Edit tour

Windows Analysis Report
https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1

Overview

General Information

Sample URL:	https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1
Analysis ID:	1528277
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1020 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6652 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: codeofconducts.weebly.comConnection: keep-aliveContent-Length: 83sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/json; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://codeofconducts.weebly.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=emailAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w

Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: Form action: https://johnsonhomes.formstack.com/forms/index.php
Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: Form action: https://johnsonhomes.formstack.com/forms/index.php

Source: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email	HTTP Parser: No favicon
Source: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2	HTTP Parser: No favicon
Source: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own	HTTP Parser: No favicon

Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: No <meta name="author".. found
Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: No <meta name="author".. found

Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: No <meta name="copyright".. found
Source: https://johnsonhomes.formstack.com/forms/ccconducts_hr	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50241 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_517.2.dr	String found in binary or memory: <a id="facebook-social-link-footer" rel="noopener" class="social__item" href="https://www.facebook.com/weebly" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_517.2.dr	String found in binary or memory: <a id="youtube-social-link-footer" rel="noopener" class="social__item" href="https://www.youtube.com/user/weebly" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_517.2.dr	String found in binary or memory: "https://www.facebook.com/weebly", equals www.facebook.com (Facebook)
Source: chromecache_517.2.dr	String found in binary or memory: "https://www.linkedin.com/company/weebly", equals www.linkedin.com (Linkedin)
Source: chromecache_517.2.dr	String found in binary or memory: "https://www.twitter.com/weebly", equals www.twitter.com (Twitter)
Source: chromecache_517.2.dr	String found in binary or memory: "https://www.youtube.com/user/weebly", equals www.youtube.com (Youtube)
Source: chromecache_772.2.dr	String found in binary or memory: "https://www.facebook.com/Formstack", equals www.facebook.com (Facebook)
Source: chromecache_772.2.dr	String found in binary or memory: "https://www.linkedin.com/company/formstack/", equals www.linkedin.com (Linkedin)
Source: chromecache_772.2.dr	String found in binary or memory: "https://www.youtube.com/user/formstack", equals www.youtube.com (Youtube)
Source: chromecache_782.2.dr, chromecache_498.2.dr, chromecache_711.2.dr, chromecache_745.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_772.2.dr	String found in binary or memory: all without code.<br/></div></div><div class="footer-social-apps"><div class="footer-socials"><a rel="noopener" href="https://www.facebook.com/Formstack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9ad8dd57292852833_Facebook.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.instagram.com/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9d5fb56d6710c416a_Instagram.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.linkedin.com/company/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd84b8091bd08ffdd39_LinkedIn.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.youtube.com/user/FormStack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd8d5fb5600f30c4169_Youtube.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a></div></div></div><div class="footer-right"><div class="footer-column"><a href="/products" class="footer-title w-inline-block"><div>Products</div></a><a href="/products/online-forms" class="footer-link w-inline-block"><div>Forms</div></a><a href="/products/documents" class="footer-link w-inline-block"><div>Documents</div></a><a href="/products/sign" class="footer-link w-inline-block"><div>Sign</div></a><a href="/products/platform" class="footer-link w-inline-block"><div>Formstack Suite</div></a><a href="/products/forms-for-salesforce" class="footer-link w-inline-block"><div>Forms for Salesforce</div></a><a href="/products/documents-for-salesforce" class="footer-link w-inline-block"><div>Docs for Salesforce</div></a><a href="/integrations" class="footer-link w-inline-block"><div>Integrations</div></a><a href="/pricing" class="footer-link w-inline-block"><div>Pricing</div></a></div><div class="footer-column"><a href="/resources" class="footer-title w-inline-block"><div>Resources</div></a><a href="/resources" class="footer-link w-inline-block"><div>Resource Center</div></a><a href="/templates" class="footer-link w-inline-block"><div>Templates</div></a><a href="https://www.formstack.com/blogs" class="footer-link w-inline-block"><div>Blog</div></a><a href="/sitemap" class="footer-link w-inline-block"><div>Site Map</div></a></div><div class="footer-column"><a href="https://help.formstack.com/" class="footer-title w-inline-block"><div>Support</div></a><a href="https://help.formstack.com/" class="footer-link w-inline-block"><div>Support Center</div></a><a href="/find-a-partner" class="footer-link w-inline-block"><div>Find a Partner</div></a><a href="#" class="footer-link w-inline-block"><div>Professional Services</div></a><a href
Source: chromecache_772.2.dr	String found in binary or memory: all without code.<br/></div></div><div class="footer-social-apps"><div class="footer-socials"><a rel="noopener" href="https://www.facebook.com/Formstack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9ad8dd57292852833_Facebook.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.instagram.com/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9d5fb56d6710c416a_Instagram.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.linkedin.com/company/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd84b8091bd08ffdd39_LinkedIn.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.youtube.com/user/FormStack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd8d5fb5600f30c4169_Youtube.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a></div></div></div><div class="footer-right"><div class="footer-column"><a href="/products" class="footer-title w-inline-block"><div>Products</div></a><a href="/products/online-forms" class="footer-link w-inline-block"><div>Forms</div></a><a href="/products/documents" class="footer-link w-inline-block"><div>Documents</div></a><a href="/products/sign" class="footer-link w-inline-block"><div>Sign</div></a><a href="/products/platform" class="footer-link w-inline-block"><div>Formstack Suite</div></a><a href="/products/forms-for-salesforce" class="footer-link w-inline-block"><div>Forms for Salesforce</div></a><a href="/products/documents-for-salesforce" class="footer-link w-inline-block"><div>Docs for Salesforce</div></a><a href="/integrations" class="footer-link w-inline-block"><div>Integrations</div></a><a href="/pricing" class="footer-link w-inline-block"><div>Pricing</div></a></div><div class="footer-column"><a href="/resources" class="footer-title w-inline-block"><div>Resources</div></a><a href="/resources" class="footer-link w-inline-block"><div>Resource Center</div></a><a href="/templates" class="footer-link w-inline-block"><div>Templates</div></a><a href="https://www.formstack.com/blogs" class="footer-link w-inline-block"><div>Blog</div></a><a href="/sitemap" class="footer-link w-inline-block"><div>Site Map</div></a></div><div class="footer-column"><a href="https://help.formstack.com/" class="footer-title w-inline-block"><div>Support</div></a><a href="https://help.formstack.com/" class="footer-link w-inline-block"><div>Support Center</div></a><a href="/find-a-partner" class="footer-link w-inline-block"><div>Find a Partner</div></a><a href="#" class="footer-link w-inline-block"><div>Professional Services</div></a><a href
Source: chromecache_772.2.dr	String found in binary or memory: all without code.<br/></div></div><div class="footer-social-apps"><div class="footer-socials"><a rel="noopener" href="https://www.facebook.com/Formstack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9ad8dd57292852833_Facebook.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.instagram.com/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd9d5fb56d6710c416a_Instagram.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.linkedin.com/company/formstack/" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd84b8091bd08ffdd39_LinkedIn.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a><a rel="noopener" href="https://www.youtube.com/user/FormStack" target="_blank" class="w-inline-block"><img src="https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5eef7dd8d5fb5600f30c4169_Youtube.svg" width="16" height="16" alt="" loading="lazy" class="footer-social-icon"/></a></div></div></div><div class="footer-right"><div class="footer-column"><a href="/products" class="footer-title w-inline-block"><div>Products</div></a><a href="/products/online-forms" class="footer-link w-inline-block"><div>Forms</div></a><a href="/products/documents" class="footer-link w-inline-block"><div>Documents</div></a><a href="/products/sign" class="footer-link w-inline-block"><div>Sign</div></a><a href="/products/platform" class="footer-link w-inline-block"><div>Formstack Suite</div></a><a href="/products/forms-for-salesforce" class="footer-link w-inline-block"><div>Forms for Salesforce</div></a><a href="/products/documents-for-salesforce" class="footer-link w-inline-block"><div>Docs for Salesforce</div></a><a href="/integrations" class="footer-link w-inline-block"><div>Integrations</div></a><a href="/pricing" class="footer-link w-inline-block"><div>Pricing</div></a></div><div class="footer-column"><a href="/resources" class="footer-title w-inline-block"><div>Resources</div></a><a href="/resources" class="footer-link w-inline-block"><div>Resource Center</div></a><a href="/templates" class="footer-link w-inline-block"><div>Templates</div></a><a href="https://www.formstack.com/blogs" class="footer-link w-inline-block"><div>Blog</div></a><a href="/sitemap" class="footer-link w-inline-block"><div>Site Map</div></a></div><div class="footer-column"><a href="https://help.formstack.com/" class="footer-title w-inline-block"><div>Support</div></a><a href="https://help.formstack.com/" class="footer-link w-inline-block"><div>Support Center</div></a><a href="/find-a-partner" class="footer-link w-inline-block"><div>Find a Partner</div></a><a href="#" class="footer-link w-inline-block"><div>Professional Services</div></a><a href
Source: chromecache_782.2.dr, chromecache_498.2.dr, chromecache_711.2.dr, chromecache_745.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_782.2.dr, chromecache_498.2.dr, chromecache_711.2.dr, chromecache_745.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_586.2.dr, chromecache_437.2.dr, chromecache_441.2.dr, chromecache_742.2.dr, chromecache_779.2.dr, chromecache_722.2.dr, chromecache_434.2.dr, chromecache_691.2.dr, chromecache_566.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_800.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_629.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_629.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_629.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_782.2.dr, chromecache_498.2.dr, chromecache_711.2.dr, chromecache_745.2.dr, chromecache_566.2.dr, chromecache_361.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)
Source: chromecache_548.2.dr	String found in binary or memory: ve grown closer as a family, learned how to birth a cow on YouTube, plant a garden and yes, build a website. They say they are the next generation of tech-savvy farmers!\",\"templates.landing-page.customer-stories.story14_2\":\"Watch Heidi\'s Story\",\"templates.landing-page.customer-stories.story14_3\":\"The First Time Farmers (USA)\",\"templates.landing-page.customer-stories.story14_4\":\"Heidi\",\"templates.landing-page.customer-stories.story14_5\":\"Watch her story\",\"templates.landing-page.customer-stories.story14_6\":\"Heidi\",\"templates.landing-page.customer-stories.story14_7\":\"Botany Bay Farm\",\"templates.landing-page.customer-stories.story14_8\":\"www.botanybayfarm.com\",\"templates.landing-page.customer-stories.story14_9\":\"Founded\",\"templates.landing-page.customer-stories.story1_10\":\"2013\",\"templates.landing-page.customer-stories.story1_11\":\"Retailers Consulted\",\"templates.landing-page.customer-stories.story1_12\":\"50\",\"templates.landing-page.customer-stories.story1_13\":\"Christine started with a dream of a few clients in the Seattle area, but now this retail business consultant and mother of two is about to write her first book, and launch a podcast and her own YouTube channel. It equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: clt1721401.benchurl.com
Source: global traffic	DNS traffic detected: DNS query: codeofconducts.weebly.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: ec.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: johnsonhomes.formstack.com
Source: global traffic	DNS traffic detected: DNS query: static.formstack.com
Source: global traffic	DNS traffic detected: DNS query: www.formstack.com
Source: global traffic	DNS traffic detected: DNS query: www.weebly.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: api.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: ec.weebly.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.dwin1.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.sprig.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: dev.visualwebsiteoptimizer.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cmp.osano.com
Source: global traffic	DNS traffic detected: DNS query: wt.inflection.io
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: consent.api.osano.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: snippet.growsumo.com
Source: global traffic	DNS traffic detected: DNS query: analytics.formstack.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: ob.thisgreencolumn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: formstack.com
Source: global traffic	DNS traffic detected: DNS query: grsm.io
Source: global traffic	DNS traffic detected: DNS query: js.driftt.com
Source: global traffic	DNS traffic detected: DNS query: partnerlinks.io
Source: global traffic	DNS traffic detected: DNS query: obs.thisgreencolumn.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: customer.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: metrics.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: targeting.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: conversation.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: formstack.registration.goldcast.io
Source: global traffic	DNS traffic detected: DNS query: bootstrap.driftapi.com
Source: global traffic	DNS traffic detected: DNS query: newregbuilder.goldcast.io
Source: global traffic	DNS traffic detected: DNS query: rsms.me
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: cdn.lr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: backend.goldcast.io
Source: global traffic	DNS traffic detected: DNS query: dp3k82tjmkfj0.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: addevent.com
Source: global traffic	DNS traffic detected: DNS query: www.addevent.com
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: cdn.addevent.com
Source: global traffic	DNS traffic detected: DNS query: staticassets.goldcast.io
Source: global traffic	DNS traffic detected: DNS query: d6d4ismr40iw.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: dta8euw1l8gvs.cloudfront.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CloudFrontContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Mon, 07 Oct 2024 16:23:29 GMTP3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"X-Frame-Options: sameoriginSet-Cookie: PHPSESSID=c121888d0fdcefd0ed0156047a63f7ce; path=/live-form/; secure; HttpOnlyExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 1b3f5dc0b3c577dc5e7394bf12aed238.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P2X-Amz-Cf-Id: cLNAmEnjsfz-leEkPbJTzGxCj_VA0Al9iUHNMuEO-99gCpAXXYG8bw==X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CloudFrontContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Mon, 07 Oct 2024 16:23:29 GMTP3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"X-Frame-Options: sameoriginSet-Cookie: PHPSESSID=98bc63f0fa57bfc047fa68f990438d74; path=/live-form/; secure; HttpOnlyExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 d4f777a2d5a6d5aeb7eb6201b41775ea.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P2X-Amz-Cf-Id: w4Ww2g7yPuyAlyMX6SVCSHQ4VGZGX9IejqXy-_vYhWfAlRTODwPjOg==X-Content-Type-Options: nosniff

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1020 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6652 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1020 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6652 --field-trial-handle=2188,i,13501946408348875327,3798411968796732096,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://square.online/app/website/users/.	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://square.online/app/store	0%	URL Reputation	safe
https://cdn.cookielaw.org/consent/8841470e-8a69-4bca-9d0f-429385a04d0d/8841470e-8a69-4bca-9d0f-429385a04d0d.json	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://squareup.com/privacy	0%	URL Reputation	safe
https://cdn.sprig.com/shim.js?id=QEHsQ4JNeT	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/6.39.0/otBannerSdk.js	0%	URL Reputation	safe
https://square.online/app/store/users/.	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect?	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://square.online/app/front-door	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
http://typekit.com/eulas/00000000000000007735a14e	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://square.online/app/website/users/.	chromecache_726.2.dr	false	URL Reputation: safe	unknown
http://underscorejs.org	chromecache_700.2.dr, chromecache_622.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/00000000000000007735a157	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://cdn.prod.website-files.com/5ebb0930dd82631397ddca92/5f49000747c213807f0a1d74_FS_32x32.png	chromecache_772.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a154	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a153	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://www.linkedin.com/company/formstack/	chromecache_772.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a150	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_561.2.dr, chromecache_525.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/00000000000000007735a151	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://px.ads.linkedin.com/collect?	chromecache_361.2.dr	false	URL Reputation: safe	unknown
https://cdn2.editmysite.com/images/logos/Blue-Logomark2.png	chromecache_517.2.dr	false		unknown
https://formstack.registration.goldcast.io/events/2ee16b30-e065-4491-81d8-6c3ca29c6352	chromecache_591.2.dr	false		unknown
https://metrics.api.drift.com	chromecache_504.2.dr, chromecache_590.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a15a	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_574.2.dr, chromecache_412.2.dr, chromecache_399.2.dr, chromecache_426.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/00000000000000007735a167	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a165	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a163	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://square.online/app/store	chromecache_726.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/00000000000000007735a164	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://www.weebly.com/app/website/users/.	chromecache_726.2.dr	false		unknown
http://typekit.com/eulas/00000000000000007735a162	chromecache_355.2.dr, chromecache_686.2.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_539.2.dr, chromecache_670.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_426.2.dr	false	URL Reputation: safe	unknown
https://squareup.com/privacy	chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://www.weebly.com?lang=en	chromecache_517.2.dr	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_390.2.dr	false	URL Reputation: safe	unknown
https://www.weebly.com?lang=es	chromecache_517.2.dr	false		unknown
https://dp3k82tjmkfj0.cloudfront.net/fonts/Tahoma/Tahoma-Regular-font.ttf)	chromecache_671.2.dr	false		unknown
https://www.weebly.com?lang=en_GB	chromecache_517.2.dr	false		unknown
https://www.weebly.com?lang=da_DK	chromecache_517.2.dr	false		unknown
https://js.driftt.com/include/	chromecache_772.2.dr	false		unknown
https://square.online/app/store/users/.	chromecache_726.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_664.2.dr, chromecache_527.2.dr	false	URL Reputation: safe	unknown
http://bestiejs.github.io/json3/	chromecache_393.2.dr, chromecache_581.2.dr	false		unknown
https://customer.api.drift.com	chromecache_504.2.dr, chromecache_590.2.dr	false		unknown
https://staticassets.goldcast.io/organization/d25ba200-71dc-4bc2-b062-4bcd9b9919c0/regappsitedata/qt	chromecache_591.2.dr	false		unknown
https://www.weebly.com?lang=zh_TW	chromecache_517.2.dr	false		unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
codeofconducts.weebly.com	74.115.51.8	true	false	unknown
dp3k82tjmkfj0.cloudfront.net	18.66.137.182	true	false	unknown
d6d4ismr40iw.cloudfront.net	18.244.18.118	true	false	unknown
stats.g.doubleclick.net	74.125.206.155	true	false	unknown
addevent.com	52.48.214.168	true	false	unknown
partnerlinks.io	104.18.30.133	true	false	unknown
cdn.lr-ingest.com	172.67.153.27	true	false	unknown
formstack.com	18.66.122.65	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
cm.g.doubleclick.net	142.250.185.66	true	false	unknown
cdn.sprig.com	13.32.27.67	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
api.segment.io	34.223.74.168	true	false	unknown
grsm.io	104.18.11.212	true	false	unknown
match.adsrvr.org	35.71.131.137	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
prod-lb-track-204413666.us-west-2.elb.amazonaws.com	44.226.118.205	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
api.amplitude.com	100.21.168.148	true	false	unknown
consent.api.osano.com	143.204.68.98	true	false	unknown
www.addevent.com	52.49.185.236	true	false	unknown
td.doubleclick.net	142.250.185.130	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
newregbuilder.goldcast.io	99.86.4.27	true	false	unknown
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	44.236.126.52	true	false	unknown
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	34.193.113.164	true	false	unknown
api.sprig.com	184.72.105.205	true	false	unknown
d3fse52kh5q4mp.cloudfront.net	13.32.27.114	true	false	unknown
dev.visualwebsiteoptimizer.com	34.96.102.137	true	false	unknown
rsms.me	104.21.234.234	true	false	unknown
weebly.map.fastly.net	151.101.1.46	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
sp-20201016134952872700000009-271548438.us-west-2.elb.amazonaws.com	52.37.150.252	true	false	unknown
dl7g9llrghqi1.cloudfront.net	18.245.86.73	true	false	unknown
obs.thisgreencolumn.com	34.199.234.25	true	false	unknown
insight.adsrvr.org	35.71.131.137	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
snippet.growsumo.com	104.18.3.70	true	false	unknown
cdn.addevent.com	18.66.112.114	true	false	unknown
www.weebly.com	74.115.51.6	true	false	unknown
d2pbcviywxotf2.cloudfront.net	143.204.215.129	true	false	unknown
ob.thisgreencolumn.com	18.244.140.93	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
formstack.registration.goldcast.io	23.23.158.5	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
d3e54v103j8qbb.cloudfront.net	52.222.232.39	true	false	unknown
staticassets.goldcast.io	18.244.179.8	true	false	unknown
d1nie5ipy0d64w.cloudfront.net	3.165.206.113	true	false	unknown
cdn.prod.website-files.com	104.18.160.117	true	false	unknown
d2gt2ux04o03l1.cloudfront.net	18.245.31.100	true	false	unknown
ib.anycast.adnxs.com	37.252.171.53	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
dta8euw1l8gvs.cloudfront.net	108.157.194.2	true	false	unknown
johnsonhomes.formstack.com	unknown	unknown	false	unknown
metrics.api.drift.com	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
analytics.formstack.com	unknown	unknown	false	unknown
js.driftt.com	unknown	unknown	false	unknown
backend.goldcast.io	unknown	unknown	false	unknown
bootstrap.driftapi.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
conversation.api.drift.com	unknown	unknown	false	unknown
www.formstack.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
static.formstack.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
ec.editmysite.com	unknown	unknown	false	unknown
clt1721401.benchurl.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
ec.weebly.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
cdn2.editmysite.com	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
customer.api.drift.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
wt.inflection.io	unknown	unknown	false	unknown
www.dwin1.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
targeting.api.drift.com	unknown	unknown	false	unknown
cmp.osano.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
74.115.51.8	codeofconducts.weebly.com	United States	27647	WEEBLYUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.115.51.9	unknown	United States	27647	WEEBLYUS	false
44.236.126.52	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.83.110.109	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
74.115.51.6	www.weebly.com	United States	27647	WEEBLYUS	false
3.160.212.122	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
143.204.215.129	d2pbcviywxotf2.cloudfront.net	United States	16509	AMAZON-02US	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
37.252.171.53	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
18.244.18.118	d6d4ismr40iw.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.193.46	unknown	United States	54113	FASTLYUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
44.226.118.205	prod-lb-track-204413666.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.34.5.114	unknown	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
34.223.74.168	api.segment.io	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
143.204.68.98	consent.api.osano.com	United States	16509	AMAZON-02US	false
74.125.71.156	unknown	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
99.86.4.27	newregbuilder.goldcast.io	United States	16509	AMAZON-02US	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
34.199.234.25	obs.thisgreencolumn.com	United States	14618	AMAZON-AESUS	false
104.18.10.212	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.137.182	dp3k82tjmkfj0.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.48.214.168	addevent.com	United States	16509	AMAZON-02US	false
18.244.140.93	ob.thisgreencolumn.com	United States	16509	AMAZON-02US	false
18.172.112.87	unknown	United States	3	MIT-GATEWAYSUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
18.66.122.65	formstack.com	United States	3	MIT-GATEWAYSUS	false
18.244.179.8	staticassets.goldcast.io	United States	16509	AMAZON-02US	false
18.172.153.106	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.122.60	unknown	United States	3	MIT-GATEWAYSUS	false
108.177.15.157	unknown	United States	15169	GOOGLEUS	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
13.227.222.191	unknown	United States	16509	AMAZON-02US	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
100.21.168.148	api.amplitude.com	United States	16509	AMAZON-02US	false
142.250.185.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.32.27.114	d3fse52kh5q4mp.cloudfront.net	United States	7018	ATT-INTERNET4US	false
52.37.150.252	sp-20201016134952872700000009-271548438.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.187.117.192	unknown	United States	16509	AMAZON-02US	false
108.138.233.12	unknown	United States	16509	AMAZON-02US	false
104.21.234.234	rsms.me	United States	13335	CLOUDFLARENETUS	false
104.18.30.133	partnerlinks.io	United States	13335	CLOUDFLARENETUS	false
104.18.2.70	unknown	United States	13335	CLOUDFLARENETUS	false
184.72.105.205	api.sprig.com	United States	14618	AMAZON-AESUS	false
52.12.47.65	unknown	United States	16509	AMAZON-02US	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
18.245.31.100	d2gt2ux04o03l1.cloudfront.net	United States	16509	AMAZON-02US	false
44.240.81.212	unknown	United States	16509	AMAZON-02US	false
52.49.185.236	www.addevent.com	United States	16509	AMAZON-02US	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
3.165.206.113	d1nie5ipy0d64w.cloudfront.net	United States	16509	AMAZON-02US	false
143.204.179.196	unknown	United States	16509	AMAZON-02US	false
23.23.158.5	formstack.registration.goldcast.io	United States	14618	AMAZON-AESUS	false
18.245.86.87	unknown	United States	16509	AMAZON-02US	false
18.66.112.114	cdn.addevent.com	United States	3	MIT-GATEWAYSUS	false
3.228.185.195	unknown	United States	14618	AMAZON-AESUS	false
172.67.153.27	cdn.lr-ingest.com	United States	13335	CLOUDFLARENETUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.18.3.70	snippet.growsumo.com	United States	13335	CLOUDFLARENETUS	false
74.125.206.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.164.163.90	unknown	United States	16509	AMAZON-02US	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.11.212	grsm.io	United States	13335	CLOUDFLARENETUS	false
34.96.102.137	dev.visualwebsiteoptimizer.com	United States	15169	GOOGLEUS	false
52.222.232.39	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
18.245.86.73	dl7g9llrghqi1.cloudfront.net	United States	16509	AMAZON-02US	false
13.32.27.67	cdn.sprig.com	United States	7018	ATT-INTERNET4US	false
18.66.112.5	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.66.122.21	unknown	United States	3	MIT-GATEWAYSUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528277
Start date and time:	2024-10-07 18:22:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@33/722@268/88
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://johnsonhomes.formstack.com/forms/ccconducts_hr Browse: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2 Browse: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own

Input	Output
URL: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"continue", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"HR Code of Conduct Please Continue the Form Below to Proceed", "has_visible_qrcode":false}

URL: https://johnsonhomes.formstack.com/forms/ccconducts_hr Model: jbxai	{ "brand":["Formstack"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Submit Form", "text_input_field_labels":["Email", "Job Title", "Passphrase", "Full Name", "Rate your technical skills"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Employee Information Building a Positive Workplace: Understanding Our Code of Conduct Email Job Title* Passphrase* Full Name* Rate your technical skills* Submit Form", "has_visible_qrcode":false}

URL: https://johnsonhomes.formstack.com/forms/ccconducts_hr Model: jbxai	{ "phishing_score":2, "brands":"Formstack", "legit_domain":"formstack.com", "classification":"known", "reasons":["The URL 'johnsonhomes.formstack.com' is a subdomain of 'formstack.com', which is a legitimate domain associated with the brand Formstack.", "Formstack is a known brand that provides form-building services.", "The presence of a subdomain 'johnsonhomes' does not inherently indicate phishing, as Formstack allows users to create custom subdomains for their forms.", "The input field 'Email' is a common field for form submissions and does not inherently indicate phishing."], "brand_matches":[false], "url_match":false, "brand_input":"Formstack", "input_fields":"Email"}

URL: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2 Model: jbxai	{ "brand":["weebly", "eCommerce by Square"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create Your Website", "text_input_field_labels":["Jessica", "Fine Diamond Eye Ring", "Diana"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Build a professional website that grows with your business. Build a free website that grows with your business.", "has_visible_qrcode":false}

URL: https://www.weebly.com/?utm_source=internal&utm_medium=footer&utm_campaign=2 Model: jbxai	{ "brand":["weebly"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create Your Website", "text_input_field_labels":["Home", "Shop Online", "Events", "Our Story", "Contact", "More", "Cart"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Build a professional website that grows with your business. Build a free website that grows with your business.", "has_visible_qrcode":false}

URL: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own Model: jbxai	{ "brand":["Formstack", "Mercury Insurance", "Tennessee State Government", "Intel", "Kaiser Permanente", "Shriners Hospitals for Children"], "contains_trigger_text":true, "trigger_text":"Build powerful forms. Without code.", "prominent_button_name":"Request a Demo", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Ready to learn whats new in Forms & Documents for Salesforce? Join our AMA on 10/8 at 1:00 PM ET. Save your seat", "has_visible_qrcode":false}

URL: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own Model: jbxai	{ "brand":["Formstack", "Intel", "Kaiser Permanente", "Shriners Hospitals for Children"], "contains_trigger_text":true, "trigger_text":"Build powerful forms. Without code.", "prominent_button_name":"Request a Demo", "text_input_field_labels":["Start Your Free Trial"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Ready to learn whats new in Forms & Documents for Salesforce? Join our AMA on 10/8 at 1:00 PM ET. Save your seat", "has_visible_qrcode":false}

URL: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own Model: jbxai	{ "brand":["Formstack", "Mercury Insurance", "Tennessee State Government", "Intel", "Kaiser Permanente", "Shriners Hospitals for Children"], "contains_trigger_text":true, "trigger_text":"Build powerful forms. Without code.", "prominent_button_name":"Request a Demo", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Ready to learn whats new in Forms & Documents for Salesforce? Join our AMA on 10/8 at 1:00 PM ET. Save your seat", "has_visible_qrcode":false}

URL: https://www.formstack.com/?referring_type=s-prod-form&utm_source=formstack&utm_medium=product&utm_campaign=build+your+own Model: jbxai	{ "brand":["Formstack", "Mercury Insurance", "Tennessee State Government", "Intel", "Kaiser Permanente", "Shriners Hospitals for Children"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Request a Demo", "text_input_field_labels":["Start Your Free Trial"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Build powerful forms. Without code. Formstack empowers your organization with the tools to build online forms, collect information, integrate systems, automate work, and transform data into your most strategic asset.", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:23:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.975546188544928
Encrypted:	false
SSDEEP:	48:8SdCjTmKsgfH1idAKZdA19ehwiZUklqehRdy+3:87jnHfwdy
MD5:	1ABCCC3FC782E1A870E82F353960C84C
SHA1:	F8FD9A17759F750CA777420E6105A01BD2F68BC4
SHA-256:	F4A3B231A9AC947A0395D393FA4F8D088C9CA89AAF231E6C69832E39ACCC1BC2
SHA-512:	D2E880EEC31200202C89BEE84E3F33EA274FB9F57992BD1ACDCFFAD399C66F31C4BB83C6DA722525DBC27F4B974480FAFD5CEF286D404816D0F32873F9C2D445
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....U..1....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IGY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:07 UTC	774	OUT	GET /c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1 HTTP/1.1 Host: clt1721401.benchurl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:09 UTC	278	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Mon, 07 Oct 2024 16:23:08 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Location: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:09 UTC	731	OUT	GET /?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	783	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bef8fb78c6b-EWR CF-Cache-Status: DYNAMIC Cache-Control: private Set-Cookie: is_mobile=0; path=/; domain=codeofconducts.weebly.com Vary: X-W-SSL,Accept-Encoding,User-Agent X-Host: blu93.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Set-Cookie: language=en; expires=Mon, 21-Oct-2024 16:23:10 GMT; Max-Age=1209600; path=/ Set-Cookie: __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w; path=/; expires=Mon, 07-Oct-24 16:53:10 GMT; domain=.weebly.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-10-07 16:23:10 UTC	586	IN	Data Raw: 35 61 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 48 6f 6d 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 79 20 53 69 74 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 Data Ascii: 5ac6<!DOCTYPE html><html lang="en"><head><title>Home</title><meta property="og:site_name" content="" /><meta property="og:title" content="My Site" /><meta property="og:description" content="" /><meta property="og:image" content="https://cdn2.ed
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 63 73 73 2f 73 69 74 65 73 2e 63 73 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 37 32 37 39 39 36 33 36 35 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 63 73 73 2f 6f 6c 64 2f 66 61 6e 63 79 62 6f 78 2e 63 73 73 3f 31 37 32 37 39 39 36 33 36 35 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 Data Ascii: eet" type="text/css" href="//cdn2.editmysite.com/css/sites.css?buildTime=1727996365" /><link rel="stylesheet" type="text/css" href="//cdn2.editmysite.com/css/old/fancybox.css?1727996365" /><link rel="stylesheet" type="text/css" href="//cdn2.editmysite.c
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 70 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 70 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 Data Ascii: #wsite-content p, #wsite-content .product-block .product-title, #wsite-content .product-description, #wsite-content .wsite-form-field label, #wsite-content .wsite-form-field label, .blog-sidebar div.paragraph, .blog-sidebar p, .blog-sidebar .wsite-form-fi
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 62 6c 6f 67 2d 73 69 64 65 62 61 72 20 68 32 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e Data Ascii: arge .product-title, #wsite-content .product-small .product-title, .blog-sidebar h2 {font-weight:400 !important;}#wsite-content h2, #wsite-content .product-long .product-title, #wsite-content .product-large .product-title, #wsite-content .product-small .
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 2e 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 6c 61 62 65 6c 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 64 69 76 2e 70 61 72 61 67 72 61 70 68 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 70 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 Data Ascii: not-footer:not(.wsite-header-elements) .wsite-form-field label, .wsite-elements.wsite-not-footer:not(.wsite-header-elements) .wsite-form-field label, #wsite-content div.paragraph, #wsite-content p, #wsite-content .product-block .product-title, #wsite-cont
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 77 73 69 74 65 2d 65 6c 65 6d 65 6e 74 73 2e 77 73 69 74 65 2d 6e 6f 74 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 68 65 61 64 65 72 2d 65 6c 65 6d 65 6e 74 73 29 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 6f 6e 67 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 6c 61 72 67 65 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 23 77 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 2e 70 72 6f 64 75 63 74 2d 73 6d 61 6c 6c 20 2e 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 2c 20 2e 62 6c 6f 67 2d 73 69 Data Ascii: wsite-elements.wsite-not-footer:not(.wsite-header-elements) .product-small .product-title, #wsite-content h2, #wsite-content .product-long .product-title, #wsite-content .product-large .product-title, #wsite-content .product-small .product-title, .blog-si
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 6a 71 75 65 72 79 2d 31 2e 38 2e 33 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 6c 61 6e 67 2f 65 6e 2f 73 74 6c 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 37 32 37 39 39 36 33 36 35 26 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 6a 73 2f 73 69 74 65 2f 6d 61 69 6e 2e 6a 73 3f 62 75 69 6c 64 54 69 6d 65 3d 31 37 32 37 39 39 36 33 36 35 22 3e 3c 2f 73 63 72 69 70 74 Data Ascii: ='https://cdn2.editmysite.com/js/jquery-1.8.3.min.js'></script><script type="text/javascript" src="//cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1727996365&"></script><script src="//cdn2.editmysite.com/js/site/main.js?buildTime=1727996365"></script
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 22 5f 57 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 42 61 63 6b 62 6f 6e 65 42 6f 6f 74 73 74 72 61 70 22 2c 22 6d 6f 64 65 6c 73 22 3a 7b 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 22 3a 7b 22 5f 63 6c 61 73 73 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 2e 4d 6f 64 65 6c 2e 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 22 2c 22 64 65 66 61 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 76 61 6c 69 64 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 73 22 3a 6e 75 6c 6c 2c 22 69 64 41 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 2c 22 6b 65 79 64 65 66 73 22 3a 6e 75 6c 6c 7d 7d 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 3a 7b 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 22 3a 7b 22 5f 63 6c 61 73 73 22 3a 22 43 75 73 74 6f 6d Data Ascii: "_W.CustomerAccounts.BackboneBootstrap","models":{"CustomerAccounts":{"_class":"CustomerAccounts.Model.CustomerAccounts","defaults":null,"validation":null,"types":null,"idAttribute":null,"keydefs":null}},"collections":{"CustomerAccounts":{"_class":"Custom
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 70 74 22 3e 20 5f 57 2e 72 65 63 61 70 74 63 68 61 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 09 09 0a 09 09 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 70 61 67 65 20 20 77 73 69 74 65 2d 70 61 67 65 2d 69 6e 64 65 78 20 20 63 6f 6c 6c 61 70 73 65 64 2d 6d 65 6e 75 2d 6f 66 66 20 62 61 6e 6e 65 72 2d 62 67 2d 6f 66 66 20 20 77 73 69 74 65 2d 74 68 65 6d 65 2d 6c 69 67 68 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6f 76 65 72 6c 61 79 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 64 69 76 20 Data Ascii: pt"> _W.recaptchaUrl = "https://www.google.com/recaptcha/api.js"; </script></head><body class="header-page wsite-page-index collapsed-menu-off banner-bg-off wsite-theme-light"><div class="site-overlay"></div> <div class="wrapper"> <div
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 66 6f 72 6d 3e 0a 3c 2f 73 70 61 6e 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 69 63 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 70 78 22 20 68 65 69 67 68 74 3d 22 31 33 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2e 37 37 33 38 31 36 34 31 2c 39 2e 31 39 39 35 36 32 39 32 20 4c 31 30 2e 39 39 32 30 37 31 39 2c 31 32 2e 34 31 37 38 31 38 34 20 4c 31 32 2e 34 31 34 38 34 37 2c 31 30 2e 39 39 35 30 34 33 32 20 4c 39 2e 32 30 39 38 30 34 33 39 2c 37 Data Ascii: button-inner"></span></span></form></span> <button class="search-icon"> <svg width="12px" height="13px" viewBox="0 0 12 13"> <path d="M7.77381641,9.19956292 L10.9920719,12.4178184 L12.414847,10.9950432 L9.20980439,7

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	836	OUT	GET /files/main_style.css?1728145442 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:10 UTC	422	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf4cd651a34-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: grn147.sf2p.intern.weebly.net Server: cloudflare
2024-10-07 16:23:10 UTC	947	IN	Data Raw: 34 39 66 35 0d 0a 2e 62 61 73 69 63 2d 72 65 76 65 61 6c 65 72 2e 61 6e 69 6d 61 74 69 6e 67 2c 20 2e 62 61 73 69 63 2d 72 65 76 65 61 6c 65 72 2e 76 69 73 69 62 6c 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 2e 62 61 73 69 63 2d 72 65 76 65 61 6c 65 72 2e 61 6e 69 6d 61 74 69 6e 67 2d 69 6e 2c 20 2e 62 61 73 69 63 2d 72 65 76 65 61 6c 65 72 2e 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 33 73 20 65 61 73 65 3b 20 7d 0a 20 2e 62 61 73 69 63 2d 72 65 76 65 61 6c 65 72 2e 76 69 73 69 62 6c 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 7d 0a 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 20 7b 20 66 Data Ascii: 49f5.basic-revealer.animating, .basic-revealer.visible { display: block !important; } .basic-revealer.animating-in, .basic-revealer.animating-out { opacity: 0; transition: opacity 0.3s ease; } .basic-revealer.visible { opacity: 1; } .font-primary { f
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 75 6c 2c 20 6f 6c 2c 20 6c 69 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 62 6f 64 79 2c 20 68 74 6d 6c 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 2c 20 2e 62 6c 6f 67 2d 62 75 74 74 6f 6e 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 3b 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 33 30 30 6d 73 20 65 61 Data Ascii: fieldset, input { margin: 0; padding: 0; } ul, ol, li, h1, h2, h3, h4, h5, h6, pre, form, body, html, p, blockquote, fieldset, input { margin: 0; padding: 0; } .wsite-button, .blog-button { -webkit-transition: all 300ms ease; -o-transition: all 300ms ea
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 20 2e 62 6c 6f 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 75 72 6c 28 74 68 65 6d 65 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 2d 61 72 72 6f 77 2d 77 68 69 74 65 2e 73 76 67 3f 31 37 32 38 31 34 35 34 34 32 29 3b 20 7d 0a 20 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 20 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 2c 20 23 77 73 69 74 65 2d 6d 69 6e 69 2d 63 61 72 74 20 2e 62 6c 6f 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 2e 77 73 69 74 65 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: .blog-button:hover .wsite-button-inner:before { content: url(theme/images/button-arrow-white.svg?1728145442); } #wsite-mini-cart .wsite-button:hover .wsite-button-inner, #wsite-mini-cart .blog-button:hover .wsite-button-inner { color: #fff; background-c
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 6c 6c 20 32 30 30 6d 73 20 65 61 73 65 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 32 30 30 6d 73 20 65 61 73 65 3b 20 7d 0a 20 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 7d 0a 20 61 20 69 6d 67 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 7d 0a 20 6f 6c 2c 20 75 6c 20 7b 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 68 32 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: ll 200ms ease; transition: all 200ms ease; } a:hover { color: #000; } a img { border: 0; } ol, ul { list-style-type: none; } h2 { font-family: 'Montserrat', sans-serif; padding-bottom: 15px; color: #000; font-size: 48px; font-weight: 700; line-height:
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 77 73 69 74 65 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 6f 70 74 69 6f 6e 2d 67 72 6f 75 70 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 7b 20 77 69 64 74 68 3a 20 31 36 70 78 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 62 32 62 32 61 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 Data Ascii: wsite-form-field input[type="checkbox"], .wsite-com-product-option-groups input[type="radio"], .wsite-com-product-option-groups input[type="checkbox"] { width: 16px; height: 16px; border: 1px solid #b2b2ad !important; -webkit-box-shadow: none; -moz-box-sh
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 61 66 74 65 72 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 20 31 70 78 3b 20 6c 65 66 74 3a 20 34 70 78 3b 20 77 69 64 74 68 3a 20 33 70 78 3b 20 68 65 69 67 68 74 3a 20 36 70 78 3b 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 45 30 45 30 45 30 3b 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 Data Ascii: input[type="checkbox"]:after { -webkit-transform: rotate(45deg); -ms-transform: rotate(45deg); -o-transform: rotate(45deg); transform: rotate(45deg); position: relative; top: 1px; left: 4px; width: 3px; height: 6px; border: solid #E0E0E0; border-width: 0
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 78 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 46 46 38 45 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 62 6f 64 79 2e 77 73 69 74 65 2d 74 68 65 6d 65 2d 64 61 72 6b 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 69 74 65 6d 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 7d 0a 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 69 74 65 6d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 Data Ascii: x; height: 30px; color: #000; background-color: #00FF8E !important; border-radius: 100%; line-height: 30px; text-align: center; } body.wsite-theme-dark .wsite-social .wsite-social-item:before { color: #fff; } .wsite-social .wsite-social-item:hover:befor
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 34 34 30 70 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 20 2e 70 61 72 69 73 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 23 77 73 69 74 65 2d 74 69 74 6c 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6a 61 6c 6c 61 20 4f 6e 65 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: items: center; align-items: center; position: relative; width: 100%; padding: 0 20px; max-width: 1440px; box-sizing: border-box; } .paris-header .container #wsite-title { font-family: 'Fjalla One', sans-serif; color: #000; font-size: 36px; text-transform
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 2d 70 61 63 6b 3a 20 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 20 2d 6d 73 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 62 61 73 69 73 3a 20 32 35 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 62 61 73 69 73 3a 20 32 35 25 3b 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 32 35 25 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 7d 0a 20 2e 70 61 72 69 73 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 74 65 2d 75 74 69 6c 73 20 3e 20 2a 3a 6e 6f 74 28 2e 77 73 69 74 65 2d 73 65 61 72 63 68 29 20 7b 20 6d Data Ascii: -pack: end; -webkit-justify-content: flex-end; -ms-justify-content: flex-end; justify-content: flex-end; -webkit-flex-basis: 25%; -ms-flex-basis: 25%; flex-basis: 25%; white-space: nowrap; } .paris-header .container .site-utils > *:not(.wsite-search) { m
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 69 63 6f 6e 20 7b 20 66 69 6c 6c 3a 20 23 30 30 30 3b 20 7d 0a 20 2e 70 61 72 69 73 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 74 65 2d 75 74 69 6c 73 20 23 6d 65 6d 62 65 72 2d 6c 6f 67 69 6e 2c 20 2e 70 61 72 69 73 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 74 65 2d 75 74 69 6c 73 20 23 70 67 6d 65 6d 62 65 72 2d 6c 6f 67 69 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 Data Ascii: icon { fill: #000; } .paris-header .container .site-utils #member-login, .paris-header .container .site-utils #pgmember-login { display: -webkit-flex; display: -ms-flexbox; display: -ms-flex; display: flex; -webkit-flex-direction: column; -ms-flex-direct

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	828	OUT	GET /files/templateArtifacts.js?1728145442 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:10 UTC	438	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf4ca744393-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS X-Host: blu116.sf2p.intern.weebly.net Server: cloudflare
2024-10-07 16:23:10 UTC	931	IN	Data Raw: 31 62 66 38 0d 0a 2f 2f 20 47 65 74 73 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 5f 57 0a 57 65 65 62 6c 79 20 3d 20 77 69 6e 64 6f 77 2e 57 65 65 62 6c 79 20 7c 7c 20 7b 7d 3b 0a 57 65 65 62 6c 79 2e 74 65 6d 70 6c 61 74 65 73 20 3d 20 7b 0a 09 09 27 73 65 61 72 63 68 2f 66 69 6c 74 65 72 2f 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 20 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 63 6f 6c 6f 72 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 66 61 63 65 74 5f 6e 61 6d 65 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 7b 7b 63 6f 6c 75 6d 6e 5f 6e 61 6d 65 7d 7d 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 Data Ascii: 1bf8// Gets converted to _WWeebly = window.Weebly \|\| {};Weebly.templates = {'search/filter/search-facet-color': "<li class=\"wsite-search-facet wsite-search-facet-color\">\n\t<h3>{{facet_name}}<\/h3>\n\t<form name=\"{{column_name}}\">\n\t\t<ul clas
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 6e 61 6d 65 3d 5c 22 7b 7b 66 69 6c 74 65 72 5f 74 65 78 74 7d 7d 5c 22 20 76 61 6c 75 65 3d 5c 22 31 5c 22 20 5c 2f 3e 3c 21 2d 2d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 7b 7b 21 20 43 6f 6d 6d 65 6e 74 69 6e 67 20 27 68 61 63 6b 27 20 74 6f 20 72 65 6d 6f 76 65 20 73 70 61 63 65 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 2d 2d 3e 3c 61 3e 20 7b 7b 21 20 54 68 65 73 65 20 61 72 65 6e 27 74 20 72 65 61 6c 20 6c 69 6e 6b 73 2c 20 75 73 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 65 20 63 6f 6c 6f 72 73 20 7d 7d 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 5c 74 Data Ascii: t\t<li>\n\t\t\t\t\t<label>\n\t\t\t\t\t\t<input type=\"checkbox\" name=\"{{filter_text}}\" value=\"1\" \/>...\n\t\t\t\t\t\t{{! Commenting 'hack' to remove spaces }}\n\t\t\t\t\t\t--><a> {{! These aren't real links, used to use theme colors }}\n\t\t\t\t\t\t
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5c 22 3e 5c 6e 5c 74 3c 68 33 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 63 6f 72 65 2e 73 65 61 72 63 68 2e 66 69 6c 74 65 72 2e 73 65 61 72 63 68 2d 66 61 63 65 74 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 68 33 3e 5c 6e 5c 74 3c 66 6f 72 6d 20 6e 61 6d 65 3d 5c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 61 63 65 74 5c 22 3e 5c 6e 5c 74 5c 74 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 66 61 63 65 74 2d 65 6e 74 72 69 65 73 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 3c 6c 69 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 3c 6c 61 62 65 6c 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 5c 74 3c 69 6e 70 75 74 20 74 79 Data Ascii: et-availability\">\n\t<h3>{{#stl}}templates.platform.theme.core.search.filter.search-facet-availability_1{{\/stl}}<\/h3>\n\t<form name=\"availability-facet\">\n\t\t<ul class=\"wsite-search-facet-entries\">\n\t\t\t<li>\n\t\t\t\t<label>\n\t\t\t\t\t<input ty
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 70 72 6f 64 75 63 74 2d 67 72 6f 75 70 7d 7d 5c 6e 7b 7b 5c 2f 68 61 73 5f 70 72 6f 64 75 63 74 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 6e 6f 72 6d 61 6c 7d 7d 5c 6e 7b 7b 5c 2f 70 61 67 65 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 6d 70 74 79 7d 7d 5c 6e 7b 7b 5c 2f 6e 6f 5f 72 65 73 75 6c 74 73 7d 7d 5c 6e 5c 6e 7b 7b 23 65 72 72 6f 72 5f 72 65 73 75 6c 74 7d 7d 5c 6e 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 72 65 73 75 6c 74 73 5c 2f 65 72 72 6f 72 7d 7d 5c 6e 7b Data Ascii: rch\/results\/product-group}}\n{{\/has_product_results}}\n\n{{#page_results}}\n\t{{> search\/results\/normal}}\n{{\/page_results}}\n\n{{#no_results}}\n\t{{> search\/results\/empty}}\n{{\/no_results}}\n\n{{#error_result}}\n\t{{> search\/results\/error}}\n{
2024-10-07 16:23:10 UTC	1369	IN	Data Raw: 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 5c 22 3e 5c 6e 5c 74 5c 74 7b 7b 23 68 69 67 68 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 6c 6f 77 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e 63 79 5f 68 74 6d 6c 7d 7d 7d 7b 7b 6c 6f 77 5f 70 72 69 63 65 5f 6e 75 6d 62 65 72 7d 7d 5c 6e 5c 74 5c 74 5c 74 3c 5c 2f 73 70 61 6e 3e 5c 6e 5c 74 5c 74 5c 74 20 2d 5c 6e 5c 74 5c 74 5c 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 72 6f 64 75 63 74 2d 70 72 69 63 65 2d 68 69 67 68 5c 22 3e 5c 6e 5c 74 5c 74 5c 74 5c 74 7b 7b 7b 63 75 72 72 65 6e Data Ascii: earch-product-price\">\n\t\t{{#high_price_number}}\n\t\t\t<span class=\"wsite-search-product-price-low\">\n\t\t\t\t{{{currency_html}}}{{low_price_number}}\n\t\t\t<\/span>\n\t\t\t -\n\t\t\t<span class=\"wsite-search-product-price-high\">\n\t\t\t\t{{{curren
2024-10-07 16:23:10 UTC	761	IN	Data Raw: 72 6f 72 27 3a 20 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 6e 6f 2d 72 65 73 75 6c 74 73 5c 22 3e 5c 6e 5c 74 3c 70 3e 7b 7b 23 73 74 6c 7d 7d 74 65 6d 70 6c 61 74 65 73 2e 70 6c 61 74 66 6f 72 6d 2e 74 68 65 6d 65 2e 62 61 73 65 2e 73 65 61 72 63 68 2e 72 65 73 75 6c 74 73 2e 65 72 72 6f 72 5f 31 7b 7b 5c 2f 73 74 6c 7d 7d 3c 5c 2f 70 3e 5c 6e 3c 5c 2f 6c 69 3e 5c 6e 22 2c 0a 09 09 27 73 65 61 72 63 68 2f 63 6f 72 65 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 27 3a 20 22 3c 6f 6c 20 69 64 3d 5c 22 77 73 69 74 65 2d 73 65 61 72 63 68 2d 70 61 67 65 6e 61 76 5c 22 3e 5c 6e 5c 74 7b 7b 23 70 61 67 69 6e 61 74 69 6f 6e 5f 69 74 65 6d 73 7d 7d 5c 6e 5c 74 5c 74 7b 7b 3e 20 73 65 61 72 63 68 5c 2f 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7d 7d 5c 6e 5c Data Ascii: ror': "<li class=\"no-results\">\n\t<p>{{#stl}}templates.platform.theme.base.search.results.error_1{{\/stl}}<\/p>\n<\/li>\n",'search/core-pagination-list': "<ol id=\"wsite-search-pagenav\">\n\t{{#pagination_items}}\n\t\t{{> search\/pagination-item}}\n\
2024-10-07 16:23:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Windows Analysis Report
https://clt1721401.benchurl.com/c/l?u=11A4AD02&e=18D710E&c=1A4439&t=0&l=1112B6FBA&email=WfkO0EZdK9G0PAordUJgoG5usfNWoAHXfMGPOVnZMlE%3D&seq=1

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	824	OUT	GET /files/theme/plugins.js?1620848883 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:11 UTC	849	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf4ddd07d0b-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c" Last-Modified: Mon, 29 Apr 2024 13:02:46 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: ObFtpOD7lrmhG0zmFAOy0TgYU8Rfu/flI9KGymxmCnD8PEL7RdImLXmoxOdI7MQQmj5o71Q+Pso= x-amz-replication-status: COMPLETED x-amz-request-id: MSWDA4GHJA2WGWPW x-amz-server-side-encryption: AES256 x-amz-version-id: sTNQn2rzaHgQudj7CuT9D50TBpz30e4M X-Storage-Bucket: zb635 X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5 Server: cloudflare
2024-10-07 16:23:11 UTC	520	IN	Data Raw: 32 32 64 63 0d 0a 0a 2f 2a 21 20 48 61 6d 6d 65 72 2e 4a 53 20 2d 20 76 32 2e 30 2e 34 20 2d 20 32 30 31 34 2d 30 39 2d 32 38 0a 20 2a 20 68 74 74 70 3a 2f 2f 68 61 6d 6d 65 72 6a 73 2e 67 69 74 68 75 62 2e 69 6f 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4a 6f 72 69 6b 20 54 61 6e 67 65 6c 64 65 72 3b 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 65 78 70 6f 72 74 4e 61 6d 65 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 76 61 72 20 56 45 4e 44 4f 52 5f 50 52 45 46 49 58 45 53 20 3d 20 5b 27 27 2c 20 27 77 65 62 6b 69 Data Ascii: 22dc/! Hammer.JS - v2.0.4 - 2014-09-28 http://hammerjs.github.io/ * * Copyright (c) 2014 Jorik Tangelder; * Licensed under the MIT license */(function(window, document, exportName, undefined) { 'use strict';var VENDOR_PREFIXES = ['', 'webki
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 6f 75 74 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 63 6f 6e 74 65 78 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 69 6d 65 6f 75 74 43 6f 6e 74 65 78 74 28 66 6e 2c 20 74 69 6d 65 6f 75 74 2c 20 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 69 6e 64 46 6e 28 66 6e 2c 20 63 6f 6e 74 65 78 74 29 2c 20 74 69 6d 65 6f 75 74 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 69 66 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 61 6e 20 61 72 72 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 66 6e 20 6f 6e 20 65 61 63 68 20 65 6e 74 72 79 0a 20 2a 20 69 66 20 69 74 20 61 69 6e 74 20 61 6e Data Ascii: out * @param {Object} context * @returns {number} /function setTimeoutContext(fn, timeout, context) { return setTimeout(bindFn(fn, context), timeout);}/* * if the argument is an array, we want to execute the fn on each entry * if it aint an
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 72 67 65 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 64 65 73 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 64 65 73 74 2c 20 73 72 63 2c 20 6d 65 72 67 65 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 72 63 29 3b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6b 65 79 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 65 72 67 65 20 7c 7c 20 28 6d 65 72 67 65 20 26 26 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 5b 6b 65 79 73 5b 69 5d 5d 20 3d 20 73 72 63 5b 6b 65 79 73 5b 69 5d 5d 3b 0a Data Ascii: rge] * @returns {Object} dest */function extend(dest, src, merge) { var keys = Object.keys(src); var i = 0; while (i < keys.length) { if (!merge \|\| (merge && dest[keys[i]] === undefined)) { dest[keys[i]] = src[keys[i]];
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 67 73 5d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 62 6f 6f 6c 4f 72 46 6e 28 76 61 6c 2c 20 61 72 67 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 76 61 6c 20 3d 3d 20 54 59 50 45 5f 46 55 4e 43 54 49 4f 4e 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 2e 61 70 70 6c 79 28 61 72 67 73 20 3f 20 61 72 67 73 5b 30 5d 20 7c 7c 20 75 6e 64 65 66 69 6e 65 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 75 73 65 20 74 68 65 20 76 61 6c 32 20 77 68 65 6e 20 76 61 6c 31 20 69 73 20 75 6e 64 65 66 69 6e 65 64 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 Data Ascii: gs] * @returns {Boolean} /function boolOrFn(val, args) { if (typeof val == TYPE_FUNCTION) { return val.apply(args ? args[0] \|\| undefined : undefined, args); } return val;}/* * use the val2 when val1 is undefined * @param {*}
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 66 69 6e 64 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 42 6f 6f 6c 65 61 6e 7d 20 66 6f 75 6e 64 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 53 74 72 28 73 74 72 2c 20 66 69 6e 64 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 73 74 72 2e 69 6e 64 65 78 4f 66 28 66 69 6e 64 29 20 3e 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 73 70 6c 69 74 20 73 74 72 69 6e 67 20 6f 6e 20 77 68 69 74 65 73 70 61 63 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 73 74 72 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 77 6f 72 64 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 73 70 6c 69 74 53 74 72 28 73 74 72 29 20 7b 0a 20 20 Data Ascii: param {String} str * @param {String} find * @returns {Boolean} found /function inStr(str, find) { return str.indexOf(find) > -1;}/* * split string on whitespace * @param {String} str * @returns {Array} words */function splitStr(str) {
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 20 76 61 72 20 69 20 3d 20 30 3b 0a 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 73 72 63 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 6b 65 79 20 3f 20 73 72 63 5b 69 5d 5b 6b 65 79 5d 20 3a 20 73 72 63 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 41 72 72 61 79 28 76 61 6c 75 65 73 2c 20 76 61 6c 29 20 3c 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 73 72 63 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 73 5b 69 5d 20 3d 20 76 61 6c 3b 0a 20 20 20 20 20 20 20 20 69 2b 2b 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 73 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6b 65 79 29 20 7b 0a 20 20 Data Ascii: var i = 0; while (i < src.length) { var val = key ? src[i][key] : src[i]; if (inArray(values, val) < 0) { results.push(src[i]); } values[i] = val; i++; } if (sort) { if (!key) {
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 2f 6d 6f 62 69 6c 65 7c 74 61 62 6c 65 74 7c 69 70 28 61 64 7c 68 6f 6e 65 7c 6f 64 29 7c 61 6e 64 72 6f 69 64 2f 69 3b 0a 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 3d 20 28 27 6f 6e 74 6f 75 63 68 73 74 61 72 74 27 20 69 6e 20 77 69 6e 64 6f 77 29 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 50 4f 49 4e 54 45 52 5f 45 56 45 4e 54 53 20 3d 20 70 72 65 66 69 78 65 64 28 77 69 6e 64 6f 77 2c 20 27 50 6f 69 6e 74 65 72 45 76 65 6e 74 27 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 76 61 72 20 53 55 50 50 4f 52 54 5f 4f 4e 4c 59 5f 54 4f 55 43 48 20 3d 20 53 55 50 50 4f 52 54 5f 54 4f 55 43 48 20 26 26 20 4d 4f 42 49 4c 45 5f 52 45 47 45 58 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 0a 0a 76 61 72 20 49 Data Ascii: /mobile\|tablet\|ip(ad\|hone\|od)\|android/i;var SUPPORT_TOUCH = ('ontouchstart' in window);var SUPPORT_POINTER_EVENTS = prefixed(window, 'PointerEvent') !== undefined;var SUPPORT_ONLY_TOUCH = SUPPORT_TOUCH && MOBILE_REGEX.test(navigator.userAgent);var I
2024-10-07 16:23:11 UTC	198	IN	Data Raw: 6f 6d 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 6f 6f 6c 4f 72 46 6e 28 6d 61 6e 61 67 65 72 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 2c 20 5b 6d 61 6e 61 67 65 72 5d 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 68 61 6e 64 6c 65 72 28 65 76 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 68 69 73 2e 69 6e 69 74 28 29 3b 0a 0a 7d 0a 0a 49 6e 70 75 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 0d 0a Data Ascii: omHandler = function(ev) { if (boolOrFn(manager.options.enable, [manager])) { self.handler(ev); } }; this.init();}Input.prototype = { /** * should
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 20 68 61 6e 64 6c 65 20 74 68 65 20 69 6e 70 75 74 45 76 65 6e 74 20 64 61 74 61 20 61 6e 64 20 74 72 69 67 67 65 72 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 2a 20 40 76 69 72 74 75 61 6c 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 68 61 6e 64 6c 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 7d 2c 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 62 69 6e 64 20 74 68 65 20 65 76 65 6e 74 73 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 45 6c 20 26 26 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 65 76 45 6c 2c 20 74 68 69 73 2e 64 6f 6d 48 61 6e 64 6c 65 72 29 Data Ascii: 7ff2 handle the inputEvent data and trigger the callback * @virtual / handler: function() { }, /* * bind the events */ init: function() { this.evEl && addEventListeners(this.element, this.evEl, this.domHandler)
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 29 28 6d 61 6e 61 67 65 72 2c 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 29 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 68 61 6e 64 6c 65 20 69 6e 70 75 74 20 65 76 65 6e 74 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4d 61 6e 61 67 65 72 7d 20 6d 61 6e 61 67 65 72 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 65 76 65 6e 74 54 79 70 65 0a 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 69 6e 70 75 74 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 70 75 74 48 61 6e 64 6c 65 72 28 6d 61 6e 61 67 65 72 2c 20 65 76 65 6e 74 54 79 70 65 2c 20 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 76 61 72 20 70 6f 69 6e 74 65 72 73 4c 65 6e 20 3d 20 69 6e 70 75 74 2e 70 6f 69 6e 74 65 72 73 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 76 61 72 20 63 68 61 6e 67 65 64 50 6f Data Ascii: )(manager, inputHandler);}/** * handle input events * @param {Manager} manager * @param {String} eventType * @param {Object} input */function inputHandler(manager, eventType, input) { var pointersLen = input.pointers.length; var changedPo

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	831	OUT	GET /files/theme/jquery.pxuMenu.js?1620848883 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:11 UTC	939	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf4dea88c09-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"5b4646438d633556595e8756bf1f0e50" Last-Modified: Sun, 14 Apr 2024 12:47:00 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: fM8ar/pkIq7ecmdxkVP+SiJ+eFAlLXke1Nr2VsZJrFVBLWRi/+f6vOr/VsID+BUHdtJiFUSwTfEv+DDZG+APYA== x-amz-meta-btime: 2023-08-07T13:02:00.212Z x-amz-meta-mtime: 1691413320.212 x-amz-replication-status: COMPLETED x-amz-request-id: 1B8YBFTEYKZW4QVK x-amz-server-side-encryption: AES256 x-amz-version-id: eqXbjRgD0BqK8g4ccR4qtkkqs.VJc96L X-Storage-Bucket: z8443 X-Storage-Object: 8443559dc67ae697aa7d66951e6d2f360eb01ce75b4323925bc695a84a8c6004 Server: cloudflare
2024-10-07 16:23:11 UTC	430	IN	Data Raw: 64 66 66 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 3d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 65 62 6c 79 20 48 6f 72 69 7a 6f 6e 74 61 6c 20 53 69 74 65 20 4d 65 6e 75 20 20 20 20 20 20 20 20 20 20 20 20 3d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 0a 20 20 20 2a 20 47 65 6e 65 72 61 74 65 20 61 20 66 6c 65 78 69 62 6c 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 6e 61 Data Ascii: dff/==================================================== Weebly Horizontal Site Menu ====================================================/(function($) { /** * * Generate a flexible responsive menu from the default na
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 67 73 20 3d 20 73 65 74 74 69 6e 67 73 3b 0a 20 20 20 20 74 68 69 73 2e 24 6d 6f 72 65 20 3d 20 20 24 28 27 5c 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6d 6f 72 65 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 43 6c 61 73 73 20 2b 20 27 22 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6d 6f 72 65 2d 6c 69 6e 6b 20 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 4c 69 6e 6b 43 6c 61 73 73 20 2b 20 27 22 3e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 20 2b 20 27 3c 2f 61 3e 20 5c 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 2b 20 Data Ascii: gs = settings; this.$more = $('\ <li class="menu-more ' + settings.parentClass + '"> \ <a href="#" class="more-link ' + settings.parentLinkClass + '">' + settings.moreLinkHtml + '</a> \ <div class="' + settings.containerClass +
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 49 74 65 6d 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 20 7c 7c 20 73 65 6c 66 2e 24 6d 6f 72 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 3e 20 66 69 72 73 74 4f 66 66 73 65 74 54 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 24 6d 65 6e 75 2e 61 70 70 65 6e 64 28 73 65 6c 66 2e 24 6d 6f 72 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 73 65 6c 66 2e 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 28 24 63 75 72 72 65 6e 74 49 74 65 6d 29 3b 0a 0a 20 20 20 20 20 20 20 20 24 28 27 5b 64 61 74 61 2d 6d 65 6e 75 2d 6d 6f 72 65 5d 27 29 2e 70 72 65 70 65 6e 64 28 24 63 75 72 72 65 6e 74 49 74 65 6d 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a Data Ascii: Item.offset().top > firstOffsetTop \|\| self.$more.offset().top > firstOffsetTop) { self.$menu.append(self.$more); self.toggleClasses($currentItem); $('[data-menu-more]').prepend($currentItem); } else { return false;
2024-10-07 16:23:11 UTC	422	IN	Data Raw: 69 74 65 6d 2d 77 72 61 70 27 2c 0a 20 20 20 20 20 20 63 68 69 6c 64 4c 69 6e 6b 43 6c 61 73 73 3a 20 27 77 73 69 74 65 2d 6d 65 6e 75 2d 73 75 62 69 74 65 6d 27 2c 0a 20 20 20 20 20 20 6d 6f 72 65 4c 69 6e 6b 48 74 6d 6c 3a 20 27 4d 6f 72 65 27 2c 0a 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 21 24 2e 64 61 74 61 28 74 68 69 73 2c 20 70 6c 75 67 69 6e 4e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 74 6f 72 65 20 70 6c 75 67 69 6e 20 69 6e 73 74 61 63 65 20 77 69 74 68 20 65 6c 65 6d 65 6e 74 20 28 74 68 69 73 29 2c 0a 20 20 20 20 20 20 20 20 2f 2f 20 73 6f 20 70 75 62 6c 69 63 20 6d 65 74 68 6f Data Ascii: item-wrap', childLinkClass: 'wsite-menu-subitem', moreLinkHtml: 'More', }, options ); return this.each(function() { if (!$.data(this, pluginName)) { // Store plugin instace with element (this), // so public metho
2024-10-07 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	829	OUT	GET /files/theme/jquery.trend.js?1620848883 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:11 UTC	927	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf4dafc32c7-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"4beccebe0a060b2b2c43de5c2d4512ef" Last-Modified: Sun, 07 Apr 2024 01:42:19 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: xv/4fNwKTIOfJi95JQZf9PLANnxzjU96BMGtDXAisPIUja7XE5jmGryfx6C2pB9qG7Zvu/y2cc4= x-amz-meta-btime: 2023-09-25T13:28:31.869Z x-amz-meta-mtime: 1695648511.869 x-amz-replication-status: COMPLETED x-amz-request-id: 3ADR240BTF0T64Y1 x-amz-server-side-encryption: AES256 x-amz-version-id: SLcK2XYoSswC7.3mqk46FHp.mNA3XCRS X-Storage-Bucket: z446f X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738 Server: cloudflare
2024-10-07 16:23:11 UTC	442	IN	Data Raw: 65 62 66 0d 0a 2f 2a 21 0a 20 2a 20 54 72 65 6e 64 20 30 2e 32 2e 30 0a 20 2a 0a 20 2a 20 46 61 69 6c 2d 73 61 66 65 20 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 65 76 65 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 2e 0a 20 2a 0a 20 2a 20 41 64 64 73 20 61 20 6e 65 77 20 22 74 72 65 6e 64 22 20 65 76 65 6e 74 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 0a 20 2a 20 73 75 70 70 6f 72 74 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2e 0a 20 2a 0a 20 2a 20 4e 4f 54 45 3a 20 4f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 62 65 69 6e 67 20 62 6f 75 6e 64 20 77 69 74 68 20 22 6a 51 75 65 72 79 2e 6f 6e 65 22 2e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 50 69 78 65 6c Data Ascii: ebf/! Trend 0.2.0 * * Fail-safe TransitionEnd event for jQuery. * * Adds a new "trend" event that can be used in browsers that don't * support "transitionend". * * NOTE: Only supports being bound with "jQuery.one". * * Copyright 2014, Pixel
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 22 20 2b 0a 20 20 20 20 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 6d 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 22 20 2b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 0a 0a 20 20 2f 2f 20 50 72 65 66 69 78 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 64 75 72 61 74 69 6f 6e 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 0a 20 20 76 61 72 20 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 50 72 6f 70 65 72 74 69 65 73 20 3d 20 5b 0a 20 20 20 20 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 0a 20 20 20 20 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: otransitionend " + "oTransitionEnd " + "msTransitionEnd " + "transitionend"; // Prefixed transition duration property names var transitionDurationProperties = [ "transition-duration", "-moz-transition-duration", "-webkit-trans
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 75 72 61 74 69 6f 6e 20 3d 20 70 61 72 73 65 54 69 6d 65 28 76 61 6c 75 65 73 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 64 75 72 61 74 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 20 3d 20 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 20 64 75 72 61 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 53 69 6e 67 6c Data Ascii: for (var i = 0; i < values.length; i++) { var duration = parseTime(values[i]); results.push(duration); } return results; })(); duration = Math.max.apply(Math, durations); } // Singl
2024-10-07 16:23:11 UTC	602	IN	Data Raw: 68 6f 73 65 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 77 65 27 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 76 65 20 74 6f 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 74 68 65 73 65 20 63 61 73 65 73 2e 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 20 26 26 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 20 21 3d 3d 20 65 6c 5b 30 5d 29 20 72 65 74 75 72 6e 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 72 6b 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 6e 6f 74 20 62 65 69 6e 67 20 69 6e 20 74 72 61 6e 73 69 74 69 6f 6e 0a 20 20 20 20 20 20 20 20 65 6c 2e 64 61 74 61 28 22 74 72 65 6e 64 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 43 61 6c 6c 62 61 63 6b 0a 20 20 20 20 20 20 20 20 66 69 72 65 64 20 3d 20 74 Data Ascii: hose. Unfortunately, we'll // have to rely on the timeout in these cases. if (e && e.srcElement !== el[0]) return; // Mark element has not being in transition el.data("trend", false); // Callback fired = t
2024-10-07 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	576	OUT	GET /css/sites.css?buildTime=1727996365 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	648	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210892 Server: nginx Content-Type: text/css Last-Modified: Thu, 03 Oct 2024 22:10:01 GMT ETag: "66ff1639-337cc" Expires: Thu, 17 Oct 2024 23:03:12 GMT Cache-Control: max-age=1209600 X-Host: blu7.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 321599 Date: Mon, 07 Oct 2024 16:23:10 GMT X-Served-By: cache-sjc10058-SJC, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 93, 0 X-Timer: S1728318191.859977,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 2f 2a 21 20 52 65 66 6c 65 78 20 76 31 2e 35 2e 30 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6c 65 65 6a 6f 72 64 61 6e 2f 72 65 66 6c 65 78 20 2a 2f 2e 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 Data Ascii: @keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}/! Reflex v1.5.0 - https://github.com/leejordan/reflex /.grid{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;zoom:1;-ms-flex-wrap:wrap;flex-wrap:wrap;padding
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 33 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 3b 2a 77 69 64 74 68 3a 32 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 31 7b Data Ascii: idth:58.33333%;width:58.23333%}.grid__col-6{width:50%;width:49.9%}.grid__col-5{width:41.66667%;width:41.56667%}.grid__col-4{width:33.33333%;width:33.23333%}.grid__col-3{width:25%;width:24.9%}.grid__col-2{width:16.66667%;width:16.56667%}.grid__col-1{
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 74 68 3a 31 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 73 6d 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 2e 32 33 33 33 33 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 77 69 64 74 68 3a 39 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 39 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 33 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 6d 64 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 Data Ascii: th:16.56667%}.grid__col-sm-1{width:8.33333%;width:8.23333%}}@media (min-width: 64em){.grid__col-md-12{width:100%;width:99.9%}.grid__col-md-11{width:91.66667%;width:91.56667%}.grid__col-md-10{width:83.33333%;width:83.23333%}.grid__col-md-9{width:75%;*w
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 39 7b 77 69 64 74 68 3a 37 35 25 3b 2a 77 69 64 74 68 3a 37 34 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 36 36 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 35 38 2e 32 33 33 33 33 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 36 7b 77 69 64 74 68 3a 35 30 25 3b 2a 77 69 64 74 68 3a 34 39 2e 39 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 31 2e 35 36 36 36 37 25 7d 2e 67 72 69 64 5f 5f 63 6f 6c 2d 78 6c 67 2d 34 7b 77 69 64 Data Ascii: 333%}.grid__col-xlg-9{width:75%;width:74.9%}.grid__col-xlg-8{width:66.66667%;width:66.56667%}.grid__col-xlg-7{width:58.33333%;width:58.23333%}.grid__col-xlg-6{width:50%;width:49.9%}.grid__col-xlg-5{width:41.66667%;*width:41.56667%}.grid__col-xlg-4{wid
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d Data Ascii: 5{-ms-flex-order:5;order:5}.grid--order-4{-ms-flex-order:4;order:4}.grid--order-3{-ms-flex-order:3;order:3}.grid--order-2{-ms-flex-order:2;order:2}.grid--order-1{-ms-flex-order:1;order:1}.grid--order-0{-ms-flex-order:0;order:0}@media only screen and (min-
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 30 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 65 6d 29 7b 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 32 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 32 3b 6f 72 64 65 72 3a 31 32 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d Data Ascii: {-ms-flex-order:1;order:1}.grid--order-0-sm{-ms-flex-order:0;order:0}}@media only screen and (min-width: 64em){.grid--order-12-md{-ms-flex-order:12;order:12}.grid--order-11-md{-ms-flex-order:11;order:11}.grid--order-10-md{-ms-flex-order:10;order:10}.grid-
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 31 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 6f 72 64 65 72 3a 31 31 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 31 30 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 6f 72 64 65 72 3a 31 30 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 39 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 6f 72 64 65 72 3a 39 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 38 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 37 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 67 72 69 64 2d 2d 6f 72 64 65 72 2d 36 2d 78 6c 67 7b 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: }.grid--order-11-xlg{-ms-flex-order:11;order:11}.grid--order-10-xlg{-ms-flex-order:10;order:10}.grid--order-9-xlg{-ms-flex-order:9;order:9}.grid--order-8-xlg{-ms-flex-order:8;order:8}.grid--order-7-xlg{-ms-flex-order:7;order:7}.grid--order-6-xlg{-ms-flex-
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 20 5b 63 6c 61 73 73 2a 3d 22 67 72 69 64 5f 5f 63 6f 6c 2d 22 5d 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 67 72 69 64 2d 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 65 6e 64 Data Ascii: d--align-baseline{-ms-flex-align:baseline;align-items:baseline}.grid--align-baseline [class*="grid__col-"]{vertical-align:baseline}.grid--align-content-start{-ms-flex-line-pack:start;align-content:flex-start}.grid--align-content-end{-ms-flex-line-pack:end
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 69 6e 69 74 69 61 6c 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 2e 67 72 69 64 5f 5f 63 65 6c 6c 2c 2e 67 72 69 64 2d 2d 6a 75 73 74 69 66 79 2d 63 65 6e 74 65 72 20 5b 63 6c 61 Data Ascii: t;text-align:initial;text-align-last:left;text-align-last:start;text-align-last:initial}.grid--justify-center{text-align:center;text-align-last:center;-ms-flex-pack:center;justify-content:center}.grid--justify-center .grid__cell,.grid--justify-center [cla
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 65 6d 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 5f 5f 63 65 6c 6c 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a Data Ascii: em}.grid__cell-img{display:block;display:-ms-flexbox;display:flex;-ms-flex:0 0 auto;flex:0 0 auto;margin-left:0;margin-right:0;max-width:100%;width:100%;height:auto}.grid__cell-footer{display:inline-block;display:-ms-flexbox;display:flex;*display:inline;z

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	573	OUT	GET /css/old/fancybox.css?1727996365 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	646	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3911 Server: nginx Content-Type: text/css Last-Modified: Thu, 03 Oct 2024 22:10:08 GMT ETag: "66ff1640-f47" Expires: Thu, 17 Oct 2024 23:32:26 GMT Cache-Control: max-age=1209600 X-Host: blu124.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 319844 Date: Mon, 07 Oct 2024 16:23:10 GMT X-Served-By: cache-sjc10035-SJC, cache-ewr-kewr1740041-EWR X-Cache: HIT, HIT X-Cache-Hits: 65, 0 X-Timer: S1728318191.860049,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 2f 2a 21 20 66 61 6e 63 79 42 6f 78 20 76 32 2e 31 2e 30 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 20 7c 20 66 61 6e 63 79 61 70 70 73 2e 63 6f 6d 2f 66 61 6e 63 79 62 6f 78 2f 23 6c 69 63 65 6e 73 65 20 2a 2f 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 2c 2e 66 61 6e 63 79 62 6f 78 2d 73 6b 69 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 6f 75 74 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6e 6e 65 72 2c 2e 66 61 6e 63 79 62 6f 78 2d 69 6d 61 67 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 69 66 72 61 6d 65 2c 2e 66 61 6e 63 79 62 6f 78 2d 77 72 61 70 20 6f 62 6a 65 63 74 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 2c 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 20 73 70 61 6e 2c 2e 66 61 6e 63 79 62 6f 78 2d 74 6d 70 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e Data Ascii: /! fancyBox v2.1.0 fancyapps.com \| fancyapps.com/fancybox/#license /.fancybox-wrap,.fancybox-skin,.fancybox-outer,.fancybox-inner,.fancybox-image,.fancybox-wrap iframe,.fancybox-wrap object,.fancybox-nav,.fancybox-nav span,.fancybox-tmp{padding:0;margin
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 61 6e 63 79 62 6f 78 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 2d 31 38 70 78 3b 74 6f 70 3a 2d 31 38 70 78 3b 77 69 64 74 68 3a 33 36 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 34 30 7d 2e 66 61 6e 63 79 62 6f 78 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 34 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 Data Ascii: ancybox-close{background-color:transparent !important;cursor:pointer;height:36px;position:absolute;right:-18px;top:-18px;width:36px;z-index:8040}.fancybox-nav{position:absolute;top:0;width:40%;height:100%;cursor:pointer;text-decoration:none;background:tra
2024-10-07 16:23:10 UTC	1155	IN	Data Raw: 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 38 30 35 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 6e 63 79 62 6f 78 2d 74 69 74 6c 65 2d 66 6c 6f 61 74 2d 77 72 61 70 20 2e 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 23 32 32 32 3b 63 Data Ascii: tom:0;right:50%;margin-bottom:-35px;z-index:8050;text-align:center}.fancybox-title-float-wrap .child{display:inline-block;margin-right:-100%;padding:2px 20px;background:transparent;background:rgba(0,0,0,0.8);border-radius:15px;text-shadow:0 1px 2px #222;c

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	583	OUT	GET /css/social-icons.css?buildtime=1727996365 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	648	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13081 Server: nginx Content-Type: text/css Last-Modified: Thu, 03 Oct 2024 22:10:01 GMT ETag: "66ff1639-3319" Expires: Thu, 17 Oct 2024 23:32:26 GMT Cache-Control: max-age=1209600 X-Host: grn65.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 319844 Date: Mon, 07 Oct 2024 16:23:10 GMT X-Served-By: cache-sjc10036-SJC, cache-ewr-kewr1740067-EWR X-Cache: HIT, HIT X-Cache-Hits: 262, 0 X-Timer: S1728318191.861194,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 77 73 6f 63 69 61 6c 22 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 32 37 39 39 33 34 30 31 37 37 33 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f 77 73 6f 63 69 61 6c 2e 65 6f 74 3f 74 73 3d 31 37 32 37 39 39 33 34 30 31 37 37 33 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2f 2f 63 64 6e 32 2e 65 64 69 74 6d 79 73 69 74 65 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 77 53 6f 63 69 61 6c 2f Data Ascii: @font-face{font-family:"wsocial";src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727993401773);src:url(//cdn2.editmysite.com/fonts/wSocial/wsocial.eot?ts=1727993401773#iefix) format("embedded-opentype"),url(//cdn2.editmysite.com/fonts/wSocial/
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 30 22 3b 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 62 35 Data Ascii: :"\e600"}.wsite-com-product-social-facebook:before{content:"\e600"}.wsite-social-color .wsite-social-facebook:before{content:"\e600";color:#3b5998}.wsite-social-square .wsite-social-facebook,.wsite-social-square.wsite-social-facebook{background-color:#3b5
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 3a 22 5c 65 36 30 38 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 38 22 3b 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 66 6c 69 63 6b 72 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 Data Ascii: :"\e608"}.wsite-social-color .wsite-social-flickr:before{content:"\e608";color:#0063dc}.wsite-social-square .wsite-social-flickr,.wsite-social-square.wsite-social-flickr{background-color:#0063dc}.wsite-social-square .wsite-social-flickr:after,.wsite-socia
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 38 38 61 62 65 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 65 64 69 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 32 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 70 69 6e 74 65 72 65 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 39 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 Data Ascii: wsite-social-square.wsite-social-linkedin{background-color:#388abe}.wsite-social-square .wsite-social-linkedin:after,.wsite-social-square.wsite-social-linkedin:after{content:"\e602";color:#ffffff}.wsite-social-pinterest:before{content:"\e609"}.wsite-com-p
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 2d 73 6f 63 69 61 6c 2d 74 75 6d 62 6c 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 30 22 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 31 22 3b 63 6f 6c 6f 72 3a 23 30 30 61 63 65 64 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 Data Ascii: -social-tumblr:after{content:"\e610";color:#ffffff}.wsite-social-twitter:before{content:"\e601"}.wsite-com-product-social-twitter:before{content:"\e601"}.wsite-social-color .wsite-social-twitter:before{content:"\e601";color:#00aced}.wsite-social-square .w
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 63 6f 6c 6f 72 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 3b 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 31 32 31 37 7d 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 75 61 72 65 20 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 61 66 74 65 72 2c 2e 77 73 69 74 65 2d 73 6f 63 69 61 6c 2d 73 71 Data Ascii: }.wsite-social-color .wsite-social-youtube:before{content:"\e606";color:#b31217}.wsite-social-square .wsite-social-youtube,.wsite-social-square.wsite-social-youtube{background-color:#b31217}.wsite-social-square .wsite-social-youtube:after,.wsite-social-sq
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 61 66 74 65 72 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f Data Ascii: social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-facebook:after,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-social-sharing .wsite-com-pro
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 73 68 61 72 69 6e 67 20 2e 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 2c 23 77 73 69 74 65 2d 63 6f 6d 2d 70 72 6f 64 75 63 74 2d 73 6f 63 Data Ascii: display:inline-block;text-indent:-9999px;position:relative;width:24px;height:24px}#wsite-com-product-social-sharing .wsite-com-product-social-facebook:before,#wsite-com-product-social-sharing .wsite-com-product-social-twitter:before,#wsite-com-product-soc
2024-10-07 16:23:10 UTC	1378	IN	Data Raw: 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 34 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 70 6c 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 37 22 7d Data Ascii: e:none}.social-plus .social-label:before,.social-dropdown-item.social-plus:before{content:"\e604"}.social-dropdown-item.social-plus{background-image:none}.social-instagram .social-label:before,.social-dropdown-item.social-instagram:before{content:"\e607"}
2024-10-07 16:23:10 UTC	679	IN	Data Raw: 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 7d 2e 73 6f 63 69 61 6c 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 73 6f 63 69 61 6c 2d 79 6f 75 74 75 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 73 6f 63 69 61 6c 2d 62 61 64 67 65 2d 69 74 65 6d 20 2e 73 6f 63 69 61 6c 2d 6c 61 62 65 6c Data Ascii: -image:none}.social-youtube .social-label:before,.social-dropdown-item.social-youtube:before{content:"\e606"}.social-dropdown-item.social-youtube{background-image:none}.social-badge-item .social-label{background-image:none}.social-badge-item .social-label

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	570	OUT	GET /fonts/Roboto_Slab/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	649	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1279 Server: nginx Content-Type: text/css Last-Modified: Mon, 23 Sep 2024 17:13:57 GMT ETag: "66f1a1d5-4ff" Expires: Mon, 07 Oct 2024 17:37:45 GMT Cache-Control: max-age=1209600 X-Host: blu63.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 16:23:10 GMT Age: 1205126 X-Served-By: cache-sjc1000135-SJC, cache-ewr-kewr1740025-EWR X-Cache: HIT, HIT X-Cache-Hits: 230, 5 X-Timer: S1728318191.860687,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	1279	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 20 53 6c 61 62 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 6c 69 67 68 74 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: @font-face { font-family: 'Roboto Slab'; font-style: normal; font-weight: 300; src: url('./light.eot'); /* IE9 Compat Modes / src: url('./light.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./light.woff2') format('woff2')

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	569	OUT	GET /fonts/Fjalla_One/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	645	IN	HTTP/1.1 200 OK Connection: close Content-Length: 433 Server: nginx Content-Type: text/css Last-Modified: Tue, 24 Sep 2024 23:23:54 GMT ETag: "66f34a0a-1b1" Expires: Wed, 09 Oct 2024 06:11:38 GMT Cache-Control: max-age=1209600 X-Host: grn57.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1073493 Date: Mon, 07 Oct 2024 16:23:10 GMT X-Served-By: cache-sjc10058-SJC, cache-nyc-kteb1890030-NYC X-Cache: HIT, HIT X-Cache-Hits: 42, 0 X-Timer: S1728318191.861512,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	433	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6a 61 6c 6c 61 20 4f 6e 65 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f Data Ascii: @font-face { font-family: 'Fjalla One'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('wo

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	569	OUT	GET /fonts/Montserrat/font.css?2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://codeofconducts.weebly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:23:10 UTC	646	IN	HTTP/1.1 200 OK Connection: close Content-Length: 852 Server: nginx Content-Type: text/css Last-Modified: Mon, 30 Sep 2024 17:03:50 GMT ETag: "66fad9f6-354" Expires: Tue, 15 Oct 2024 07:37:38 GMT Cache-Control: max-age=1209600 X-Host: blu92.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 549933 Date: Mon, 07 Oct 2024 16:23:10 GMT X-Served-By: cache-sjc1000108-SJC, cache-ewr-kewr1740025-EWR X-Cache: HIT, HIT X-Cache-Hits: 62, 0 X-Timer: S1728318191.861200,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-07 16:23:10 UTC	852	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2f 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f Data Ascii: @font-face { font-family: 'Montserrat'; font-style: normal; font-weight: 400; src: url('./regular.eot'); /* IE9 Compat Modes / src: url('./regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 */ url('./regular.woff2') format('wo

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:23:10 UTC	832	OUT	GET /files/theme/jquery.revealer.js?1620848883 HTTP/1.1 Host: codeofconducts.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://codeofconducts.weebly.com/?utm_source=BenchmarkEmail&utm_campaign=pelle1&utm_medium=email Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; __cf_bm=kZeCuDyxDJ4zNTUTONHZftbRO4AqXq7byCDK3JKhG0g-1728318190-1.0.1.1-wYcQQduXTgW0B7UcN.kcrJbMgKOxeEc8zeCzWxOXvMW_ufxdUnElTh3jYZA_tcOcLu5TDUB7DvgL8Mbuv74N7w
2024-10-07 16:23:11 UTC	861	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:23:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8cef3bf50b8a3314-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * ETag: W/"c22ab67199a33d876512504cda4ff55b" Last-Modified: Sun, 21 Apr 2024 12:39:24 GMT Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS x-amz-id-2: QK7W+4xHyAvdek0IlLWejXojWtVcl9Zi8X6b2eAnG+vyMzIKXfV0ljrP1e6H5jxJAo0VYyMeBASvR1IIUexUqw== x-amz-replication-status: COMPLETED x-amz-request-id: 1B8PS5MZKWF3FJDY x-amz-server-side-encryption: AES256 x-amz-version-id: VWhv4xSgduiSxPjjUnPvdmzftJykBxY7 X-Storage-Bucket: zc4cd X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311 Server: cloudflare
2024-10-07 16:23:11 UTC	508	IN	Data Raw: 62 30 63 0d 0a 2f 2a 21 0a 20 2a 20 52 65 76 65 61 6c 65 72 20 32 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2c 20 50 69 78 65 6c 20 55 6e 69 6f 6e 20 2d 20 68 74 74 70 3a 2f 2f 70 69 78 65 6c 75 6e 69 6f 6e 2e 6e 65 74 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 74 72 65 6e 64 20 65 76 65 6e 74 20 28 6d 61 6b 65 20 73 75 72 65 20 6a 71 75 65 72 79 2e 74 72 65 6e 64 20 69 73 20 69 6e 63 6c 75 64 65 64 29 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 24 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 74 72 65 6e 64 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 20 20 20 Data Ascii: b0c/! Revealer 2.0.0 * * Copyright 2015, Pixel Union - http://pixelunion.net * Released under the MIT license */(function($){ // check for trend event (make sure jquery.trend is included) if (typeof $.event.special.trend !== "object") {
2024-10-07 16:23:11 UTC	1369	IN	Data Raw: 69 6f 6e 46 72 61 6d 65 20 7c 7c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 20 7b 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 6e 2c 20 31 30 30 30 2f 36 30 29 3b 20 7d 0a 0a 0a 20 20 2f 2f 20 50 75 62 6c 69 63 20 41 50 49 0a 20 20 76 61 72 20 6d 65 74 68 6f 64 73 20 3d 20 7b 0a 20 20 20 20 69 73 56 69 73 69 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 65 6c 2e 64 61 74 61 28 22 72 65 76 65 61 6c 65 72 2d 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 73 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 20 66 6f 72 63 65 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 43 68 65 63 6b 20 73 74 61 74 65 0a 20 20 20 20 20 20 69 66 20 28 6d 65 74 68 6f 64 73 2e 69 Data Ascii: ionFrame \|\| function(fn) { window.setTimeout(fn, 1000/60); } // Public API var methods = { isVisible: function(el) { return !!el.data("revealer-visible"); }, show: function(el, force) { // Check state if (methods.i
2024-10-07 16:23:11 UTC	958	IN	Data Raw: 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 68 69 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 69 6e 67 20 61 6e 69 6d 61 74 69 6e 67 2d 6f 75 74 22 29 3b 0a 20 20 20 20 20 20 20 20 65 6c 2e 74 72 69 67 67 65 72 28 22 72 65 76 65 61 6c 65 72 2d 61 6e 69 6d 61 74 69 6e 67 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 61 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 69 73 69 Data Ascii: l.removeClass("visible"); el.trigger("revealer-hide"); return; } raf(function(){ el.addClass("animating animating-out"); el.trigger("revealer-animating"); raf(function(){ el.removeClass("visi
2024-10-07 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0