSkins%2C.fixAnchorSections%2C.fixDisabledLinkButtonStyles%2C.fixGoogleMapLanguage%2C.fixRatingsInputLeftShift%2C.mergeSkinDefaultsFromRegistry%2C.minMaxInCheckboxGroup%2C.roundBordersInResponsiveContainer%2C.useInternalBlocksRefType&blocksBuilderManifestGeneratorVersion=1.92.0&contentType=application%2Fjson&dfCk=6&dfVersion=1.3981.0&editorName=Unknown&experiments=dm_deleteLayoutOverridesForRefComponents%2Cdm_fixAnchorUrlFragment%2Cdm_onlyRerunWhenFixerRequiresReruns%2Cdm_removeTpaChildren%2Cdm_stopMasterpageFixerLoop%2Cspecs.thunderbolt.use_data [TRUNCATED] Host: siteassets.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://joeandvelma.wixsite.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:52 UTC	1314	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 07:32:52 GMT Content-Type: application/json Content-Length: 1348 Vary: Accept-Encoding ETag: W/"544-+7KOkPPzwmvDMoXB7J4sCt6vdfM" X-Wix-Request-Id: 1728286372.0681242497633600113 Access-Control-Expose-Headers: age,via,x-cache-status,X-cache-status X-Varnish: 1008608687 1013748026 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google X-Varnish: 148634371 1018143399 X-Varnish: 298919177 Server: Pepyaka/1.21.6 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,x-wix-client-artifact-id X-Cluster-Self-Is-Next: true X-Varnish: 572537725 Age: 0 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVc22LT0CNhTQaf1wp1orybcyGiDgz9hfid5ubbboKvxbm Cache-Control: max-age=2419200 X-Cluster-Node-Role: serve Accept-Ranges: bytes x-cache: miss glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: LGA-991dec68 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 07:32:52 UTC	76	IN	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 68 65 61 64 65 72 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 53 49 54 45 5f 48 45 41 44 Data Ascii: {"applications":{},"connections":{"wixCode":{"header1":[{"compId":"SITE_HEAD
2024-10-07 07:32:52 UTC	1272	IN	Data Raw: 45 52 22 2c 22 72 6f 6c 65 22 3a 22 68 65 61 64 65 72 31 22 7d 5d 2c 22 66 6f 6f 74 65 72 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 53 49 54 45 5f 46 4f 4f 54 45 52 22 2c 22 72 6f 6c 65 22 3a 22 66 6f 6f 74 65 72 31 22 7d 5d 2c 22 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 50 41 47 45 53 5f 43 4f 4e 54 41 49 4e 45 52 22 2c 22 72 6f 6c 65 22 3a 22 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 31 22 7d 5d 2c 22 70 61 67 65 47 72 6f 75 70 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 53 49 54 45 5f 50 41 47 45 53 22 2c 22 72 6f 6c 65 22 3a 22 70 61 67 65 47 72 6f 75 70 31 22 7d 5d 7d 7d 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6e 66 69 67 73 22 3a 7b 7d 2c 22 6f 72 64 65 72 65 64 43 6f 6e 74 72 6f 6c 6c 65 72 73 22 Data Ascii: ER","role":"header1"}],"footer1":[{"compId":"SITE_FOOTER","role":"footer1"}],"pagesContainer1":[{"compId":"PAGES_CONTAINER","role":"pagesContainer1"}],"pageGroup1":[{"compId":"SITE_PAGES","role":"pageGroup1"}]}},"controllerConfigs":{},"orderedControllers"

Timestamp	Bytes transferred	Direction	Data
2024-10-07 07:32:52 UTC	727	OUT	GET /media/24a229_dbaeb2af29c946278c80437bb795ec62~mv2.jpg/v1/fill/w_339,h_89,al_c,q_80,usm_0.66_1.00_0.01,enc_auto/photo_2024-02-14_10-40-05.jpg HTTP/1.1 Host: static.wixstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joeandvelma.wixsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 07:32:52 UTC	599	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 3960 Connection: close Server: openresty/1.25.3.2 Date: Mon, 07 Oct 2024 07:32:52 GMT Access-Control-Allow-Origin: * Cache-Control: public, max-age=15552000, immutable Wix-Tracer: 2n6GzEJp9S7hvYuaqg4KXTnI0XP X-Seen-By: image-manipulator-78f848ccd9-g5k9v Timing-Allow-Origin: * Via: 1.1 google, 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront) Vary: Accept X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: g4A5AZXu0tDDwj4GH3cA18QarIdBaR4VFQNYWuqHHKj1ykQ7Vm6zUw==
2024-10-07 07:32:52 UTC	3960	IN	Data Raw: 52 49 46 46 70 0f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 28 00 00 00 52 01 00 58 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e2 00 03 00 14 00 09 00 0e 00 1d 61 63 73 70 4d 53 46 54 00 00 00 00 73 61 77 73 63 74 72 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 68 61 6e 64 9d 91 00 3d 40 80 b0 3d 40 74 2c 81 9e a5 22 8e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 5f 63 70 72 74 00 00 01 0c 00 00 00 0c 77 74 70 74 00 00 01 18 00 00 00 14 72 58 59 5a 00 00 01 2c 00 00 00 14 67 58 59 5a 00 00 01 40 00 00 00 14 62 58 59 5a 00 00 01 54 00 00 00 14 72 54 52 43 00 00 01 68 00 00 00 60 67 Data Ascii: RIFFpWEBPVP8X(RXICCPlcmsmntrRGB XYZ acspMSFTsawsctrl-hand=@=@t,"desc_cprtwtptrXYZ,gXYZ@bXYZTrTRCh`g