Edit tour

Windows Analysis Report
http://www.riparide.com/adventures/28758-marom-waterfalls

Overview

General Information

Sample URL:	http://www.riparide.com/adventures/28758-marom-waterfalls
Analysis ID:	1545809
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Form action URLs do not match main URL

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2332,i,3265026577557954252,15893873326536962339,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.riparide.com/adventures/28758-marom-waterfalls" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&scrsrc=www.googletagmanager.com&frm=0&rnd=415356647.1730342486&auid=194757565.1730342486&npa=0&gtm=45He4au0h2v72703833za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730342486108&tfd=7174&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.riparide.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.riparide.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:35 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342495&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DURGQaUze7apP%2BuW8M8H%2BQ2brLBCiQwRswQvo%2F4uwKw%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342495&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DURGQaUze7apP%2BuW8M8H%2BQ2brLBCiQwRswQvo%2F4uwKw%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:36 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342496&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=tRFmZLcwsPkjYFriXBz%2BzyKqtTul8VQOoQB%2FVPiVXQY%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342496&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=tRFmZLcwsPkjYFriXBz%2BzyKqtTul8VQOoQB%2FVPiVXQY%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342499&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=rUJUSFd8sYJld%2BFmHB%2BnUmh0d93y7ZQNGGTZLryOimk%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342499&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=rUJUSFd8sYJld%2BFmHB%2BnUmh0d93y7ZQNGGTZLryOimk%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342501&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Sbj6qrWfTPYha4YXajp1DjkWXa2JhQo0BWp5PCFyEoA%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342501&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Sbj6qrWfTPYha4YXajp1DjkWXa2JhQo0BWp5PCFyEoA%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:41:56 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342516&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=%2Bf84kLg439lrjJ1Vcewyv5JJpvdELqwDcSBBThpD59Y%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342516&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=%2Bf84kLg439lrjJ1Vcewyv5JJpvdELqwDcSBBThpD59Y%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:42:00 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342520&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=PoWOwEZUSa9loY60Kt2OZYl3wMb%2BHGkCMPRPI4nF2c4%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342520&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=PoWOwEZUSa9loY60Kt2OZYl3wMb%2BHGkCMPRPI4nF2c4%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:42:01 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342521&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fWAVWQ5dJTkG76XSusIu0hazruQPghs9je6OUYB3aUU%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342521&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fWAVWQ5dJTkG76XSusIu0hazruQPghs9je6OUYB3aUU%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:42:25 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342545&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DUviKKEgsZ8nVhuKBaWC2GlLVG%2Becfo9eX1uq6JjtMk%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342545&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DUviKKEgsZ8nVhuKBaWC2GlLVG%2Becfo9eX1uq6JjtMk%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 02:42:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342546&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=3wwEvU8E0lxbD%2BJa0CTHwPkSQvIQ6%2BJmkiuN02hf04Y%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342546&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=3wwEvU8E0lxbD%2BJa0CTHwPkSQvIQ6%2BJmkiuN02hf04Y%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}X-Frame-Options: SAMEORIGINX-Xss-Protection: 0X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-origin

Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_243.2.dr, chromecache_303.2.dr, chromecache_329.2.dr, chromecache_315.2.dr, chromecache_463.2.dr, chromecache_299.2.dr, chromecache_331.2.dr, chromecache_227.2.dr, chromecache_498.2.dr, chromecache_319.2.dr, chromecache_413.2.dr, chromecache_476.2.dr, chromecache_508.2.dr, chromecache_297.2.dr, chromecache_369.2.dr, chromecache_502.2.dr, chromecache_228.2.dr, chromecache_335.2.dr, chromecache_409.2.dr, chromecache_434.2.dr, chromecache_499.2.dr	String found in binary or memory: http://cipa.jp/exif/1.0/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_278.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_278.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_474.2.dr, chromecache_342.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_224.2.dr	String found in binary or memory: http://help.riparide.com/en/articles/5765492-listing-criteria
Source: chromecache_248.2.dr, chromecache_255.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_278.2.dr	String found in binary or memory: http://silviomoreto.github.io/bootstrap-select)
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_248.2.dr, chromecache_269.2.dr, chromecache_344.2.dr, chromecache_255.2.dr	String found in binary or memory: http://www.dji.com/drone-dji/1.0/
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2163/original.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2163/thumb.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2163/thumb_lg.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2163/thumb_md.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2626/original.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2626/thumb.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2626/thumb_lg.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/2626/thumb_md.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/3861/original.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/3861/thumb.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/3861/thumb_lg.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/3861/thumb_md.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/avatars/5693/thumb_lg.png
Source: chromecache_328.2.dr	String found in binary or memory: https://assets.riparide.com/home/og/riparide_og_image_v1.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/list-with-us/testimonials/andy_matenson.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/list-with-us/testimonials/barry_and_christina.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/list-with-us/testimonials/fay_bushby.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/list-with-us/testimonials/jacob_stammers.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/list-with-us/testimonials/lisa_deppeler.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/1/large-41210fba13842d95a6255ecbfa28
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/1/medium-8decf901476e5544354256041af
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/2/large-da0ae88dc0f14250ce330e7f5c90
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/2/medium-f1cc7e11edd56a73584be7a36b0
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/3/large-a19a19386d7834df6bffe62eb1f8
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/3/medium-a72f9390d00142c3b6978f3e847
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/4/large-748ddbfdb5873764bd72986b78f0
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/4/medium-29466b88dec5e990a62bc0f9a6e
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/5/large-8635734608d3b812eb292b87d95f
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/5/medium-0d1fa2351c65fefbfca87f3a2c5
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/6/large-8c25b1e9a898b1057c3175504046
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/6/medium-705a8d263bb3ace909e97a49ffc
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/7/large-ceaab922dd8c9fe86104dd950608
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/7/medium-d37349efaf7f02e50a2ed2b8227
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/8/large-4535eb31ca36c74ab003fde02729
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/host/benefits/8/medium-2878cdcfe653663a230afffa3d2
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/1/large-4bb40f1f5532fa0ab0625
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/1/medium-24d2ee48017022de95b1
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/10/large-903550213e9830f0c08b
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/10/medium-3d754600eee2049bbfb
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/11/large-da0ae88dc0f14250ce33
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/11/medium-f1cc7e11edd56a73584
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/12/large.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/12/medium.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/2/large-50f13bb1859510a2806ac
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/2/medium-f47e12640b0eb57a4f5f
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/3/large-b1ae5772286b0e048f8a4
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/3/medium-66440a665ddf966c3443
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/4/large-ba03fbc375ba17dc3ed85
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/4/medium-e7b797c0d6bb8eb68074
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/5/large-bea42033868784710e350
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/5/medium-42f0210ecb44a424f3bc
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/6/large.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/6/medium.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/7/large-9bcc1a15e70f2690ab234
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/7/medium-d53e8d56e286929d4a43
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/8/large-b771bee76eca7a8b3f9d4
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/8/medium-7e18bae8e83d870f3976
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/9/large-11fb359f4efc1bd177ee7
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/9/medium-1d395f0ff42e4fbb9131
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/large_promo/large-7600b504f86
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/benefits/large_promo/medium-3792f63006
Source: chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/header/large-b3a9a3b1ab52f57dc9aba24eb
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/how_it_works/large-7bdf8d8d2cb145839bd
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/how_it_works/medium-1df76defb88a6ebe29
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/standalone_promo/hero-8f8ca2c7f612fbdf
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/standalone_promo/large-ceaab922dd8c9fe
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/267/thumb-8dfbb5da8d414ac
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/267/thumb_lg-e6ca6266826f
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/267/thumb_md-13e5dae9e329
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/4051/thumb-6123911593709e
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/4051/thumb_lg-b25f2df0694
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/4051/thumb_md-704d98a8820
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/5362/thumb.
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/5362/thumb_lg.
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/5362/thumb_md.
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/7856/thumb-d910a0f5505181
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/7856/thumb_lg-8f75cd65126
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/7856/thumb_md-8c229cf723d
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/8691/thumb-2521eb802e99df
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/8691/thumb_lg-9a0f8dfb525
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/8691/thumb_md-be5fe6ed0e0
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/landing_pages/vouchers/header/header_v1.jpg
Source: chromecache_240.2.dr	String found in binary or memory: https://assets.riparide.com/photo/420570/image/large-feeea2089bdfebd0fc49e8d08e914551.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/332/promo_image/large-84d65cf9e2186733534f01d18cd91159.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/414/promo_image/large-07ff92f1032fabaa8c3da1c21d5c3924.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/556/promo_image/large-03733d3d4586759820901e948ef2705d.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/591/promo_image/large-fb1444b7328e6b5d4772ddd72de2322f.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/593/promo_image/large-fec2780b8748a5a71c10dcbae1f19161.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/605/promo_image/large-68d108c6c459edb9434b8986176bfe35.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/650/promo_image/large-83fe7b37c6a58e902fae211378df680f.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/story/70/promo_image/large-9428daf429bf05f0215b4f6a4e5fe217.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/12521/avatar/original-da216d630fb241c2bf217246b3072a51.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/12521/avatar/thumb-7c3e3e467c47f158d4a186a2c641a7e2.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/12521/avatar/thumb_lg-5366030cce7040ab5030af4474a6e0aa.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/12521/avatar/thumb_md-0cc5676b76eb137e84ab532a13f5714c.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/1525/avatar/8fab6209f6be1e6475f18a0d971707e8.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/1525/avatar/thumb-c9c221a0a0780d723e2c3bee273dced9.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/1525/avatar/thumb_lg-d533fbfbe372166b06d6228a59b58ab8.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/1525/avatar/thumb_md-a8032472e0871ada968f44098e71d042.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/21250/avatar/thumb_lg-ca7ddb2a475fec21660c11bbd7f92847.png
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/267/avatar/thumb_lg-e6ca6266826f4a5d7ad594479e28b76f.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/4051/avatar/thumb_lg-b25f2df069469ec9c8e544bcdcd850fd.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/5255/avatar/thumb_lg-68c0bdba74744de5e2c6f90bdecbe89d.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/7856/avatar/thumb_lg-8f75cd65126d20a7aa7e8ef9ac87ebd8.jpg
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/8678/avatar/thumb_lg-59fb1529b9bf935632d5d873acb00816.png
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://assets.riparide.com/user/8691/avatar/thumb_lg-9a0f8dfb525d09968325bfe9c105a945.jpg
Source: chromecache_240.2.dr	String found in binary or memory: https://assets.riparide.com/user/89268/avatar/thumb_lg-3af33225542adb6c76b6afe0ca6cca15.jpeg
Source: chromecache_301.2.dr	String found in binary or memory: https://assets.stripeassets.com
Source: chromecache_301.2.dr	String found in binary or memory: https://assets.stripeassets.com/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-XBKNHWBU.js
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-bfd1dd9dc828a57a4622.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-0530f6f8a0ae1e011860.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-12b17d16
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphic-30f9ea68cfc29ae65dd5.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-281fa6a92c2e3caa14c9.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-decb2efdf862023c83af.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-f0dd86d0ff490fdd7e75.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNav-5c229e49df6b7e5315d7.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSectionSupportLinkList-US-bf39e598e6b8dad8c
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-889f28d89767c8a9d60f.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-4a8c16b5e5f3fa51247d.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-2213397d1bf367350550ccf586c9a709.js
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_301.2.dr	String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_270.2.dr, chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://cdn.segment.com/analytics.js/v1/
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_301.2.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_301.2.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_381.2.dr, chromecache_445.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie#write_a_new_cookie)
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_381.2.dr, chromecache_445.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/ga4/reference/config#)
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_282.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_334.2.dr, chromecache_488.2.dr, chromecache_505.2.dr, chromecache_489.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_282.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/api
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/billing
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/connect
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/development
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/invoicing/hosted-invoice-page
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/libraries
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/no-code
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/no-code/payment-links
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/no-code/tap-to-pay
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/payments
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/payments/checkout
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/terminal
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/upgrades#api-changelog
Source: chromecache_301.2.dr	String found in binary or memory: https://docs.stripe.com/upgrades#api-versions
Source: chromecache_480.2.dr, chromecache_516.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_516.2.dr	String found in binary or memory: https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8eb
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_480.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_278.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_474.2.dr, chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://github.com/ain/smartbanner.js#readme
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_278.2.dr	String found in binary or memory: https://github.com/silviomoreto/bootstrap-select/blob/master/LICENSE)
Source: chromecache_301.2.dr	String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_278.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_387.2.dr, chromecache_464.2.dr, chromecache_422.2.dr, chromecache_277.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_387.2.dr, chromecache_464.2.dr, chromecache_422.2.dr, chromecache_277.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr	String found in binary or memory: https://google.com
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://help.riparide.com/en/articles/6707031-storyteller-applications
Source: chromecache_487.2.dr, chromecache_238.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/f9c57cccfc64de8869be7e7a9556fec9
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79
Source: chromecache_301.2.dr	String found in binary or memory: https://images.stripeassets.com/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/
Source: chromecache_328.2.dr	String found in binary or memory: https://instagram.com/riparide
Source: chromecache_451.2.dr, chromecache_317.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://js.stripe.com/v3/
Source: chromecache_295.2.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: chromecache_375.2.dr, chromecache_252.2.dr	String found in binary or memory: https://m.stripe.network
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&libraries=pl
Source: chromecache_282.2.dr, chromecache_427.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_301.2.dr	String found in binary or memory: https://marketplace.stripe.com
Source: chromecache_301.2.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_301.2.dr	String found in binary or memory: https://marketplace.stripe.com/collections/enterprise
Source: chromecache_474.2.dr, chromecache_342.2.dr	String found in binary or memory: https://modernizr.com/download/?-inputtypes
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_270.2.dr, chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_338.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_451.2.dr, chromecache_317.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.riparide.android
Source: chromecache_301.2.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_301.2.dr	String found in binary or memory: https://q.stripe.com
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://s3.ap-southeast-2.amazonaws.com/assets.riparide.com/landing_pages/list-with-us/header/hero.j
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://s3.ap-southeast-2.amazonaws.com/assets.riparide.com/landing_pages/list-with-us/header/large.
Source: chromecache_358.2.dr, chromecache_224.2.dr	String found in binary or memory: https://s3.ap-southeast-2.amazonaws.com/assets.riparide.com/landing_pages/list-with-us/header/medium
Source: chromecache_301.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_270.2.dr, chromecache_379.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_301.2.dr	String found in binary or memory: https://status.stripe.com/
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/#organization
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_301.2.dr	String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_301.2.dr	String found in binary or memory: https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=45e0&utm_campaign=US%2FCA_40cb&utm_
Source: chromecache_381.2.dr, chromecache_445.2.dr	String found in binary or memory: https://support.google.com/analytics/answer/9976101?hl=en).
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_338.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_301.2.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_270.2.dr, chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_301.2.dr	String found in binary or memory: https://twitter.com/stripe
Source: chromecache_387.2.dr, chromecache_422.2.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_267.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_364.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/740117353/?random
Source: chromecache_307.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/871543968/?random
Source: chromecache_485.2.dr, chromecache_412.2.dr, chromecache_239.2.dr, chromecache_452.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_381.2.dr, chromecache_445.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=$
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_412.2.dr, chromecache_452.2.dr, chromecache_226.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: chromecache_451.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_301.2.dr	String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_270.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_240.2.dr	String found in binary or memory: https://www.riparide.com/adventures/28758-marom-waterfalls
Source: chromecache_240.2.dr	String found in binary or memory: https://www.riparide.com/adventures/28758-marom-waterfalls?srsltid=AfmBOor2btCk9NDhkqbGPhMf5U6bj3MXg
Source: chromecache_240.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.riparide.com/assets/app_store_icon_192-cb9a702dbf025614cb1eaeea18ef22189185a340765e4605e
Source: chromecache_328.2.dr	String found in binary or memory: https://www.riparide.com/graphql
Source: chromecache_270.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_301.2.dr	String found in binary or memory: https://youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50122 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@23/459@100/42

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2332,i,3265026577557954252,15893873326536962339,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.riparide.com/adventures/28758-marom-waterfalls"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2332,i,3265026577557954252,15893873326536962339,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stripe.com/ie	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	0%	URL Reputation	safe
https://stripe.com/in	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	0%	URL Reputation	safe
https://stripe.com/it	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	0%	URL Reputation	safe
https://api-iam.intercom.io/messenger/web/ping	0%	URL Reputation	safe
https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0	0%	URL Reputation	safe
https://stripe.com/jp	0%	URL Reputation	safe
https://dashboard.stripe.com/	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	0%	URL Reputation	safe
https://stripe.com/sv-fi	0%	URL Reputation	safe
https://support.stripe.com/?referrerLocale=en-us	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css	0%	URL Reputation	safe
https://stripe.com/de	0%	URL Reputation	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d1tcqh4bio8cty.cloudfront.net	18.173.205.62	true	false	unknown
www.riparide.com	104.26.4.52	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	64.233.167.157	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
script.hotjar.com	13.33.187.19	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
stripe.com	34.252.74.21	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
api.segment.io	54.69.251.6	true	false	unknown
nexus-websocket-a.intercom.io	34.237.73.95	true	false	unknown
static-cdn.hotjar.com	18.66.102.51	true	false	unknown
js.intercomcdn.com	18.245.46.10	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
widget.intercom.io	13.224.189.35	true	false	unknown
cdn.amplitude.com	18.245.86.101	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
api-iam.intercom.io	54.175.0.51	true	false	unknown
d1ftdm4q83us3q.cloudfront.net	13.33.187.40	true	false	unknown
stripecdn.map.fastly.net	151.101.64.176	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
api.amplitude.com	44.241.94.217	true	false	unknown
m.stripe.com	35.160.110.246	true	false	unknown
dexeqbeb7giwr.cloudfront.net	18.66.122.50	true	false	unknown
td.doubleclick.net	142.250.185.194	true	false	unknown
assets.riparide.com	172.67.75.209	true	false	unknown
cdn.rollbar.com	unknown	unknown	false	unknown
m.stripe.network	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
js.stripe.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets.riparide.com/photo/449709/image/medium-35ce0d93467184e669bf19894bb867d7.jpg	false		unknown
https://assets.riparide.com/user/2358/avatar/thumb_lg-c79cdbcef5fc0858714167b49c4aed59.jpg	false		unknown
https://assets.riparide.com/photo/444969/image/medium-47f021e8ea123ad4af4c30aa744250c1.jpg	false		unknown
https://static.hotjar.com/c/hotjar-769445.js?sv=6	false		unknown
https://www.riparide.com/assets/vendors.d5a186ee975a655f6996.js	false		unknown
https://connect.facebook.net/en_GB/sdk.js	false		unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-42356415-1&cid=332502837.1730342499&jid=1109842635&gjid=1131531949&_gid=453694327.1730342502&_u=aCDAgEABAAAAAGgCIAD~&z=2098303480	false		unknown
https://assets.riparide.com/photo/31474/image/medium-c908c7363bf799a81648034ea30bb0c9.jpg	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false		unknown
https://www.riparide.com/assets/webpack-assets/GT-Walsheim-Pro-Light.39e23e8dcc12250f70551b8baf74b7cb.woff	false		unknown
https://api-iam.intercom.io/messenger/web/ping	false	URL Reputation: safe	unknown
https://connect.facebook.net/en_GB/sdk.js?hash=159716819cc0e629bd650d16077040d2	false		unknown
https://assets.riparide.com/photo/449390/image/medium-9639d5f65ed498e02e40948fa1207d7c.jpg	false		unknown
https://www.riparide.com/assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311f018f3b29cdac61ce8b1ae9f.woff	false		unknown
https://assets.riparide.com/story/1805/portrait_cover_image/w400-a1158bdc97b424f5c2bc986c3588c528.jpg	false		unknown
https://assets.riparide.com/photo/425347/image/medium-8dd590e34faaa1e83bb2749d8c25e161.jpg	false		unknown
https://assets.riparide.com/photo/420570/image/hero-8d27dc9e6aaf5f3808809c4dfc0889d2.jpg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://assets.riparide.com/landing_pages/stories/host/benefits/3/medium-a72f9390d00142c3b6978f3e847	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/1/medium-24d2ee48017022de95b1	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/large_promo/large-7600b504f86	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/8691/thumb-2521eb802e99df	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://docs.stripe.com	chromecache_301.2.dr	false		unknown
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_487.2.dr, chromecache_238.2.dr	false		unknown
https://assets.riparide.com/story/591/promo_image/large-fb1444b7328e6b5d4772ddd72de2322f.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_451.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_451.2.dr, chromecache_317.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/standalone_promo/hero-8f8ca2c7f612fbdf	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_487.2.dr, chromecache_238.2.dr	false		unknown
https://assets.riparide.com/user/267/avatar/thumb_lg-e6ca6266826f4a5d7ad594479e28b76f.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/ie	chromecache_301.2.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_474.2.dr, chromecache_342.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/host/benefits/8/large-4535eb31ca36c74ab003fde02729	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	chromecache_387.2.dr, chromecache_464.2.dr, chromecache_422.2.dr, chromecache_277.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://help.riparide.com/en/articles/6707031-storyteller-applications	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://support.google.com/maps/answer/3092445	chromecache_267.2.dr, chromecache_365.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/how_it_works/medium-1df76defb88a6ebe29	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/avatars/5693/thumb_lg.png	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/6/large.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/user/12521/avatar/thumb-7c3e3e467c47f158d4a186a2c641a7e2.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/avatars/2163/thumb_md.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://docs.stripe.com/development	chromecache_301.2.dr	false		unknown
https://docs.stripe.com/no-code/payment-links	chromecache_301.2.dr	false		unknown
https://stripe.com/in	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/3/medium-66440a665ddf966c3443	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/list-with-us/testimonials/jacob_stammers.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/host/benefits/4/large-748ddbfdb5873764bd72986b78f0	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://stripe.com/it	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/story/593/promo_image/large-fec2780b8748a5a71c10dcbae1f19161.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/avatars/3861/thumb_md.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/9/large-11fb359f4efc1bd177ee7	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/4/large-ba03fbc375ba17dc3ed85	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie#write_a_new_cookie)	chromecache_381.2.dr, chromecache_445.2.dr	false		unknown
https://assets.riparide.com/story/650/promo_image/large-83fe7b37c6a58e902fae211378df680f.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://stripe.com/#organization	chromecache_301.2.dr	false		unknown
https://assets.riparide.com/avatars/2163/thumb.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/jp	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	chromecache_301.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-XBKNHWBU.js	chromecache_301.2.dr	false		unknown
https://dashboard.stripe.com/	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://docs.stripe.com/no-code/tap-to-pay	chromecache_301.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/storyteller/header/large-b3a9a3b1ab52f57dc9aba24eb	chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/sv-fi	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://support.stripe.com/?referrerLocale=en-us	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
http://jsperf.com/getall-vs-sizzle/2	chromecache_487.2.dr, chromecache_238.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_485.2.dr, chromecache_239.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_267.2.dr, chromecache_365.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/user/12521/avatar/original-da216d630fb241c2bf217246b3072a51.jpg	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=45e0&utm_campaign=US%2FCA_40cb&utm_	chromecache_301.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/testimonials/4051/thumb-6123911593709e	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/user/21250/avatar/thumb_lg-ca7ddb2a475fec21660c11bbd7f92847.png	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/de	chromecache_301.2.dr	false	URL Reputation: safe	unknown
https://assets.riparide.com/landing_pages/stories/host/benefits/5/medium-0d1fa2351c65fefbfca87f3a2c5	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://s3.ap-southeast-2.amazonaws.com/assets.riparide.com/landing_pages/list-with-us/header/hero.j	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://assets.riparide.com/landing_pages/stories/storyteller/benefits/10/medium-3d754600eee2049bbfb	chromecache_358.2.dr, chromecache_224.2.dr	false		unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css	chromecache_301.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.33.187.19	script.hotjar.com	United States	16509	AMAZON-02US	false
34.237.73.95	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
18.66.122.50	dexeqbeb7giwr.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
44.229.74.208	unknown	United States	16509	AMAZON-02US	false
18.245.86.101	cdn.amplitude.com	United States	16509	AMAZON-02US	false
54.203.164.212	unknown	United States	16509	AMAZON-02US	false
18.239.18.100	unknown	United States	16509	AMAZON-02US	false
104.26.4.52	www.riparide.com	United States	13335	CLOUDFLARENETUS	false
18.173.205.62	d1tcqh4bio8cty.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.223.74.168	unknown	United States	16509	AMAZON-02US	false
54.69.251.6	api.segment.io	United States	16509	AMAZON-02US	false
13.33.187.92	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.160.110.246	m.stripe.com	United States	16509	AMAZON-02US	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
151.101.64.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
18.66.102.51	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
151.101.192.176	unknown	United States	54113	FASTLYUS	false
104.26.5.52	unknown	United States	13335	CLOUDFLARENETUS	false
64.233.167.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.224.189.35	widget.intercom.io	United States	16509	AMAZON-02US	false
64.233.184.157	unknown	United States	15169	GOOGLEUS	false
13.33.187.40	d1ftdm4q83us3q.cloudfront.net	United States	16509	AMAZON-02US	false
34.252.74.21	stripe.com	United States	16509	AMAZON-02US	false
142.250.74.194	unknown	United States	15169	GOOGLEUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.245.46.19	unknown	United States	16509	AMAZON-02US	false
54.175.0.51	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
44.241.94.217	api.amplitude.com	United States	16509	AMAZON-02US	false
44.193.22.131	unknown	United States	14618	AMAZON-AESUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.181.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.75.209	assets.riparide.com	United States	13335	CLOUDFLARENETUS	false
18.245.46.10	js.intercomcdn.com	United States	16509	AMAZON-02US	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545809
Start date and time:	2024-10-31 03:40:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.riparide.com/adventures/28758-marom-waterfalls
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/459@100/42

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.238, 142.250.185.227, 64.233.166.84, 34.104.35.123, 142.250.185.106, 142.250.185.138, 142.250.185.170, 142.250.186.106, 142.250.185.202, 172.217.16.202, 142.250.185.234, 142.250.181.234, 142.250.186.42, 142.250.186.138, 142.250.186.74, 172.217.18.10, 142.250.184.202, 172.217.16.138, 216.58.212.170, 216.58.206.42, 216.58.206.72, 142.250.185.104, 142.250.185.168, 142.250.186.170, 142.250.184.234, 172.202.163.200, 142.250.74.202, 142.250.186.35, 199.232.214.172, 192.229.221.95, 52.165.164.15, 142.250.184.206, 216.58.212.163, 142.250.186.46, 172.217.16.195, 20.3.187.198, 142.250.186.131, 142.250.186.99
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, maps.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 69704, version 1.0
Category:	downloaded
Size (bytes):	69704
Entropy (8bit):	7.997211667213894
Encrypted:	true
SSDEEP:	1536:62vYDL44CUgxoT8lBx85tgtRHIG6lz9OR72nT5s+TOOVMsRCa:62vYA4w05tgtRHO9OR72LvyQCa
MD5:	C06FA8A4655C8B7248DC80DE2E268DDC
SHA1:	FC59BDE90BC63318B86A4FEAF4C68878CF81D01E
SHA-256:	3E1B228EC2BF72C9713EADB3E889808A6F24B22AC7239BDFBA8D5D3B8CEEE277
SHA-512:	A82A6EDFDCA9758C802247F198057A4704FEB2FDE5F2BE64CA73B02CD1C5F42AA30BABD6DD1128FD1CEB9A34AFC1E6BDA2800E04407B4B0EF543CA9352EE8FE8
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/fonts/riparide_icons-0c6d50f63525179eb523fc9d870e27cd14522c9549fb2ab1f8d117f23cb63c87.woff2?b55bd47145334193a0b15feb28d96f88
Preview:	wOF2.......H......................................H.V.........S.6.$..x..\|.. ..^..$[l.r.`..@.M...t.[c....n......Su....!=3.m......NchZ5....9....T..\.QM+.0;.A.K...H.%.Q.EA.hH.v-I .....i..A...H.t)B......]&..bg..9K.3#..........tK.....d..]&es..:9..k.n.h_\|.f.9z..74.XMo.D...W..{i.!@.4.;Y.KV1dM.......^.8=..q..e..:E.@:rb....:.Q.......M..h.c.c...cs...L..lcH..q..,..>.....+;v......s..<I...+.. .'....^..%c.C).....L....}&f..wx....rw.w.A&...1..\..%...p2.c"..Zq....u....[..:6.:....!...j.2@k.........&...O"........HuJ.......0f....XKu..m.....1/..H.J..L.&.O.?<..w...W.x...>\|.ih.BY...L..)..F..q.2~...W.......W......f8%..3.kG<....n....?...'.M.=.g..j.3..:.y....,'f...uO.^@ .~$3..Z.._.w..K.Kv..l.Rz...s2/..t...v.....a.b...`.z......?...)!dM.B'7E(....0S.T...e.O.... ..a.\..d...[....u..~h].]....a.....:5.1$O....G.W,...H..........c(".X........~z}66iG.H....Qx>#..J....m..2...o..u.Y..aU..T..4...U.Y.!.~...?.$..7...!.."K.........oY..3.j.v.3=....j.}.u.....$.a..jl.,..*..Y..6....Z

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	12007
Entropy (8bit):	7.932813514575133
Encrypted:	false
SSDEEP:	192:NwC1I2uwP+xlxZ2/eSlMTOXxZP+X3fVZc9YD85pY/aUC0RFwjU/u:Nb15utlxAPNxZP+nfTME85pYBRFwo/u
MD5:	4EE08A7C6854D186C00F1C0A571B1006
SHA1:	B804DA653C0CBDBF1E1A67B83B752BB2B723F079
SHA-256:	F1F62DBF8B00B677E3EB78DB0101B86529602A9C4077C8E2E6408856A06A677B
SHA-512:	5A8FE0E8ECFBF719899AE5460DD7B06E6D8C764E22174DD43497822BF6C943889EF395DA66820B20184E1CDF02731EB221B350ABDB87599914E800336E90E34F
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................6Photoshop 3.0.8BIM..........g..HEzrMiYMVZztGsHZx0pm....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$<b....,0..G...g..O.......bW..1.1..!.?.T....?..%....#..B.6...s......b+H.X.S&c.z..@.1W...X.R{].P;.+n.{.c.WZ./p..r....nm...?.....v..uK...n

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28228)
Category:	downloaded
Size (bytes):	28277
Entropy (8bit):	5.210847083904635
Encrypted:	false
SSDEEP:	768:PCh2wVWTs+jIrKc1N4xPOlkis45B5rgrW1/sN+2R5tnt3NappYqRFgkSRcZacj7R:Nw4xUMHaYqTgkSpU
MD5:	4E4E40C0CCC652A7CC4CEF7C2146C1F5
SHA1:	45B78F7C8687B680DAE7B6A09FB1B9CBEA7C2D34
SHA-256:	C664E784D6CBA355616EA0A6EB59603579A7B0E49FC4B9595264BA736AECCB4D
SHA-512:	98C8AFDBC62EE4C50927F1B4C988436FA4D38F57AA76B400C9B2098A3A10797A345EA15AC779C1C0A02285C83372F641E8480C70175575ED719D4FF573F1FBA3
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/actions/845/449cd4534726259c2a8c.js
Preview:	(self.webpackChunkDestination=self.webpackChunkDestination\|\|[]).push([[845],{1291:(e,t,r)=>{"use strict";const n=r(6150),o=r(6086);class a extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e);let t=(e=[...e].map((e=>e instanceof Error?e:null!==e&&"object"==typeof e?Object.assign(new Error(e.message),e):new Error(e)))).map((e=>"string"==typeof e.stack?o(e.stack).replace(/\s+at .aggregate-error\/index.js:\d+:\d+\)?/g,""):String(e))).join("\n");t="\n"+n(t,4),super(t),this.name="AggregateError",Object.defineProperty(this,"_errors",{value:e})}[Symbol.iterator](){for(const e of this._errors)yield e}}e.exports=a},6086:(e,t,r)=>{"use strict";const n=r(1209),o=/\s+at.(?:$\|\s)(.)$?/,a=/^(?:(?:(?:node\|(?:internal\/[\w/]\|.node_modules\/(?:babel-polyfill\|pirates)\/.*)?\w+)\.js:\d+:\d+)\|native)/,s=void 0===n.homedir?"":n.homedir();e.exports=(e,t)=>(t=Object.assign({pretty:!1},t),e.replace(/\\/g,"/").split("\n").filter((e=>{cons

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 17:20:06], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	59397
Entropy (8bit):	7.927744388585157
Encrypted:	false
SSDEEP:	1536:jK5yh8uL5yh8u9GVwvjIZk44L7CLaFzKE0:m0xL0x9Nsa44L7iaF+1
MD5:	8212F217DEB6A051563609C3C04B816F
SHA1:	6D8D2693294D2F40AE5432901C194AE56FFCDAED
SHA-256:	49F14CECD734B024A441F30C9052E6AE1D54157B6F6D80A289AC8BC8F8E3D50F
SHA-512:	CCB2A3E8570D8E171172C2922DBD9FA07DED2BDA959927CB65467FC55204145A773A6D2BD8A6FC0D5A1A7D254C30CEBC5FFAC9FBBD0F33B34581402F0557E851
Malicious:	false
Reputation:	low
Preview:	....+.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 17:20:06.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...................@...#.......2023:06:23 12:03:51.2023:06:23 12:03:51.+10:00..+11:00..+11:00......@B...........e..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	77905
Entropy (8bit):	7.958713087927425
Encrypted:	false
SSDEEP:	1536:GCV/PwmvA8ooKrCV/PwmvA8ooTGr6jHm7tE3SKiU5l+jPZnq0wD4mFF8QZ2:GEwmvA8oJrEwmvA8oys6jG76iU5lSRnX
MD5:	226121A0D710A2D633F6EF49DF5A0553
SHA1:	79CBF3549D218FDF91B1F7773188C72D8DE6E624
SHA-256:	C0C716830262BB48498794248943985C5A1EF228BBBEBF9B3E29B790355E59F1
SHA-512:	BB01E282CEA2510C824F27E515490797634A754B9C08104E6376218C5A17BA35A44B166894858632692E104F17B688598371951F38F8A319EBE333990FEB1032
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424886/image/medium-489a66a7e051856c5bc66bfea7646078.jpg
Preview:	....4.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................3......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...x.Q..=..4...U"..G.w...-....c...u-.>....6......K:Q[.../.Q.S.8.Yi<....x.+.M.9l.>.P....)..>.....YF......Z.I..]j..`.F.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	dropped
Size (bytes):	1897295
Entropy (8bit):	5.530580079511122
Encrypted:	false
SSDEEP:	24576:/hTJZt7cpHMhxcnS9jciEc0ZnT48tYv9sD4qng9DxQB0UVOZ/wuYQt0do0UrByiH:/xjkJVOzyOOPwEuDDbk62i
MD5:	41F97AFC297AABC844D956EC71DBB43B
SHA1:	CC6B99D9900E4FE2E3451A625F1679ED38F399AC
SHA-256:	4FBFF840AC59047AEE85CA6E8DD46E93C3CF919341181015321CA57618244056
SHA-512:	FB2D3DB79CEE9BCA2A860A598C815F6D16B04137CF4FAC320E222F096A01AD68C384950580D53C8838EA5AFF8493BF12CB0A149238358AE933EA2A340F0ED001
Malicious:	false
Reputation:	low
Preview:	!function(){var e,t,n,r={82987:function(e,t,n){e.exports=function(){return new Worker(n.p+"clustering-gql.worker.03501d17d6d5ce0028f9.worker.js")}},53756:function(e,t,n){"use strict";n.d(t,{Cp:function(){return d},Qv:function(){return g},SF:function(){return l},Vu:function(){return p},Yp:function(){return m},a$:function(){return s},cG:function(){return h},k:function(){return a},rW:function(){return u},s6:function(){return f},sE:function(){return C},w2:function(){return c},wm:function(){return v},xE:function(){return o}});var r=n(9669),i=n.n(r);function a(){return function(e){return e({type:"CURRENT_USER_FETCH",payload:i()("/user/current_user")})}}function o(){return function(e){return e({type:"CURRENT_USER_SILENT_FETCH",payload:i()("/user/current_user")})}}function l(e){return function(t){return t({type:"CURRENT_USER_UPDATE",payload:i().put("/user/current_user",e)}).then((function(){return setTimeout((function(){return t({type:"CURRENT_USER_RESET_UPDATED"})}),3e3)}))}}function c(e){ret

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.950212064914747
Encrypted:	false
SSDEEP:	3:XAo2mALn:XAoPAL
MD5:	CBBF1A49E83B5AF07C7D48D9812CC4CB
SHA1:	367981992FF725D7FAC87F5962529E80D4C843CF
SHA-256:	841AB36BE629CD80337B99D244C2E6CAA173F3B8E5BF0BC1370F22A1E5DAED1A
SHA-512:	948E11CD01E718F06ED4A55FD1F874AEA5C3FDFE23204B495EF2D1BDE7D7F8255EE1557043E7749C489A847264ACAD82CC51DEB58936A8B72E6FCF2953480F93
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwk2afMU8YLw6hIFDT0fUzwSBQ09H1M8?alt=proto
Preview:	ChIKBw09H1M8GgAKBw09H1M8GgA=

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 16:05:51], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	81777
Entropy (8bit):	7.7315457675647545
Encrypted:	false
SSDEEP:	1536:UQZ6WzkH3wZunAXLQZ6WzkH35Gj7/e8FCGcg6sNdkckleeduwk3yt:UQMH3iQMH35gC8slZNlXuZyt
MD5:	A3842F9E2FC3411140DA4373274162E4
SHA1:	E8959B9940E11D469039DE2869C693075FD4E2A9
SHA-256:	3F4CC2D9480DAB896CFC0FFF0C7B33A67868DA516EA61189D44077618845A96A
SHA-512:	0C24955A6B6C89809392867A5DF9787EC9BB72295AA217818C1F231AB98564B7D9FD8AD275CD12E908E507C335BEDBCA81136BF0BA825631D228CED88991466B
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424737/image/medium-0f546d5e7fcc0e388b45bbc65f6abbd2.jpg
Preview:	....2.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 16:05:51...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................00..........00..........0100....................l.......................................................................................................................2023:04:01 21:53:34.2023:04:01 21:53:34..t.@B...T-.@B............................}......_S...........................................(................................/......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:31:26], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	147693
Entropy (8bit):	7.655622221754395
Encrypted:	false
SSDEEP:	3072:d+UineSc+UineSoRG+F/rKUHQ3yMzNwdu0Vvqt:QteF/rKUw3yMzudhvqt
MD5:	42DA4EC12531C14EEFE4A60E0E42FBAE
SHA1:	97A5C5FAE6126E5B1AE615CCBCEB934F8F32F075
SHA-256:	B61D43614E01DB2EE0496F3120DAD9C7EAC121A0B98B74EB1958CAF45ADFD794
SHA-512:	4794266D52FE05AA15CF5A02CFD595295C099E2E88C1B387EF1BC4B9BA89AAD74BF864A5FB2D3AEDDD1AE86BCC3540E6591A0521706E3CBFDDE60C0274930BB2
Malicious:	false
Reputation:	low
Preview:	....D.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:31:26.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:09:22 10:12:03.2023:09:22 10:12:03.+11:00..+11:00..+11:00...~..@B...........S..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	105589
Entropy (8bit):	5.174631609043928
Encrypted:	false
SSDEEP:	768:MLMeCBCBk7C/MFRo43esRdLyWQL9XJYOLBOiDYdveR2CjRBKF2FTm7L/PTDFlIs4:0CBNW/E1D82vnCjRBKFgTmbRFnOoh2
MD5:	456DE29AF8A76C3FF3483E96C6514932
SHA1:	EAD44CFD9CCC7AC3E9BA5A3B9CC4942BABE4FA47
SHA-256:	9B003584645B081801A82ADD0DCAA6EBBEE4A5D1326CD8A6EAF04502A947022F
SHA-512:	F9995E4026B6F309BE98EFB649B5252B0CB510D105BD1CD9590FC325D0885A615BEBAD18F376522FB11994E90201B062F358DC9F20BA0B4E1A480F2346FECC4B
Malicious:	false
Reputation:	low
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1350
Entropy (8bit):	7.793061141892656
Encrypted:	false
SSDEEP:	24:wn3CpGLWuPNHZphHkdcYZWMTqV2I3/IZbxFMSXl2Hmlfio/D:wSCxnGTUUbxFzYHmlf1D
MD5:	491DA35B61CDDB6F2943D1F5FE8C93E1
SHA1:	75C8CD857413DE3BA83206D631AA35E53FB48EF4
SHA-256:	F0CC9D915862C4B07704B00C0A9F15C2AFB0F4C1E7D4575CA96B96533878D607
SHA-512:	1DAF7AC3D430E2E10F7B49ECD74A7D6620CC7CA07D86876B4F31C939052E0B85A696AADEB8E052746C33D6D8C24E570519891C813289E6775021466A08DDB645
Malicious:	false
Reputation:	low
Preview:	RIFF>...WEBPVP8L1.../..?.O.....#..H...CQ#).Q..q.....D.....u.................@.Z.....J.&.q...I.NAmN).........v.!..[...+.9W...v.3..w.%.....4....{...]....~....lOm7.!.Ha0..H..5..T.qV..@.'....@k7.X5.#.z.tG..R...TG.]...H.Z.....1..Hv..I..O.^.....'....YC.G.3k..j..qo..........v..9.k:#...........9..{R..."..j...V......@.k......JUS.......J^c.%.Q.T...^..#.)X4..P.@.guB..@ ..y...%....v\|Vc......a...ODD&...`V..Kr.>q....0P..<%[P.Zud..S9&5.#-gcKEGhV^.Mj..N..n. 0[3.}N..;9y....+.z:6!T.......H..2.Z?..L....`..E.Rk..x$.?.P.p%..."..j"O.4.C...,..Ge...!E........~,.B......^..a.;...#..L...0{=...y..iR.R(...y..................g.z...h..OD6.....b..:!}..8..ya.s.b.M.p.f.?.rQ........[...\..$...........l....m.r....}/.me.yF^6...y......4.6eM...\Dr.z`...".V.;Z.'./....w3...U.o..Y...,2.....x".`_.k..+=p[....../.......Z..\|....tV.:M=D.6^Uu.r..2Uts.!PY.i...M.>'.{.3.....?i..L.Y.q,P.TU.[8...%.U.Y........V...."c.......(.G.......3..C..W..e......*....1.T.@.j.f..q.z gU`.....{v+.I..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:46:51], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	124915
Entropy (8bit):	7.867628521356617
Encrypted:	false
SSDEEP:	3072:pUDdczEArUDdczEAzKGChndCcR63SgFDvDf:MczEAiczEAWJhdCcASMXf
MD5:	D1AA5F9671DF096DC9FE5B475F54AE6F
SHA1:	42018004542CDABEABCB6268A50988CB4A222008
SHA-256:	922B895D3EFB6AD6320C2696FC8E79317B45D399BFE65AB6C1DD1ADD7270FDDE
SHA-512:	8CB4056C22EA24EF8F88384B4054EDA1386CCF6CB71D5E113E9F2008F1C1C7C5E5B96783B85311BCD13B01CB58B4CAFB62809AFE95EDB85ADA4533F5AADE9D07
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449707/image/medium-4ccc26fb5131aa50664e4a2b068572d9.jpg
Preview:	....R.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:46:51.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:09:23 12:46:54.2023:09:23 12:46:54.+11:00..+11:00..+11:00..X.y.@B..........&8..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	19612
Entropy (8bit):	7.987200097062731
Encrypted:	false
SSDEEP:	384:ftBApwD2NS75APRAjfMzH7clk2scxubBIgbRw6uzmWNoxQGg5:ftB9D2NSORAjfMbuub3bRxuiwo+35
MD5:	8231F69AE66B4C943DF78D2899E81AB8
SHA1:	B60AD6752726BAB21DA75FB5F54667556C1CFB6B
SHA-256:	57E3B1B1EFDF5313AC246CE0C41889E20A75395553EF6B5467386D9EEADFD5C8
SHA-512:	900F4559CDAFA595BF8DCF3A79BB313852178DBE90429313E292AF072FD9213791842A8428B4278C1FDA603DDD5825A6266F823A6F4C9F15F2E66309DB410430
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i115!3i78!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=119883
Preview:	RIFF.L..WEBPVP8L.L../..?... .mU.Oq.@y...].r..p..l.$......\..s.C.M.:.l[M.Eqg.,..#.x.d..."....\t..4.<d`F.-*#FW.$<L..Q...:.........<9&..\fU...Q)..!.X)...0........8"I.Sx..nt ...m:.e....iUp.Y...KP(...+..R.D$..J. &B.UG..6.......\..7...M.lC...H.99.;....7,R"..T..B..?..&......J#j.l...Z.k...:..5..;<4...Vhn..'..V.s...rx.......m.@.J#[W=$8...dp...T.+..J41R.}.U...0j..].U..?....].u.."...m.Z.D.+.....K...)...\.G.\|I.+.I...3..ll}.7..LiL.0,r.....!s{;[5....R..$.....$S9 ....]L......Jnl%.R..J5.q.%1,!....N......M..y.....w....j[{..B...$....V....%.CF..S...M^.M.l.J..1...).......-{..`FJ..%.I.E!......R.. /y..hy..C..Y..g.N5.-....~..o...NJ>.N...3..j........6...Q..0..Q........5.1.q.............?..+.."Q>.[...X...$Q...4..p..?C.K_.....3.J.L.......(_.o............"G.........!P)....nZ..+Z.a.JE..&b...+>.)nS%r.%.8K..B..}......[.sJa.n.....f`...<..1z=.8dw%....Q.....7....D.$....^{....86...P...1....ylG>.6.iG]SY.....6...x7p....7....\|=...G..........b....c..>...d.....B...c;`.:>R.p.',

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 65128, version 0.0
Category:	downloaded
Size (bytes):	65128
Entropy (8bit):	7.9948169532328555
Encrypted:	true
SSDEEP:	1536:fnVCart9bfhiyCDOY9WmrWb0pA1YjEMV5jEy748kvWjzq6d+4dKs28:fcappfhLCDd3E0RjEMHjEy+v4ztwOX
MD5:	6C3C513944A6D77D323C005EC7C76557
SHA1:	21FC422998BC62F4B9D97F7408CA0C0123561258
SHA-256:	59AFFCD0842445FC868597AAF11DEE96E4D21BA1D3AAA4F78F7E09AA95485E31
SHA-512:	1077C9AC398A9790D13C4736DCC3BFB10C4ABF9B9FEBD6BFB0BD182B45A8257AA63FA4F04CFACF6DA4727EC0977A875B09C084C9A22846ED197BC831AF332F9B
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/fonts/GT-Walsheim-Pro-Light-39fce1902fa730bf56a53c648bec8185b90690516b06811bb2360c62d185b548.woff
Preview:	wOFFOTTO...h.......0........................CFF ...(......e.-?.GDEF..........dz.\|.GPOS.....,u..m....GSUB... ...F.......#OS/2.......O...`i..`cmap............/9".head...$...3...6.rH.hhea....... ...$....hmtx...X....... .n..maxp..............P.name...............Zpost........... ...2..P.....x.c`d```a`...p{<..W.f...@p....F.../.....230.D.r....x...pc.....f)..q._..zy../..g.m_..................tFNl..3...:W::._I...~..a..&..W.A..>..RQWR_..~JEW..]..m.}8....^.h_.a.CI.y-......{..SI.Ws..5.Xj......{......\|6C.4..~he.b..2-a[.....5...k.<T.hk...X.j.<V..ly...y..._.k..rp.....c..;e.......\|w..Q>.......;..u.}.{/eh.u.2.I.w'.O..W..~.$....k......!....G-.....6=..0.........0...3.Af....+,.cZc...RI..{..{kC........0...^..w....:T.zT`kS.wk..R..Sw...v.....G...p..k.!c#......T.H...&.FM@..M@_,....O.Yg......MNz..Mn....}VY........+I..~^...y......j.....W..L.#.A.~N-.g..Kg.@..ap.......`......M.d.Vm....).....{.......=R.~..~+....O.]..g...9A....Pd.Fa0...>6~L.....t(...RV...~...r

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:40:03], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	101882
Entropy (8bit):	7.811971194274981
Encrypted:	false
SSDEEP:	1536:23oNgZFjqzPc/O4491oNgZFjqzPcKG6jq3vs4JsdYT7Kt86TZ6uH+bKh8zDqlg:02mjqzPz2mjqzPlpQs4tfKtfTHV4q2
MD5:	67076E64CAD119383FFF59EA0A13E8AC
SHA1:	37BA950872049EC6AB15E331DEE49AF56036B502
SHA-256:	9DBD673CFD593A0F330C91F629BF71B9B9BD1C92DD63D549493D36D81112E1E5
SHA-512:	61BA2A6A17FB8EFAA76CCAE6CD40A693E4EDEAF483028F7AEA1D3570F1891C842978ABDD083C3B3C14BDAE4BDC59AB6C376CDF975827B3C1B91F491701B6BA31
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449400/image/medium-6b2902d1b4cf9a5d2ddef49dbf91c4c5.jpg
Preview:	....8.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:40:03.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...................<...........2023:09:22 18:08:23.2023:09:22 18:08:23.+11:00..+11:00..+11:00...!Z.@B...T-.@B..................................f7:.....f7:.............................................SAMYANG AF 14mm F2.8........................................(...................

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:43:22], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	128997
Entropy (8bit):	7.788745215534772
Encrypted:	false
SSDEEP:	1536:7zSOjcaxa4ZSOjcaxacGLq/M1sz87z7CPGaKfA+gkRxSvbwLRCGNX7/+DASfg1E0:fJj7Jjph/f8eGaaxqaCoL/IABgROke
MD5:	55F412C1212701496B8686FB2EFC597B
SHA1:	FDB00F3BA920E45A9B87321DF5D72A5455776FBE
SHA-256:	3A888FF44B7E4727D20DEE962B7A0D5B849595F61EDE9C6264BABA26B7444463
SHA-512:	B5A1C9FE1DAD787D77DCBF046145698B7C041E45D8BC8F2FF9C66104839D6CB7E86DB5E89B0B5BDACBA42E343C3029D101FEED859B100C58BB05C6AB50EABDE6
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449356/image/medium-85bf483e9afd114a7b72fe2b0c1dd1b8.jpg
Preview:	....B]Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:43:22.)........................."...........'.......}...0...........2.......}...........0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...............................2023:09:23 09:54:10.2023:09:23 09:54:10.+11:00..+11:00..+11:00...<..@B..........0V..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	293430
Entropy (8bit):	5.083604069256311
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC
MD5:	FB2D334DABF4902825DF4FE6C2298B4B
SHA1:	433836DA7E015F2EB3FC386817DE88B78248F6EF
SHA-256:	430F36F9B5F21AAE8CC9DCA6A81C4D3D84DA5175EAEDCF2FDC2C226302CB3575
SHA-512:	8CAC69EC91C437AA5E126CE683A6BB5C904E44D4C1D084C3D8F8BEE85524735E8F09A340257D9A859D5E8E7D69D6E637ECFC728AB9FFD0E30D65B2136C48378F
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11519)
Category:	downloaded
Size (bytes):	91509
Entropy (8bit):	5.637326237523702
Encrypted:	false
SSDEEP:	1536:69KviN6GPu/ltNrrmd/9Ztr+ww6uxx1ugzwF7ET0GbMYU23qX1DeJ3PZ97RM2y1l:zvq8tttq9ZtibPZJjbps+Fz0
MD5:	7B63F7F753EEC32D4CFB2E408EBA982F
SHA1:	3EBF3278AD830FA134BDA71F016E042D24DA928B
SHA-256:	6B5C4591758D9291DA872AE67EA76C40520E94149E07F2C504EAD7319F67F8F4
SHA-512:	DE0E2C4359C456240F95F46B9D461E48B2FA59A1045E25E883FA15830553C24137175C23C8E3ABA256F14C32235D1105EEE37D1E55E281523FCA63CDE93780E9
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/adventures/28758-marom-waterfalls
Preview:	<!DOCTYPE html><html><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><meta content="Short nature escapes" name="smartbanner:author" /><meta content="https://www.riparide.com/assets/app_store_icon_192-cb9a702dbf025614cb1eaeea18ef22189185a340765e4605e8a8d9f38204dbd2.png" name="smartbanner:icon-google" /><meta content="Use app" name="smartbanner:button" /><meta content="https://play.google.com/store/apps/details?id=com.riparide.android" name="smartbanner:button-url-google" /><meta content="android" name="smartbanner:enabled-platforms" /><meta content="riparide" name="smartbanner:custom-design-modifier" /><title>Marom Waterfalls \| Riparide</title><meta content="https://www.riparide.com/adventures/28758-marom-waterfalls" property="og:url" /><meta content="Marom Waterfalls \| Riparide" property="og:title" /><meta content="During our

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356)
Category:	dropped
Size (bytes):	254961
Entropy (8bit):	5.55144832232883
Encrypted:	false
SSDEEP:	3072:mFwizDGLETu6oun0R5CptcY0/H8+ARrrOS2WrDmKD0C8rT/Qh9:oGLgu6ozozRiSRx0C8rT/Q7
MD5:	248C00AF40A3CA8C2E5C465F9C888DAC
SHA1:	CDA4734F0F1E420E181347C6B3E1551F8AB8D08E
SHA-256:	AFD78AD5E5B57FAF5111CAF76D33053DB409FDADF927FEA48B99727C405AFFCE
SHA-512:	08D14247C37A7F15D11A9D8D8900B8A7120546D9EE19A0725C790779DB12A8BF6F91BD8B2B3E7547F8CA9F561BCFCBD54BFA831BEBCECC3970828CC900CFF299
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-740117353","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-740117353","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__ccd_pre_auto_pii",[46,"a"],[50,"q",[46,"s"],[52,"t",[16,[15,"s"],"userData"]],[52,"u",[30,[18,[2,[15,"t"],"indexOf",[7,"@gmail."]],[27,1]],[18,[2,[15,"t"],"indexOf",[7,"@googlemail."]],[27,1]]]],[36,[0,[0,[0,[0,[0,[0,[16,[15,"s"],"tagName"],":"],[16,[15,"s"],"isVisible"]],":"],[17,[15,"t"],"length"]],":"],[15,"u"]]]],[52,"b",[13,[41,"$0"],[3,"$0",["require","internal.getFlags"]],["$0"]]],[52,"c",["require","internal.setPr

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.riparide.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:04 09:20:01], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	148174
Entropy (8bit):	7.874866262777435
Encrypted:	false
SSDEEP:	3072:7bW1O21MLkw7FnZfFCM8fBBWpjL7mRgbP1vL8we6:O1j1iJxZfFCMkBBWpvQqPptX
MD5:	3318FF2F3059B5DEE0D11942E2A7D4A9
SHA1:	FFB02E28EC5A770F6553576479BA2F688B6BF0A1
SHA-256:	96C6201A881E7D3BDA4511E5996870DD7EF849805C13D9D5737525342661575D
SHA-512:	5DA2C2AD99892A3B4CE9CCBE90C0FDD2264D50F594327868EB05751CD5EA24952110E74FA39B70F9E5F61C4F99BC426F2CB5FDBA3487097B3ED1AF506A7DD2D1
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/31469/image/medium-25914e682c7b8cbf7fe7d7c1500288c6.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..073735..>..20190321..?..073735.8BIM.%.......!.j!....p.oW=Cl....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:04 09:20:01...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................45..........45..................................................................................................1...........2...........4...........5............... ...............2019:03:21 07:37:35.2019:03:21 07:37:35..e..@B..................................................365012000017..........#.......................EF16-35mm f/2.8L II USM.000085027e.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	downloaded
Size (bytes):	6962
Entropy (8bit):	7.895480989997026
Encrypted:	false
SSDEEP:	192:xuCMLabtf6eR8r62P91n4vzAuKiPABU0n:vM3frZYMKsn
MD5:	228D544DE42AB6AA892D55154261E75C
SHA1:	5D8E2F44E23E7DEA5B17D98629944BE831D2328A
SHA-256:	1308608E237A5904A7E85D434F015EAC8ACC02265075B326327E596D8B7A0A23
SHA-512:	CDC8D016760945545D3904D490FDB1C2EF371297CAC953052707688813ECA467B0D4C5B4D60F941B464581C79346F2C806044B2A4BB40F692E1F37A647ECF719
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/user/2358/avatar/thumb_lg-c79cdbcef5fc0858714167b49c4aed59.jpg
Preview:	......JFIF..............Exif..MM..............................J...........R.(...........i.........Z..............................0210........0100...........................................8Photoshop 3.0.8BIM........8BIM.%..................B~...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..?:O......7....y..z.6O.SqK..w.........Tw7....sq ......u4.7..../.x.<7......\|.h...{..u5....][Img..C=..&..f..q.....9.W5..>.t.u.R}Np0.1.x.z...S.R.d.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:02 19:06:35], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	154005
Entropy (8bit):	7.878190449945662
Encrypted:	false
SSDEEP:	3072:8+k7CKSit5cl0aFe95koBvubDLVH56DYFXqnDNQEKeaZgoVfjzGz:PcZ95k8vcDLVHIDY8DCuBoV7o
MD5:	084DEF14B77CE7B0F27CBF64B9E31AB2
SHA1:	E0CC765AE5D84B22A3B0336A16E39CE3D9EFD4F2
SHA-256:	3334092AAA5984B24953B478356158DFC48E4D018AB251BA6BF8242C379B540D
SHA-512:	DA3B78CE8C91534F77EA55BE56FBACD4484C476AE4C68BA4F5DDE99A5DF196449A5BCE311DB8FD5A773F30CCE1F5BE7EE10CEBAABF1D5EB640CBA882121577B0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..151410..>..20190321..?..151410.8BIM.%.............d...+V.......Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:02 19:06:35...........H...........P..."...........'....... ...0...........2....... ...........0230........X...........l...............................................................................................71..........71..................................................................................................1...........2...........4...........5...................d...........2019:03:21 15:14:10.2019:03:21 15:14:10..`e.@B...T-.@B..................F.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4756), with no line terminators
Category:	downloaded
Size (bytes):	4756
Entropy (8bit):	5.8174660550317
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUtMKRt5VQ0:1DY0hf1bT47OIqWb1YMKRt5VQ0
MD5:	F8D911A38B6C1D86FAC97FF0168CC580
SHA1:	C613E9F9341C028C626D2C49F2EDC4F556D9F23B
SHA-256:	982DDCB09E4F35A284D5CFE72D6E7B8A1113D1AB4A93380458D998F4A37CA3C4
SHA-512:	01854F85DBF7380B7071B431BDDED12EB22AD9F08C5208EC193A719B67BE4A8C5A783B31C82C1851574A874155465668BD47DA6A4D69456A3D55B47856D9B42C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/871543968/?random=1730342488859&cv=11&fst=1730342488859&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:04 17:04:56], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	75154
Entropy (8bit):	7.705820789301764
Encrypted:	false
SSDEEP:	1536:WTJ6F82HxHAmTJ6F8fCGViqfhHKc9lCGNSNruHHYcEnOQCD0ILH:WTr8TrqCnhHZlCA+u0OQCRLH
MD5:	0B2E91A931E4AD6D39421C46E9D88902
SHA1:	D3D807B98F937E7DB6AE8E572EB9703A19742F7C
SHA-256:	DD7EEBC68B45EAB7C261253810321C9E43CE5CAECDA22D7357DBCAD3FB5188EA
SHA-512:	07EDE682D56618AF7986C41A32A37356E62F6A3019835BA5736487DB0695D894741C3BAC60799638A9EF871DC3ABEADA0D8609C01A4468614BADE1FF7E655340
Malicious:	false
Reputation:	low
Preview:	.....Exif..II...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:04 17:04:56...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................03..........03..........0100....................l...............................................................................................................G.......2023:04:02 17:00:17.2023:04:02 17:00:17....@B..VLV.@B..................<.........}......_S...........................................(................................'......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	148763
Entropy (8bit):	7.243052953775145
Encrypted:	false
SSDEEP:	1536:XISxqw2fit5wTAZ87OStoIQEhSxqw2fituo228dApNlTP0XHQstk9EGGM/CyhCbQ:XNqwiSqwirdYlb0XHvc1B6Fb1OCW
MD5:	66FDF036B00BB9161503D0898D55C1E6
SHA1:	FCDE733CC4B9BAF5B200D2497AE01C245ACD4E5C
SHA-256:	A35158F125337EA983151E7FAE6AAA9034F123A179AEED852E69D322F4E1656D
SHA-512:	B6B1AE17445E42904A1B01EB97EE8F70F7DCBC5649B44A30CD67FA955AC849683E4BBD3472CDA67821F90434F1AAF9B12C90B16DFE38C71FFC1F652E1165F657
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/1817/portrait_cover_image/w400-b840b609809271e1dd794df1f1510d66.jpg
Preview:	....H.Exif..II*...............DJI.................................................(...........1...3.......2...........i...........%.......R.......FC3582..,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:39:06.$........................."...........'.......d...0...................0231........................................................................................................................................................0100........................................................................................................................................................................1...........2.......$...4.......D.......................2023:09:22 17:18:07.2023:09:22 18:07:12.+11:00..+00:00...t.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.......................E...............................................V...................%........cS.............

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=2333, bps=194, PhotometricIntepretation=RGB, width=3500], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	61992
Entropy (8bit):	7.6699153422287125
Encrypted:	false
SSDEEP:	1536:9B+bw6gBBoFVAyVTvJSYjiuU6l65lvqAnajSaX:DHBKVdVM76g5lyAna2aX
MD5:	74577F4F32FE666F4E99C0FFC26327D8
SHA1:	184A6F9A77BACB3BE4B0F47D63FE82985501E1BF
SHA-256:	B75DCCB9BBA27217995178B2E7CCCC1C96C795224D1604DFEE9CE3663E7F8ACE
SHA-512:	A841E897B62C542B32EE8FD993179139FB47B881A44DE622D824823D25F3B812CB9A5EB53F9844D65044B15A8CA38DF953456A441DC3D5554DB8E4B065B0F3B2
Malicious:	false
Reputation:	low
Preview:	.....wExif..II*...............................................................DJI.............................................................(...........1...<.......2...........i.......0...%...........Z.........FC3582....-..'....-..'..Adobe Photoshop 25.3 (20231118.m.2405 d7bf9d7) (Macintosh).2023:12:16 10:50:40.&........................."...........'.......d...0...................0231...................."...........6...........>...........F...........N...........V...........^...............................................f...........1...........1...........0100............................................................................................n...........................................................................1.......v...2...........4...................@...........2023:06:23 17:30:44.2023:06:23 17:30:44.+10:00..+00:00....~.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.................

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:37:41], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	135408
Entropy (8bit):	7.86343848131367
Encrypted:	false
SSDEEP:	3072:9KWXjshN9QKWXjshN9RuiajFv40dRbBHwLHKVu/SAAOt:MWzsnWzsRuiegkRQuet
MD5:	EE8BDDE00DB2E8D972BDB328125D0D23
SHA1:	ABCA1B12C989F0717915CB2FF1B53A3455746312
SHA-256:	DD83AA79D1D441442F7F7566C2F69A66BA2D88EAB2ADBBF9BE28D6FBFF19E640
SHA-512:	78550F18A16D504139A0B06C3DC91BB3352C8F1598FCCF98D695BED29749C5F748D2982164E68819E93D88E166CE616EC7E7EB9D002D048ED5532696A77CA2F3
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/420571/image/medium-912d8fc4a4929952c4df709665c834b1.jpg
Preview:	....G.Exif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:37:41.DANIELLE NIEUWENDYK...........<...........D..."...........'...................0231........L...........`...........t...........\|.......................................................................47..........47..........0100....................l...........................................................................................................@...........2023:03:08 12:53:20.2023:03:08 12:53:20...~.@B....F.@B............................}......_S...........................................(................................D......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 68116, version 0.0
Category:	downloaded
Size (bytes):	68116
Entropy (8bit):	7.993863399706401
Encrypted:	true
SSDEEP:	1536:rFoMartACboxxVDb65tctffx62U/8AdKuoyr7r5cT4HiS036CeFMnSs28:rF/apACcxDD20fx6dnKyr7NA40KbMnbX
MD5:	3952FE7BD7D72A97FD9F9BD5F27AFDDE
SHA1:	1DF38C6B8070E2BAEAD322ED7737337947B6C554
SHA-256:	887B81F71EF35F6C1BC4E24B7F8DAFAE8B3BB4CD504F6EDF6FB2408AE559B918
SHA-512:	242C8BBA68CAAD0D0B99D44BDBAFF0D3A0C556E40FC1E519512CB069CF50351778CD274EFB8D037744205B2DAC96496B501512630C835C0C8D1779857DD20871
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/fonts/GT-Walsheim-Pro-Bold-8309a900abf984eff298c77aee586a756de0cbefe14f5dcab92825d05e95534f.woff
Preview:	wOFFOTTO....................................CFF ...@......vy.u.*GDEF...@.......dz.\|.GPOS...4..-...n.L..YGSUB.......F.......#OS/2.......P...`k...cmap............/9".head...$...4...6..H.hhea....... ...$....hmtx...X...D... ..u.maxp..............P.name................post...,....... ...2..P.....x.c`d```a`....x~...../...zY.;.......,.N ....$.....Ux.....d....$U.^m....u..k..m.m.m.o....9SO.Z.[;.....N(i...~..g...M...../..?.C.7S..Nqc...?......cG....>.......V..g..9.,}7.[....j.qr.Gkn..o.v....B.......].?.sY..3.......S`a...%0..ss..l.7....0..l=I...V...C.#!.....Z...a..R....s.Q....&.I......).....=.v......Du..../.f..}5.k.....i.'<[.H..X...~@\|.....W.4....\O.'.g..v...$.>.{..q..9G.u.WE..2.M....l.t...qx......E.`..c=.d.....Lwt>..:......F..]X.+4....pR...jX.....2.E.c..D....kE'.{.Y.......L......@...^..&....U3.......n.N.&.......W9......5..g.....p.n.^.V....Z...........r...j..1\|.`+...t.(..b.6nTIo..Gj4.....1....X....$.......0.]E<e.9..}......'1.S0.c".'..l.}.q.......(..^Z

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	dropped
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14570
Entropy (8bit):	7.982425131382693
Encrypted:	false
SSDEEP:	384:xMqL4bDCj3tfu7DZr/MGiu/UE5oy4cfWnbZQavs6aHUQps/H:Go4bDCXEK4ItaVmH
MD5:	B6816900741F34DDB671CB12E4600ED1
SHA1:	0CE930C51D69F839C374DE272F52854F69275650
SHA-256:	D8503E5662C39C600DF9AB017A3EF0CBFE8FD13FBCEC7A409729361CF1B5D2E7
SHA-512:	37F5506F52027FA461CA5BF322E677D0996977C80F1CD530ECA3793E4B85BE5A1DA2186CF649B8C1B7D05978DA266F466834CEC1A8D203825F52F3022DBACC0E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i116!3i77!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=99491
Preview:	RIFF.8..WEBPVP8L.8../..?.w.6..4O,..p..cG.......m+..NN'..CF..].1..D.vw.?....:..?.....0o...@.......c..g .?...(()BBH .a%2HL.H..3J1I..i.Y.$...@0..F=..R....../..@...H0.B..H..9.X...v..5....8[.L...1...A.k..R..p..n\o.\|H.S9.RWN...n.....i.We......#.Em.$......DP..K....PQc....f...x...........;.$)..FD.e.c8...e6T7.3...l.....h+.`..G..n.e... ..........x..w.".`..O[JU......a.A.....8...7....m.&.IF...S.G..d... K....G..i..`..9.:...7......i...p:.;.i.1U.....f.x........Mo.....=$..@.a.....&J+.....6...j.y..D...o.CS.....[/@U.bGP..d.O7.dY..e....o...&...i9...\|!v9]..q..^...W.%j.I....f..[X.:u/..`.J7.y'....w....=v......9N...k..j.nV ....8..u...`N.......(..U.i..nz..j..#...[...gq....eR..!.....!..p...z.>d......3....'...Y.j..`6..h..C........{wU.L.EV..K....Q....nryf.......p.Uy..(....uf......U........s\|.r...R.`..B...ru...v......8>8.DK......v...VB....^.l...!33.....h.6.9.....-...lF...jH...0#.!fxHDG(..v..U.IZ..G?_.....U.\|..r...J.k?..h...R...8.B..I.L.a..#..=.QMc._..T]D.....?^..e

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	6962
Entropy (8bit):	7.895480989997026
Encrypted:	false
SSDEEP:	192:xuCMLabtf6eR8r62P91n4vzAuKiPABU0n:vM3frZYMKsn
MD5:	228D544DE42AB6AA892D55154261E75C
SHA1:	5D8E2F44E23E7DEA5B17D98629944BE831D2328A
SHA-256:	1308608E237A5904A7E85D434F015EAC8ACC02265075B326327E596D8B7A0A23
SHA-512:	CDC8D016760945545D3904D490FDB1C2EF371297CAC953052707688813ECA467B0D4C5B4D60F941B464581C79346F2C806044B2A4BB40F692E1F37A647ECF719
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM..............................J...........R.(...........i.........Z..............................0210........0100...........................................8Photoshop 3.0.8BIM........8BIM.%..................B~...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..?:O......7....y..z.6O.SqK..w.........Tw7....sq ......u4.7..../.x.<7......\|.h...{..u5....][Img..C=..&..f..q.....9.W5..>.t.u.R}Np0.1.x.z...S.R.d.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	148763
Entropy (8bit):	7.243052953775145
Encrypted:	false
SSDEEP:	1536:XISxqw2fit5wTAZ87OStoIQEhSxqw2fituo228dApNlTP0XHQstk9EGGM/CyhCbQ:XNqwiSqwirdYlb0XHvc1B6Fb1OCW
MD5:	66FDF036B00BB9161503D0898D55C1E6
SHA1:	FCDE733CC4B9BAF5B200D2497AE01C245ACD4E5C
SHA-256:	A35158F125337EA983151E7FAE6AAA9034F123A179AEED852E69D322F4E1656D
SHA-512:	B6B1AE17445E42904A1B01EB97EE8F70F7DCBC5649B44A30CD67FA955AC849683E4BBD3472CDA67821F90434F1AAF9B12C90B16DFE38C71FFC1F652E1165F657
Malicious:	false
Reputation:	low
Preview:	....H.Exif..II*...............DJI.................................................(...........1...3.......2...........i...........%.......R.......FC3582..,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:39:06.$........................."...........'.......d...0...................0231........................................................................................................................................................0100........................................................................................................................................................................1...........2.......$...4.......D.......................2023:09:22 17:18:07.2023:09:22 18:07:12.+11:00..+00:00...t.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.......................E...............................................V...................%........cS.............

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 17:47:03], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	119157
Entropy (8bit):	7.846720838898707
Encrypted:	false
SSDEEP:	1536:2TtAfywMFCtAfywM8GHDj95fp2yWvc3GbVNyhBY88zFEFXjTnjFvnZ2:mt2+ct2+8QDpGvbRNyhq885onjFvnQ
MD5:	717801F46F6F895669B408C7A049471A
SHA1:	366B9FB2F5F6E8405AFA4C8C2CA7CC76694DDE5A
SHA-256:	8986E7DD24CC0E9FC0E2C6413A9FE6DA68F6AB1119B9E6DE5ECA10D9B250C579
SHA-512:	0FE5258461A855616566A2B4252AF01A8398E7F20DA63E4FD61D4E8A636FFDF8B4D502F2541DC288E527EB2647EAD015A8554AD05B1E5B61B107EB350002D15C
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436888/image/medium-191cad30617a70265483514051debda9.jpg
Preview:	....A.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 17:47:03.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:06:23 11:50:49.2023:06:23 11:50:49.+10:00..+11:00..+11:00......@B...........i..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14658
Entropy (8bit):	7.951369003952926
Encrypted:	false
SSDEEP:	384:fqNtXfncdUBHiBVvPFUb/BmStqnUECSxXW0Dc8668uafW1:fWfGUBHuPCASUHCEXW/erafM
MD5:	5F5202C92F91F161B784BDA8DA735F9C
SHA1:	2E7E1A871B918C1B569103722D9616EC170CDFD7
SHA-256:	09DCA09F9FB0DB736342700CAC5300233B36D5328DB0C623B37FDE2BEB77AADC
SHA-512:	E7EF0096861BF7DAA8826DD1D0DE56F4F171F5F8A72D062504F7CC71A37E8E093212B0E5C6FFF2B8A6FD912FEF468EE93D8C40CDFE5EDDC3279CE825E29A08CF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i116!3i78!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=6144
Preview:	RIFF:9..WEBPVP8L-9../..?.'.4..$s."........]fo0.$[.... ..H.;7w.'nk.V.g...V(......]f......w.b....e........!o...(~.A.J<....b(P.a..~..E..?...?-.Be..E.(......d...n.I\|..$..Fd....8.a..#Qg...u.Q^.r..Tx.4... I,_..{.9..9V.'54.....8w...[...m...6.`.......68%UI.3.#.$.o...J/eze.m[..3... .....zAj.$.;.B.....U2=+E!.r&.@[>.a.Z.md.B.D.BB..f.\|.IU%2.[.....Q.C...3...)..B............2.......Z......y.Y. ...@.k3>...J,2..q\|t...1........m.b..D...F...TR....V...2....$Ms.xls.uN%([KS..A~N4.R.D......<c4....p......A8.....Z&...5g.(N..@.ip..C._.3..Q..d!QS.H..%..&..."X ...>d...O.i...m..P.l. ..DfM......j....Dlf+..%.#.Rp.....R&@.l..[:.U!..(&............eM=.,N.j-.....0..f.Z.z.(. KRp!.([....0D.i5U.8.. +.W......."G.m...l.^.5.s..4Z...4.,y.`3}-..$..,).@...L...1`..8.......$....q...?..pbn... .".tjY.j...$...U....t.d}K..P..).-.X.<e.l..Z.A.pR....b.k(....y:.........j..kr.kAr......>].j.kc.T. Yk.7h......u".$....D......Z....R..TP...$.....u....2..5y..dJKEDk.x.5.7.H...).....?....X......u.hc.[K'8.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 62624, version 0.0
Category:	downloaded
Size (bytes):	62624
Entropy (8bit):	7.994406897674202
Encrypted:	true
SSDEEP:	1536:Zart7hBPLm9WmnEm3n6f4q9dlQuR41mZk/VgPbqIgKHiSniljfeQTM2mXs28:ZapVBTmznrKf4q9L76weKUl6QTDX
MD5:	412EA768F9356560C12B323907104979
SHA1:	D4CBDA6DA806EEA0DC943FE84DF75CD87237F975
SHA-256:	CE7C6F97FFAD15205ABD9599A824126F9D55E7FB67D7520B3978344AD9208E0D
SHA-512:	45F9AD9DE62885FB62CAF07B4C9F6BD848ED68FA507C2D6D41B6A8E5AEC4B3387B75D1CA12C03F8DC0A59F64460FE21C3F247CD7088E1B9EAB57DB4419D5A6A0
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/GT-Walsheim-Pro-Medium.5cbbabeb76691ce0046c07b2c6665315.woff
Preview:	wOFFOTTO...........4........................CFF .......1..i...GDEF...D.......dz.\|.GPOS...8..*...h.. .GSUB...X...F.......#OS/2.......P...`j.vcmap............/9".head...$...3...6.\|H.hhea...d... ...$....hmtx...X....... %...maxp..............P.name..............post........... ...2..P.....x.c`d```a`8.S~....+.3... .^.....~........230.D.m.. .x....l...w.....j.m..m.m{......m..[.3.N..1_......$;......$~Xo....$.Gd..%.{.G}..}.7+..K..r@{.......8{ m.R.E%.](....#b.I..)o.....?@V)Z.D..]..%]....?.{.u.....5+.'..P.....,...`..H..?..C..;...W...L.c.......=....."......j!G6..\{.L.. ....../.?.o7..q...e.\|....M...(..,g.M.k...0.{.b.~....A.[ 3^..@6{..m.....<.i...r..c..O...{.....s..>.t.9.!/a.....T)4.I,.....T.39EJ.p\|..w.......<...$.z...g..t.Y....v. .C=...\..4..&....%.Dz-...DM..B.....X..F`........J.......N.O.....s/q....]}u..-"..}.q......)....wH...z........k.....B...sv.......,;I.\|$....2..>"5.W.u......80z...sP-...A.C......<.A.^W.n7'u.................h.~Ova__.~#}z.#..

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=3500], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	81674
Entropy (8bit):	7.808191556200882
Encrypted:	false
SSDEEP:	1536:40lhBGi0lhdGY+X2AUG/6a/zkvJUPN4vG51j6S07mw28:xovtQ2Af/lwvQNMG31umh8
MD5:	44FBD9C970D447566B979C96259E6A39
SHA1:	9404B90E62482FEDFE4181384E5E3C6DDC648561
SHA-256:	FA8DF84FBF2D2EFF8FC84034A80091A8D654301542CD80246CDCA62F1DF86A94
SHA-512:	A106CBD6E1E62EC9318D7AED309A99C1C9D379522625ACE261867243ED75D7110E129F20EC8BE2CDA3173BFFF5EABD650A217CAF10502EBCB6D78FFB551BBB65
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 24.7 (20230712.m.2239 0f0768a) (Macintosh).2023:07:19 10:40:59.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................P...........2023:06:23 15:37:00.2023:06:23 15:37:00.+10:00..+11:00..+11:00...w`.@B....".@B..................................f7:.....f7:.............................................ZEISS

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Mar 29 23:33:31 2019, from Unix, original size modulo 2^32 55079
Category:	dropped
Size (bytes):	17889
Entropy (8bit):	7.9880447064853515
Encrypted:	false
SSDEEP:	384:Xst1mYcJCJW0MB5AJXLh+nCig7Q/IYPVXJcd/mQoRC+UwGcj74w2hK:XrTt27+Bq+QGC+UwG8oK
MD5:	B568E7B3C9D94DA6A1D4845B18400F7A
SHA1:	E58022B19F4F38C0721C356057BD2311D08C49D6
SHA-256:	8F1FC46D5DDD2FA579F686AC25BCF5D6348B635127DEBC9A6A7B8643D850A60C
SHA-512:	74874E96D0D6C2D4CB3B3C17D4CFF9FE30C5C73E3E3A37ACDA361D5B27913ECA10E3BD7C250FABFA7387E15AEABAEAC064FA1C850BB91C663CA69D5F0200EC37
Malicious:	false
Reputation:	low
Preview:	....K..\...kw.H.0.....=.#.A.7."..I.....L.d.y....A"..%....U}S..qf.9.]+1R..........7]....\|........q.9N.."..B.WA.G........'>...zA...A.X7lM.M1.......'}......$ID.S....^..........P.uDQ.zP.H..:1.C..C_..../..................D ..Zl.....8..1.v.G.........E.lY...md#Cd....xP~...Y.Q.c..H.?P..[w.&.o.....]/...0.JSo...w....a.A<r KZ..X.8.B...+.z......G...g.G.U......^,...1 ...b?nL..!.......r...?...Y.f ...xH... .y}.-..z..Js.!.8.V.0..`.S.m..0.:........$...36.F0h...:.O..w...<.......;M.w....:.i.s..&@$o...3x...z.&.:...W.7.On...D3.._..%...v..b.....uM.~...5.5.N..H.As1.>!..`......X3/.D.!Bzj.8.n<r.....G....M..e..!).b@7.@/.kx..v..1.eE?zH..<. D.yBK.... ...>%a...w.u....u.....L..R3o...0.....K...._?........-..4`s.. .....x.......&.8.n......\...g.i.,_s...=i5.^x...f......nb.5.~;..L..a....m%P.c+P...1.T..O;...o.!...D1..5.J..M0L$.m.Y.".v_.sH.....-k.3^..&...9H.2.A>.....X..:....h.-.....x........oN...._..?;...O.........^.Ay..._7......Q.........v.{pxT}.h...P.....G

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42115)
Category:	downloaded
Size (bytes):	42171
Entropy (8bit):	5.376566816554321
Encrypted:	false
SSDEEP:	768:Bb8VtMlPHkkuzS7im3xkR8ClhqpSNtdN5hHPo+Q1e/JdSEu:BbqwPHruE3xkKpS1hc1e/JdS5
MD5:	A22B4736FC8E526C6957E5406444C3A9
SHA1:	DBE8131EA00F52D0F85950CE9F32D18D31EE3EBF
SHA-256:	052145F7D2183085AE93AD5E8275889DB8C1109920213ABC19797227BD18DF4C
SHA-512:	DFC35538340329E74691562CC40506A890C06EB6F5000C9BF08DE16586604D896CFBDF39BBDF32DBAAE7CB03E4F53265EB59C0DB4E8648A080664E2A210BB374
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/search.165198b2ae435c33439a.js
Preview:	"use strict";(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[464],{6139:function(e,t,n){var r=n(67294);t.Z=function(){return(0,r.useEffect)((function(){window.scrollTo(0,0);var e=document.querySelector("#site-footer");return e&&(e.style.display="none"),function(){e&&(e.style.display="block")}}),[])}},53941:function(e,t,n){n.r(t),n.d(t,{default:function(){return et}});var r=n(29439),l=n(4942),a=(n(74916),n(64765),n(47941),n(82526),n(57327),n(41539),n(38880),n(54747),n(49337),n(67294)),i=n(5977),o=n(53658),c=n(28721),u=n(63746),s=n(6139),C=function(e){var t=(0,a.useRef)(e);return(0,a.useEffect)((function(){void 0!==e&&(t.current=e)}),[e]),void 0===e?t.current:e},d=n(77220),p=n(63368),m=n(43549),f=n(51844),v=n(71587),g=n(45127),h=n(54615),y=n(33434),E=function(){return a.createElement("svg",{width:"32",height:"32",viewBox:"0 0 32 32",fill:"none",xmlns:"http://www.w3.org/2000/svg"},a.createElement("circle",{cx:"19",cy:"6",r:"5",fill:"#FEC077"}),a.createElement("path",{d:"M

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:31:26], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	147693
Entropy (8bit):	7.655622221754395
Encrypted:	false
SSDEEP:	3072:d+UineSc+UineSoRG+F/rKUHQ3yMzNwdu0Vvqt:QteF/rKUw3yMzudhvqt
MD5:	42DA4EC12531C14EEFE4A60E0E42FBAE
SHA1:	97A5C5FAE6126E5B1AE615CCBCEB934F8F32F075
SHA-256:	B61D43614E01DB2EE0496F3120DAD9C7EAC121A0B98B74EB1958CAF45ADFD794
SHA-512:	4794266D52FE05AA15CF5A02CFD595295C099E2E88C1B387EF1BC4B9BA89AAD74BF864A5FB2D3AEDDD1AE86BCC3540E6591A0521706E3CBFDDE60C0274930BB2
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449390/image/medium-9639d5f65ed498e02e40948fa1207d7c.jpg
Preview:	....D.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:31:26.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:09:22 10:12:03.2023:09:22 10:12:03.+11:00..+11:00..+11:00...~..@B...........S..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=3500], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	81674
Entropy (8bit):	7.808191556200882
Encrypted:	false
SSDEEP:	1536:40lhBGi0lhdGY+X2AUG/6a/zkvJUPN4vG51j6S07mw28:xovtQ2Af/lwvQNMG31umh8
MD5:	44FBD9C970D447566B979C96259E6A39
SHA1:	9404B90E62482FEDFE4181384E5E3C6DDC648561
SHA-256:	FA8DF84FBF2D2EFF8FC84034A80091A8D654301542CD80246CDCA62F1DF86A94
SHA-512:	A106CBD6E1E62EC9318D7AED309A99C1C9D379522625ACE261867243ED75D7110E129F20EC8BE2CDA3173BFFF5EABD650A217CAF10502EBCB6D78FFB551BBB65
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436835/image/medium-a0426dffaf0cd43ff7edf0ee97261ee4.jpg
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 24.7 (20230712.m.2239 0f0768a) (Macintosh).2023:07:19 10:40:59.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................P...........2023:06:23 15:37:00.2023:06:23 15:37:00.+10:00..+11:00..+11:00...w`.@B....".@B..................................f7:.....f7:.............................................ZEISS

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7982), with no line terminators
Category:	downloaded
Size (bytes):	7982
Entropy (8bit):	5.06199732596822
Encrypted:	false
SSDEEP:	96:70n7TK4AGbw5kYxFrQoHE6kB6vQZgT9B8gmJmW8qdGXZm5n8TsmwJ9mpC:70n7p2FrFE6KZOq9UBqEE2NJk
MD5:	73FF05BF7EF520B50549BB6C6D2EE0A9
SHA1:	74212C690F2714CD3E63D42E721FB8FE0AF0840B
SHA-256:	6BA71CBDCEE6199EE698384F8150810EDF71AC8921252C7655E3E63E552A8CAA
SHA-512:	99ED302B6576E12B4693ADFD4015B9BC68C0F00BE41086F829D310E1DB9B1101EC966436618DF29D74CEBBDBA8A2048C830DA2F005CC4EFEA9D9B9BF66B4A488
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/v1/projects/jYfhScQuNyTsDkItrVJy345jDYThvpkz/settings
Preview:	{"integrations":{"Amplitude":{"apiKey":"f34c08f320c77e44f8a5f4b29ab545ba","batchEvents":false,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackNamedPages":true,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"useLogRevenueV2":true,"versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"bundled"},"Hotjar":{"hjPlaceholderPolyfill":true,"hjid":"769445","versionSettings":{"version":"1.4.0","componentTypes":["browser"]},"type":"browser","bundlingStatus":"bundled"},"Intercom":{"activator":"#IntercomDefaultWidget","appId":"ahlg24mu","collectContext":false,"mobileApiKey":"","richLinkProperties":[],"versionSettings":{"version":"3.1.0","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42115)
Category:	dropped
Size (bytes):	42171
Entropy (8bit):	5.376566816554321
Encrypted:	false
SSDEEP:	768:Bb8VtMlPHkkuzS7im3xkR8ClhqpSNtdN5hHPo+Q1e/JdSEu:BbqwPHruE3xkKpS1hc1e/JdS5
MD5:	A22B4736FC8E526C6957E5406444C3A9
SHA1:	DBE8131EA00F52D0F85950CE9F32D18D31EE3EBF
SHA-256:	052145F7D2183085AE93AD5E8275889DB8C1109920213ABC19797227BD18DF4C
SHA-512:	DFC35538340329E74691562CC40506A890C06EB6F5000C9BF08DE16586604D896CFBDF39BBDF32DBAAE7CB03E4F53265EB59C0DB4E8648A080664E2A210BB374
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[464],{6139:function(e,t,n){var r=n(67294);t.Z=function(){return(0,r.useEffect)((function(){window.scrollTo(0,0);var e=document.querySelector("#site-footer");return e&&(e.style.display="none"),function(){e&&(e.style.display="block")}}),[])}},53941:function(e,t,n){n.r(t),n.d(t,{default:function(){return et}});var r=n(29439),l=n(4942),a=(n(74916),n(64765),n(47941),n(82526),n(57327),n(41539),n(38880),n(54747),n(49337),n(67294)),i=n(5977),o=n(53658),c=n(28721),u=n(63746),s=n(6139),C=function(e){var t=(0,a.useRef)(e);return(0,a.useEffect)((function(){void 0!==e&&(t.current=e)}),[e]),void 0===e?t.current:e},d=n(77220),p=n(63368),m=n(43549),f=n(51844),v=n(71587),g=n(45127),h=n(54615),y=n(33434),E=function(){return a.createElement("svg",{width:"32",height:"32",viewBox:"0 0 32 32",fill:"none",xmlns:"http://www.w3.org/2000/svg"},a.createElement("circle",{cx:"19",cy:"6",r:"5",fill:"#FEC077"}),a.createElement("path",{d:"M

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12280)
Category:	dropped
Size (bytes):	393004
Entropy (8bit):	5.671144001429586
Encrypted:	false
SSDEEP:	6144:/2e6Lf63mod3WEIML6WX+pGTRA/LY9Fawb7TAgY1fY/I3dRmDWzhqcGkT12mY0TD:/2e6L3odIMLn2LYXawb7EtwcGkXY0T/L
MD5:	E93415F90E2A54C64EF087ED5DEBA9A6
SHA1:	7ADA839290A29893719091ED9F082183F054FB5B
SHA-256:	E11D9664FBFE672FF1DCF97AEF0ED42075A846749727EA70836196EDDCFCE100
SHA-512:	DD5164144916ACCC269960C2A2142F2225CE3A64DC79015C3C21436DACAAE03673137468EC41ACD75722D322E827C892BA851BF68090D8FBB9E66B6CC4CAC3AC
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en-US\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=989\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6697
Category:	dropped
Size (bytes):	2667
Entropy (8bit):	7.916269174487254
Encrypted:	false
SSDEEP:	48:XWMBiQszIvhzrs7TooRT3ePhx1JkxCLQ+pJ8D++Cca/hcvSXwzFC0GBSfTlb0qSZ:mbxz2FrGoopCJiCPJ87pvSXwEJBslAqc
MD5:	F12EEEBC65F88502799DAF943D9E7C4C
SHA1:	35A4BA518F3417B78B5CFF56C1874F7593A11B61
SHA-256:	9B2BEC97C311E3478AA6E927D876B5958A99DCBC15184C232CE16F8C2716682A
SHA-512:	14CD84637C346638644DA6EDA14C71E1C1C48A01BE33B1574CD0AC95F969DFA328188EE274EB9570097C22B4997BAFC148C31D8C27B8B2B84F75887D081872B5
Malicious:	false
Reputation:	low
Preview:	...........Y.s.:..+.w'.........R..R`.s..nF..D.H...47...O.#v....2..:O...'...x......'....i...+...>}H.Ti.L.L.t0%I..(...-..d{$a.!I).J%i...J.....2.x....1...Q.....d.#..W......$R<,....V.c.....\..^..\|^ZkI.w..8.a..>...DMc.c<U$..S...%..._i5J..k..s.........19>;>99.N.u.E.Q...f...q.....sm..Sj.b.=}2\U.6IS.3.}O...j...+.3.....t.R"..`J...T.`o....sO..g#...h........-.;2K;..[yw.F.`..i..p%U3.-Qd..d.3X.k..z}.3R.......e.d.=K...Be.gi.f.Dp.b...CD+.#.gV..?.T..J$T.k.8[1:.C..6.n.M2.l<Qs.....VL`wB..U....H.)..o%).\......V.Pl.B....w..J]..%".p..5GB...G..5.VA.\|K.(.Y.#...t..c.Vt..IES..:..)_"..t...5:......Jat..].e.a...S.!W+.F8..NH^.Q.z......Me~.9.E...v.....OFD.o..;..X..e.9r..DiK./d.%.6.../..f.u~\|.r.r{.^4.X.7....L7..b..F... ..JR..V.....E..?5.l..[....d?_._..n.w9%..%..{...m...v\.)[_?........n..h.z].5.z...G}c.}.tO...0XNH..D..g...^eS........k..?f:;.tl6.9S.KI1I.#q.i......."$q..G..QSH};.0...~..+.i.5...R.T..p..l_(..l6+K...,U..!.o."...Y...3YJD".M.&?Dv)z.S...DK.E.4.........E..[.9.{...

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=11, description=default], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	84459
Entropy (8bit):	7.802957600010483
Encrypted:	false
SSDEEP:	1536:rFNQaGif+rXanKviDklJRpyo1c3YWYd80n7QQ0UsZZZX:L4anKQ33YWV0n7CX
MD5:	093C0AB343D8D4137E07BA30CC6E8B84
SHA1:	2FE04BB3937DB9098488826AC23E15AD8677074F
SHA-256:	20EEF46F35AE906C0320A87D182A83E83F40B20F0DF26C5C76BEF0DCF888CFF3
SHA-512:	C9B9F049AC7CFC5CAF0FB9968670D49F28D2DB5DB405638965BD95492DD8D6F93E2C9A7FCE003C2C67975B791542FD98AFC3A564B76EE18112F11561D440A78F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................DJI.................................................(...........1...........2...........i...........%...............default.Test_Pro..H.......H.......Capture One 21 Windows..1970:01:01 00:00:00.!.........r...........z..."...........'.......n...........0230................................................................................................................................0100....................l...................................................................................................................................................1...........2...........4...............................2023:09:15 17:41:24.1970:01:01 00:00:00.K.;.@B...T-.@B..........)...d.... ..............42ULJ1P13A0188......................d.......d...-- mm f/--........................S...........p...........E...........................................&.......H....'..................h)...'........................................................(.............

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	320097
Entropy (8bit):	5.616198163723743
Encrypted:	false
SSDEEP:	6144:x4YhGbgBuDogk2639cM8Gp/c2N3tu9BW24nOJ:KYecuDogc3AEU
MD5:	53A6C14ACBEBEFB7B7D2D82C529DC746
SHA1:	379F00FF4B0F9B64BB59A1BA887A576916224C4D
SHA-256:	D7562E70509398C8E8FEC828CD41B85F16A2496FDA0DEA39C6483DBA52952654
SHA-512:	D541581E3C0EAF05E7A41F61AD88FE466ABDB1F50C4CA53B47BF260FA96CF17319B2B2C51BC541B3FF38D096EACA29CF7DFF50190491E4BFAAD805D23ED88273
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	69512
Entropy (8bit):	7.757609715713452
Encrypted:	false
SSDEEP:	1536:7kIc/Gj9EXE7ofEUGiRffj+S42lCDMMHNyNeNesO:kr1ooC4MHVNo
MD5:	EB8F40817DF98017791F8256F0D55D19
SHA1:	9B4C8EC42EED58BC57A02933B4F51E7BB58B0F75
SHA-256:	F1C8B896ADD15B9544BA64C75F1F414417182C30C32A6E7277FF6A938CF955A9
SHA-512:	A0FC51B43E4CA1DA00B11D3FE5D63F0C20FCACE47ABE08D0E0B7BCEE64D21025343AF73C7A751E8F80C9AE7F89594872270A1D92160DF6F4144AB3DA82E48D86
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/444959/image/medium-7c8403a9ab84471b684b701bf9f9916c.jpg
Preview:	......Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......}...0...........2.......}...........0230....................................................................................................................48..........48..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:.......................2023:09:17 09:50:03.2023:09:17 09:50:03....@B...T-.@B..................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........5...........A...........3...........D.......

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18492, version 1.0
Category:	downloaded
Size (bytes):	18492
Entropy (8bit):	7.988005025098439
Encrypted:	false
SSDEEP:	384:jHq3alnVfBJBuMlPGCh9NBRLS64LRb0v5waXf0BFY0/rJ8Zw4bzUQb:jHqKf5JMOPdzNPLS64laxsFY0t8XcM
MD5:	7FDA4C62C1BDEAE7A08E6FD438104BAC
SHA1:	B1F626E78F5F6D7BE993303A49EB81F0FA4CE57C
SHA-256:	4DBD328E347E890A801D51F9A5F8D38A3EFD51EC34C0AA22CC83D0A95D6D9D71
SHA-512:	C4A36A3C1FF23023533DFF103A108844B7CFE4E793ABA0B1B5576431E77DD6E9EDF29FAD68132577AD6AD55CA7A011A38723DA2FA15D9071D2C6BA4E02D1DADC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......H<..........G..............................Z..\|.`..J.X..<.....P..N..Z...x.6.$..0. ..\|. ..:...%l.F.......T.mZ..V.n!.53.l.@..N....CD.!f......I.(;..Cw.2L..@....M....(.H].......1..I&..tE.e....D...}y..6D.h.Z..$y.J.X._....J2 .(.....=M..+Hd.Y.6.f.J.z..:.........#.#...3..;.<..q./.,g.tK.Y.Ne.?......1.b.......S.".~..\|Q.9.1Q.Y.^....MkF......;v..g(.(S...Z.>...l.XW.Z....-Q.h..MR8$..W(..Wh.0....X..;]3...:..\/..L...L.U...6".h?K.....A.....(2z.uRTn...GaJ......+..4..d...I.[!..Ua..x..4.,@..t....3.e..J._'..R.j.p.t...`.4.......aI,.....W..9V..K..c..... g...:.........'..6.O.0+..;Q..&..e..=..sg......Eg.2.R.M..{{w.{{'4.L.O2.L$) ;..`....PeW..O..iS..e..S.l... .....R.R.+.!.uLUE~...C.JN..J.r...@..g..:.\..;..s.n.s........sq4... ;..N.`.H<T.....p.#2.e....H..T...........1....^......L.....R...R.1.!............E..m_Z~....z..L..j....".q~..Pg!X}1.q.!.n......@.d...._5=..x.......[.y.#$Q.d.........j...1n.....&...-(N..P\5<.f.qB..\|.i...q<.'..C.A...\.i.x.9........1.>....

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1738)
Category:	downloaded
Size (bytes):	55620
Entropy (8bit):	5.454703903758312
Encrypted:	false
SSDEEP:	1536:KumfXEy7uUB3MpE2ryZiOfyKjQPntcC3r9hp7rwyMcSc1INksR7JzhI38frawB:KbXEy7rMpVryZ5fyKeJ3r9X7rwyAc1I5
MD5:	DDCDE5548407AEDE3DB92109F726F6EF
SHA1:	25DAEE97AF2B79D105E7B6B867062803FC51C826
SHA-256:	7BED3A8F2C7F58EC5705446B1FF3949E5CF8D4555DF7894904FECA8407F56DA3
SHA-512:	448BD22D95B68334474591925A1EBA135FB8945F02C1EDB5ED4E009B62D2310668BD7C2E164142CA2F88258C0E5D68EA0B2146F60A0ECD3FF6FA120E273EEE4F
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/poly.js
Preview:	google.maps.__gjsload__('poly', function(_){var BQ=function(a,b){return b?_.ts(b,a.map.get("projection")):null},CQ=function(a,b){return b?_.im(b,a.map.get("projection"),!1):null},DQ=function(a){for(a=a.toString(16);a.length<2;)a="0"+a;return a},TZa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)},UZa=function(a){const b=a.length;!b\|\|a[0]==a[b-2]&&a[1]==a[b-1]\|\|(a.push(a[0]),a.push(a[1]))},VZa=function(a,b){for(let d=0,e=a.length;d<e;d+=2){var c=new _.fk(a[d],a[d+1],!0);c=_.ts(c,b);.a[d]=c.Eg;a[d+1]=c.Fg}},EQ=function(a,b,c){const d=a.path;a=a.Zm;const e=[],f=a?[]:null,g=d[0]==d[d.length-2]&&d[1]==d[d.length-1];for(let h=0,k=d.length-2;h<k;h+=2){const m=d[h],p=d[h+1],t=d[h+2],u=d[h+3];let w,x;a&&(w=a[h/2],x=a[h/2+1]);let z,B;switch(b){case 0:z=m>=c;B=t>=c;break;case 1:z=m<=c;B=t<=c;break;case 2:z=p>=c;B=u>=c;break;case 3:z=p<=c,B=u<=c}!h&&z&&(e.push(m,p),a&&f.push(w));if(z!=B){let D;switch(b){case 0:case 1:D=(c-m)/(t-m);e.push

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	139594
Entropy (8bit):	7.964716878355736
Encrypted:	false
SSDEEP:	3072:m+ivwAn+ivwAkm+CDS1ULqFfU0vQxVlxR85aO2hsnNt+ZA1DaYMp:mNlnNlnbgHFfU04LlxRhSNwAIYO
MD5:	637E1AF05C8157C50F3E3EDD13795D77
SHA1:	A59CA7EB8186B78D56E3FE81E32951669586288C
SHA-256:	5CFA015241CD76D087BA5C8511C2BF5B746F4B010DF50E804BD42313EE2B57E5
SHA-512:	A22AD9F3DA091406E3D9D271BA14C407087B302F6064D08A940B06707FC52B2B67849786F13D24F7C6BE664D8B8EAB944E14E2EEA20E664EBC55BDC038F06B97
Malicious:	false
Reputation:	low
Preview:	....N.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................M......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?..P.R..,......B0a...y0....7....Z....}t.0..ra.F.7N.....>...R.G...\|,..@M.'.r".H4.....+.K..D....~@......C..L-.....]F.V.`B

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10441
Category:	downloaded
Size (bytes):	3273
Entropy (8bit):	7.942037964167872
Encrypted:	false
SSDEEP:	48:XJzGjwOjux3QinW+uVDybhMwUqP+vbxSLE6OqNcqC7hzabOaYCUSH/8O+6I5QjQq:ZzGj56S7M/X2bt4dQCLNnHP+B6Q6vd
MD5:	A7CD49C834A0851140E3304C91CB34D0
SHA1:	34B9C9ECDF7B3DF39B09113B2CC4F624C8259BB5
SHA-256:	34334F5D769AB461D59BD77FF08998C66083E289E6ECE6D3932DEB594AE9F9FA
SHA-512:	B4078410098C3F28C173D130E6FE4A3BB30CFDF9EECD7CCDC667C9F3E270C724879C048D4CA0E891000ED4745E721C0667959597368D3A2005DF335F50682200
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/facebook-pixel/2.11.5/facebook-pixel.dynamic.js.gz
Preview:	...........Z{o.7....B...].]...e..N..!i.s......$&+rCr.(.~..!.)....w.....p8...8..L]O.,h..J....y.....l......./5.BIsz.\..j..jL.;c..9..{...o.7..~..`6.>.....k.yQ..y..`;...Z..AA...V.`.4.x.....Z.).^Q=......hFr.9...~...KF$K...{d..]M._F41S6#...xj.\+..&..W..V9.v..4.BMh4..)...Y..f.b.&.........!.yt'.9..2.S1Kr..9..pX..&Y-i..f%.6..hR)L9.b...&T$.. ..lT..F3.X..>R5O..oze..vFDr2...M.#Y...C.<.S3..N.DOs.A..gQ)..b.g"...+r......F.r.....n..mIt..v4..D.4.S.L...H.U......L...l..l\|rF...,k.p..T,.D..LAUq..m.J...Nh.&`F1...DF[.+,F.].../....:.-..k:..../...2...oPH?..'...Z..6..C..[ua...7t9..4.!-....>.^Vd<(#r.......v2........-.l-."...w.O.......H.5......L. ...p....P.Y.!;PX(o.]..Zh..`_.~..V...d.^Z%....S..N.?A...b;FT.s@&'..j.}.u${[.<m....-.5\.J.r\|...`.....}bq:..%.... .<...x.x...<.....%.KI.....w"B...5....L4.......8p....Ei..)`...4...."..0.N......U..n...._.....E../.........S5.@9.<....O.7.....G.l.....sj`%%.ZIP.............h..o..8'...?....<_......$(.,.x.V@9.r1..cS.......... ..p.b

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52589), with NEL line terminators
Category:	dropped
Size (bytes):	178085
Entropy (8bit):	5.412344152100599
Encrypted:	false
SSDEEP:	1536:4QMXLyx6RYxiRSbgL4O+2bLoIiOLSQ910f6HxpXQnaRbDfp9g0oOV92TShtRUVs6:4SIlRSbgzZAK+sJMbz6y9GiZSKpge
MD5:	D486CE47BA01B791B3F47D76C2F600AE
SHA1:	25D26E1D1F5888E2414851E72660A85B82B820C8
SHA-256:	409A584C40ABAEDCF855D5BCBC1DBDC6A1AD04B45517AD359F883E2B46FE2039
SHA-512:	26408A30AEA8417D66ADAF166CB1ABFE1204E1E5F3AE2E9F7D19EDF7E7AFBEE88AC9FCC4E2B08079AFDAF71EA89E1A0997F8DE6F09267064E684FC947A9D0B16
Malicious:	false
Reputation:	low
Preview:	!function(){var t={9662:function(t,r,e){var n=e(7854),o=e(614),i=e(6330),a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},9483:function(t,r,e){var n=e(7854),o=e(4411),i=e(6330),a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a constructor")}},6077:function(t,r,e){var n=e(7854),o=e(614),i=n.String,a=n.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1223:function(t,r,e){var n=e(5112),o=e(30),i=e(3070),a=n("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},1530:function(t,r,e){"use strict";var n=e(8710).charAt;t.exports=function(t,r,e){return r+(e?n(t,r).length:1)}},5787:function(t,r,e){var n=e(7854),o=e(7976),i=n.TypeError;t.exports=function(t,r){if(o(r,t))return t;throw i("Incorrect invocation")}},9670:function(t,r,e){var n=e(7854),o=e(111),i=n.String,a=n.TypeError;t.exports=function(

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (49781)
Category:	downloaded
Size (bytes):	295578
Entropy (8bit):	5.132970654466502
Encrypted:	false
SSDEEP:	1536:sMjw/ZBKKNaH91ONZhjkbryhBHOQNk6hNO64WvBJ9IwULN1IflrniSUf2l7f9vXU:Gjy0HOQNk6hNO6RBnIwULoFiS22l7pk
MD5:	CE7FC2E150F02AB134875232A61F663D
SHA1:	1091B26898D344DD150ADCE8C32833F864F08154
SHA-256:	984610F7BA08F8815AC9196F98295499CBA6C6770FA399B0701ED577C46426C5
SHA-512:	A70E075A06E80BEFFF7E75DF87D55B5ABC3863DA89A73E1F73DD8825A3ECB68D982D743E2DE689D2824A826B91AA0571FCC5DCAE507E245B9DE2B2ABE64B8CC8
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/application-c3a9a0b098bce4bc114461119e1b77e76053f87e2d05409ee1f3a82fbce299fa.css
Preview:	.@font-face{font-family:'GT Walsheim Pro';src:local("."),url(/assets/fonts/GT-Walsheim-Pro-Light-39fce1902fa730bf56a53c648bec8185b90690516b06811bb2360c62d185b548.woff) format("woff"),url(/assets/fonts/GT-Walsheim-Pro-Light-015f364b5ea0edb9ea63abbef21c91ef301a3e3db24d6208c98d6a38cc40267b.ttf) format("truetype");font-weight:300;font-style:normal;font-display:swap}@font-face{font-family:'GT Walsheim Pro';src:local("."),url(/assets/fonts/GT-Walsheim-Pro-Light-Oblique-0b5f235d5b6978650422518919c132b87822df6f61d3e7ced7ab84f74928b48f.woff) format("woff"),url(/assets/fonts/GT-Walsheim-Pro-Light-Oblique-7569e6fcb9351744a6ec21e303cb2cad903dd08f56df0a1f5f2d46690192def0.ttf) format("truetype");font-weight:300;font-style:italic;font-display:swap}@font-face{font-family:'GT Walsheim Pro';src:local("."),url(/assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff) format("woff"),url(/assets/fonts/GT-Walsheim-Pro-Regular-752e139e66e43aa5aa5c2b9

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3861)
Category:	dropped
Size (bytes):	30391
Entropy (8bit):	5.561427614047877
Encrypted:	false
SSDEEP:	768:MQ8UyQ6O03LPWmGQkYglgbYgAiTdDWF9vbSbAOvjpqmevP54fQ1URVhJFWIENnM7:MwqhKz0evhmUZylmZW
MD5:	92A49B1E55FD68B539DB8C5273EF210A
SHA1:	2190F9E644A3BEEBC046BED0F926826E89AA5046
SHA-256:	759386A83F95F27E04FB38FBE189AD00BDDBC601523745311D13D246446B9D47
SHA-512:	CE79F45B09EC195A98CD62C7FB22B1528D1BDB0E197C73C41D56135A0DFD76FCAE5DBEBED77C6A81D81BD2A796AD5752C7C992C59833F14968C6E52C077196DB
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('onion', function(_){var eYa,fYa,cQ,fQ,eQ,iYa,jYa,kYa,hYa,lYa,hQ,mYa,nYa,oYa,rYa,tYa,uYa,wYa,xYa,AYa,CYa,EYa,GYa,IYa,JYa,HYa,mQ,nQ,lQ,oQ,OYa,PYa,QYa,RYa,TYa,SYa,pQ,aZa,$Ya,sQ,fZa,gZa,hZa,eZa,iZa,kZa,uQ,oZa,pZa,qZa,jZa,lZa,mZa,rZa,sZa,tQ,BZa,CZa,FZa,EZa;eYa=function(a,b){_.Yg(a.Gg,1,b)};fYa=function(a,b){_.Yg(a.Gg,2,b)};cQ=function(){gYa\|\|(gYa=[_.O,_.N,_.Q])};fQ=function(a){_.EG.call(this,a,dQ);eQ(a)};.eQ=function(a){_.WF(a,dQ)\|\|(_.VF(a,dQ,{entity:0,mn:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],hYa()),_.WF(a,"t-ZGhYQtxECIs")\|\|_.VF(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};iYa=function(a){return a.sj};jYa=function(a){return a.zl};kYa=function(){return _.uF("t-ZGhYQtxECIs",{})};.hYa=function(){return[["$t","t-t0weeym2tCw","$a",[7,,,,,"transit-container"]],["display",function(a){return!_.xF(a.en

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2242)
Category:	dropped
Size (bytes):	80505
Entropy (8bit):	5.469154106732599
Encrypted:	false
SSDEEP:	1536:O/WP4iERTPGRjGd0FU6b4EEtKykfLPmpuZCmsr1jzmGGz/X40kk4BPXUub7EJt:0Wgi4PajGd0FU6b4jKykz+usmsr1jzIX
MD5:	41039E33B02C8A2C2518E4A5729873BA
SHA1:	E58E51EAF60767EB8AA6886F447F6E8D21E048E7
SHA-256:	6709B08448650F2444E9A96D782E86D51DD781F815FF978B0D52920536A8BC2F
SHA-512:	07545CECB287C29B5923E6FBFC07D722406D8167DF4B38D8D3A5AC8CF82D059F6A4F79C0B784C0E3E88D80D03377BB80EC5F7128AEF3C53F130C2C18EF562074
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('map', function(_){var zta=function(a){try{return _.ra.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},Ata=function(){var a=_.Yq();return _.Ci(a.Gg,18)},Bta=function(){var a=._.Yq();return _.H(a.Gg,17)},Cta=function(a,b){return a.Eg?new _.wm(b.Eg,b.Fg):_.xm(a,_.fr(_.gr(a,b)))},Dta=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Eta=function(a){return new Promise((b,c)=>{window.requestAnimationFrame(()=>{try{a?_.fn(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attem

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15942
Category:	dropped
Size (bytes):	4743
Entropy (8bit):	7.949959131960823
Encrypted:	false
SSDEEP:	96:5rk2n5vDZODWx7VwegK1sURWyRr+iie1VjiJ7zSIwWpYsdhMobUn:G2pDVx7Vbl1sURhhie1ANNisdGAk
MD5:	6A3ED21F9B6777C0C37E6E248EA22387
SHA1:	3BC32DC9AFFC61AA325B418166CF18E7C275B0E8
SHA-256:	4ADDCD9471A0DC0B228983E72308047F37BDFDD04CE20A9B97F43DE101AFC334
SHA-512:	5EE0DCD9A594DE8E9B1DA6366811CCE4AA83C27EA09AD80C188C203B5C3FA7BA0F65656937B6421C13E1F7BA6A054C4585E0FDB9A85EB8765F792DEC38F33E76
Malicious:	false
Reputation:	low
Preview:	...........[.o.9.......h..N.....J...$..n...y\|...f.2.V..d..Y......aK.v.8 ...&...U...Y.....Z..{..tc$.D..[N.d....U..T.>..0.8.j..j.~<M~...?.J.&..?.=........o.KDai_..G.a4....E6....ig.".%mf...OLh.......0.Y.,..?.K....KR......\|..Td+s=/.<...rI._~...y..2.\..L...>......iX..M..-..u...:..\|,"X.'s\G6..DG...$...XdK...R...v5_.+....W&..h^.L...,..M(I...`..v.k..pF...3.dM...^E..,IF.N...s.L..8..1..._.O.(-..x....h.AI.:O%....{r..AY.b...v............dG$.J.b..)...V.U..../.....b...3C...).:g..]....,.U=.(...Nq.M..k..9.1..O.!.g..b..Vg..+...D.{..kQ..T..J...E;.Wt.7(37;..(....\|./U:....Q.M!..l5.>...X....b..SI..`...&...BW..iG'n...}{(.S...G+...mj...s..+...~....t....K.$w...x!..aV.i..a.zh.......}..]...S. m..2YD..@=...4..H.].'D...l.]..j.}.y.u..i.......5T.j..Hg#...C........T..248.i.4.,.9u67...9.7.../2.....=h.Z.0...$....]...'<..88._O..%.%N.../.0..S.5s."....T6..w........<t..s..Uap.........F.Z.&O..0,.!_((s,...y.e...O......?...(.....?.5.\|p......?.(..V.....r...(.XN...?.\|......

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.383594884337988
Encrypted:	false
SSDEEP:	3:qGGAW6yIA6qENKAQpnDTLTrAWRgn:kAYIZYpDHTRg
MD5:	2ECE426E3900FA6EBAD39380AEAA2539
SHA1:	24C4E875361BC77874B005F816D160223DC68B46
SHA-256:	E4CE65C3A33FDF0AD73B34857BFF62AF3A6187509551AFBFECBA345FEA02BF55
SHA-512:	66A11A88F239BC8AD325671B2EADDFE0F88CC1EFDD4FA08E83D2FCA2E615DB4A101B935AD89F274B606F0C6DFF41BE575708268E8FB34F897EC28F7D8024BC65
Malicious:	false
Reputation:	low
Preview:	{. "success": false,. "message": "malformed JSON",. "code": "invalid_request".}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 17:20:06], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	59397
Entropy (8bit):	7.927744388585157
Encrypted:	false
SSDEEP:	1536:jK5yh8uL5yh8u9GVwvjIZk44L7CLaFzKE0:m0xL0x9Nsa44L7iaF+1
MD5:	8212F217DEB6A051563609C3C04B816F
SHA1:	6D8D2693294D2F40AE5432901C194AE56FFCDAED
SHA-256:	49F14CECD734B024A441F30C9052E6AE1D54157B6F6D80A289AC8BC8F8E3D50F
SHA-512:	CCB2A3E8570D8E171172C2922DBD9FA07DED2BDA959927CB65467FC55204145A773A6D2BD8A6FC0D5A1A7D254C30CEBC5FFAC9FBBD0F33B34581402F0557E851
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436865/image/medium-af6bbfbe648ff9cdf659cc9a744c0284.jpg
Preview:	....+.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 17:20:06.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...................@...#.......2023:06:23 12:03:51.2023:06:23 12:03:51.+10:00..+11:00..+11:00......@B...........e..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12536
Entropy (8bit):	7.9818200437284075
Encrypted:	false
SSDEEP:	192:Jhyqvj0Hrr8505bFim1wJa7caH8aMw5iNHABbterDPetfnZGKvfx4UV2djnusjnj:JhyqQw05YU9caLtBbtMmzvfnV2dFpZY6
MD5:	10D1CDE48F909AF88DEA66A7A7D61BE9
SHA1:	79F3FB231729D0DA4D0DA4B78AE1CA617306A4F3
SHA-256:	379451A3B73A1673C5D37B0587E476253A78A05EDFCF842FF59B89BC9B7596AD
SHA-512:	C04927749D2D04788555C1944D5C8CD472816E69EBA26F4AF68EF4492B335692C2BEB072D0B66332C917FF6EEBB83BA693283C805DF3EF020FBB0496C3C293BE
Malicious:	false
Reputation:	low
Preview:	RIFF.0..WEBPVP8L.0../..?.'.:.d%.wO........m.l#.V....."...K ..wy.6..'....C..B..@....D.k@..........?p.(.E.@...........H1.%..W....0].3..0.........9._....0.R..S)C.....y..ziq..a...1....u...}...r.....<vE..i.)u.(.....m..D....Q..HDE.....,Kku......2..s&.......;.$+j.g.c...q..].zJ..A...Z....s.o..w.XWu=...\)...e......J.......G.&.z..P3J.D..pQ...2.s..u..A...I.s....q.<..j.mo\|z.r..&.\.CT2.(...I.E b.=....M....pz...].n.n...s."...T.J}...;.b:.s7.!.h...J<d..).j's.)..... .-...i.n.(..Z.%../...........6.d...o...a......2gJd....Z.k2x.\|..vyw....2.x0...$i...e...4.&..`N..E..^0..(...T..*.+Z.1Q4.P-E...@YL.....t".............`vVG..k..:.S(&.._9<.rT..Uq.uj..w.u......m.(..N...C].)...._....>'.:k.......a.f8...8..........R...}..C.qW.A.Vg2..-.e.....5.\>......^....z]GB..T...;.?T.Tq.+....v.!.4a...}.a......@.UF@.-..P....aPr.........&%0wC......y.Cv.\|.7...~W....\|e...y.C.`..Bc$.....U.kl..`..h.....R..U.....dff0).....-.;..3...U.............H.....'...;.$..G....2.T...w

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3861)
Category:	downloaded
Size (bytes):	30391
Entropy (8bit):	5.561427614047877
Encrypted:	false
SSDEEP:	768:MQ8UyQ6O03LPWmGQkYglgbYgAiTdDWF9vbSbAOvjpqmevP54fQ1URVhJFWIENnM7:MwqhKz0evhmUZylmZW
MD5:	92A49B1E55FD68B539DB8C5273EF210A
SHA1:	2190F9E644A3BEEBC046BED0F926826E89AA5046
SHA-256:	759386A83F95F27E04FB38FBE189AD00BDDBC601523745311D13D246446B9D47
SHA-512:	CE79F45B09EC195A98CD62C7FB22B1528D1BDB0E197C73C41D56135A0DFD76FCAE5DBEBED77C6A81D81BD2A796AD5752C7C992C59833F14968C6E52C077196DB
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var eYa,fYa,cQ,fQ,eQ,iYa,jYa,kYa,hYa,lYa,hQ,mYa,nYa,oYa,rYa,tYa,uYa,wYa,xYa,AYa,CYa,EYa,GYa,IYa,JYa,HYa,mQ,nQ,lQ,oQ,OYa,PYa,QYa,RYa,TYa,SYa,pQ,aZa,$Ya,sQ,fZa,gZa,hZa,eZa,iZa,kZa,uQ,oZa,pZa,qZa,jZa,lZa,mZa,rZa,sZa,tQ,BZa,CZa,FZa,EZa;eYa=function(a,b){_.Yg(a.Gg,1,b)};fYa=function(a,b){_.Yg(a.Gg,2,b)};cQ=function(){gYa\|\|(gYa=[_.O,_.N,_.Q])};fQ=function(a){_.EG.call(this,a,dQ);eQ(a)};.eQ=function(a){_.WF(a,dQ)\|\|(_.VF(a,dQ,{entity:0,mn:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],hYa()),_.WF(a,"t-ZGhYQtxECIs")\|\|_.VF(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};iYa=function(a){return a.sj};jYa=function(a){return a.zl};kYa=function(){return _.uF("t-ZGhYQtxECIs",{})};.hYa=function(){return[["$t","t-t0weeym2tCw","$a",[7,,,,,"transit-container"]],["display",function(a){return!_.xF(a.en

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1246)
Category:	dropped
Size (bytes):	3490
Entropy (8bit):	5.384278352974127
Encrypted:	false
SSDEEP:	96:rGLx6tdpBneWBWTz1hAxBUUvz6S8TIYb9VH6n:cx6tdGB3TYL6/TlW
MD5:	BDDE56E47E5547D7D6F017D57D7E53DA
SHA1:	29815B3C01E9CCA53EA5FBBBCBD5C5289A05CDE2
SHA-256:	AB026C66559122A7442E73781C124E1E6DC2D6F3B82C699C44B6BC4FE8B7DB65
SHA-512:	89FC21F0C590F7E1F36E9A7788DB941E74297300AEA85200F70B1BFA119F72B6E1B779E81B8C961122FD83769440A5AFB84CC9FA628A83A17910686885FC350C
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('overlay', function(_){var Owa=function(){},JB=function(a){a.dB=a.dB\|\|new Owa;return a.dB},Pwa=function(a){this.Eg=new _.Nm(()=>{const b=a.dB;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Rwa=function(a,b){const c=JB(a);let d=c.Fg;d\|\|(d=c.Fg=new Pwa(a));_.Kb(c.Eg\|\|[],_.vk);var e=c.Ig=c.Ig\|\|new _.Ypa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Qwa(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.Om(d.Eg);c.Eg=[_.tk(a,"panes_changed",e),_.tk(f,"zoom_changed",e),_.tk(f,"offset_changed",e),_.tk(b,"projection_changed",e),_.tk(f,"projectioncenterq_changed",e)];_.Om(d.Eg);b instanceof _.Xk?(_.ql(b,"Ox"),_.M(b,148440)):b

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16744
Entropy (8bit):	7.981745724606971
Encrypted:	false
SSDEEP:	384:77w1W5F5iewNXVB8UCPtRZ3fyxL43L/5Sm2/mZhNn:7c85F5gEa5kLxSLefNn
MD5:	5A253D0B7124F01DC80C1E18FC069B08
SHA1:	7BDB2C82EB82F624B6BC56B28A86C6E971903813
SHA-256:	7236924D8B71717F4118D59D51373610EB0785DCD3EB74E41F43162D2C77135E
SHA-512:	D5C97AF240F53E20E7420A1EBC8C95CE181C170B2BBCB7CE2154F6FDBD0FECD6849D5B4550A896A0DDBB800929F253593624ED48460483362C800C540936DA63
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i116!3i80!4i256!2m3!1e0!2sm!3i711462225!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=1385
Preview:	RIFF`A..WEBPVP8LSA../..?.....$I.w.L.z,CG.n.5....]......!..@J.....$.6.s.m........`.qSd......w..bW...l...:....EYpQG ."'...G(........)...R......hR,...\...+Lw.;...tx.W......?.....O....A!.....y....1'd.oT..G......>...4.f.nO..l.^...Z..IEY..{.:.}zj>.......Y.>...aT.'.o..Il..."" ..JB. ...\|.E.M-dZ.Ze.u..........>_gD..H..E. ...1.~.a..j-R -..H=...x.z.i.\[D..cfr?...4.][..'j._=...H?T..XC..?.<.8...b..B.s?...kQq#.....u?.5I.1I...:=y8.l..&.<p..G..#..T#.........".S.q:I...[,r!...........R.H....vE8.?b.Wm..@.ql..\/......y/...4...,...........YBM.C..E.P.RO.wG.PDV....7.~.Lm...C.G..bC.2...w..i.3Z.l..Q!.x..8R......i.....Yt.n..\.r.V...p..."...(...h......uX...-.S&..EG5..........Y.I..!M.\..H..EE....O z...(p...3.....<Z..v!v....)]x.\.......62.3>...B..1....-..l.O.@.D..f..Eb....7..X.......HF....?...<...<.4i)._`...h.s.c...7.B`.H)....12F=.>..N..M\.ES...7..Z.b..B...wuQ.......ai.....?..G.Ng....]^.$.......`.^A..GQ...G.r.........QN...I...y.-...........o~...z/.K..'.\|

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.379664004902596
Encrypted:	false
SSDEEP:	3:Ul/ygn1ZrFIWz7an:UAi1Zlin
MD5:	E28B0610EECFC83EDB5DF4373B7E3AEA
SHA1:	E6FBF0BD786E3585FF5EDE4BA8CE574EC58A02E8
SHA-256:	72011C98E109178D38B70BFC4F548E18FFCA52C411E8797C768BD6967FD7F782
SHA-512:	24218D0AE13A0122D62C2C1C76330635CF07882FEA3CB5985BC2E79613CFDBF6B5DA8A9791FEDE79EE9E78D688C2B10D1FD6EDE6C09B5775987316D12AAB8CA6
Malicious:	false
Reputation:	low
Preview:	RIFF$...WEBPVP8L..../..?..P..U....E...".....

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	72765
Entropy (8bit):	7.771485016441706
Encrypted:	false
SSDEEP:	1536:/pP8ofvPUSGy0Kd3nMX7fitwg0WxVGiAO5JIZmp0A+DWs:REUvsSGQd3nM7itwnWxkiH5iJCs
MD5:	B1BEE232465DCE5C946CCD46F5DE8DF9
SHA1:	2EF30097875DC960588207C954633B7D002356A1
SHA-256:	0A8036BA504CDC51FF2615F3E2E0294F1AB1210BC5DF5B8F7CE11F4A0453ABAC
SHA-512:	7C69309D7D07128A96C186FEC478D3B768ED9E3D0DF8410EA46F42FE9BFEEB44445A34B6B3CB51FF21CA52C123F2A2D149765F13D047ACBD019FB4E536BF690C
Malicious:	false
Reputation:	low
Preview:	.....^Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................78..........78..........0100................................................................................................................................................1...........2...........4......."...5.......:.......................2023:09:16 17:26:28.2023:09:16 17:26:28....@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........8...........A...........3...........D.......

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:01:14], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	140670
Entropy (8bit):	7.8762669862347305
Encrypted:	false
SSDEEP:	3072:Eot+LCwyUVl32gNHfIE1bOMo4qhzacqDq8QwjOFJjRWgNs:8+wyUVzVxir4qhzafq/u6j2
MD5:	C8D150F268C091A37CDD3A76FAD8489F
SHA1:	772E75F3212487FA601AE4089CF33D1FF5063C6B
SHA-256:	1DBD79ACF3DB5C36D6D7B7566ED69259429ED75D4F76500635132AA3A0630A17
SHA-512:	9822B5A111C5D60ACB5A6D631D727552F15B39B52F57BEE296624DFD204168EF1B5AB04E2A8F303574D71D788CD52163E5BFEA1E6AEE58A0B90CF51DE7A23114
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..085855..>..20190322..?..085855.8BIM.%......j.Xy..H1....$. .....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:01:14...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................08..........08..................................................................................................1...........2...........4...........5...............................2019:03:22 08:58:55.2019:03:22 08:58:55.....@B..................................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47
Entropy (8bit):	3.9102439045469075
Encrypted:	false
SSDEEP:	3:4sNdh4HHXXgAZdTS4:4sN/KAgu4
MD5:	3BF65A4609AC928700028EF0ECFF177E
SHA1:	F69325818002090E23BDFBF77D16DE537A788233
SHA-256:	A260F3B020F77DB474BC285869E02A6A76943210368D4886A394F8B7C1F840F4
SHA-512:	C45F05B8CB79F5363EFA606121485E4D7631AD65640F73B64CB4824D82F2E5D9559C991D1465486C6EF63BFE28EFB673242786FB904213D6BE24A764386EEFA4
Malicious:	false
Reputation:	low
Preview:	["personalised_search","referrals","ripavideo"]

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15942
Category:	downloaded
Size (bytes):	4743
Entropy (8bit):	7.949959131960823
Encrypted:	false
SSDEEP:	96:5rk2n5vDZODWx7VwegK1sURWyRr+iie1VjiJ7zSIwWpYsdhMobUn:G2pDVx7Vbl1sURhhie1ANNisdGAk
MD5:	6A3ED21F9B6777C0C37E6E248EA22387
SHA1:	3BC32DC9AFFC61AA325B418166CF18E7C275B0E8
SHA-256:	4ADDCD9471A0DC0B228983E72308047F37BDFDD04CE20A9B97F43DE101AFC334
SHA-512:	5EE0DCD9A594DE8E9B1DA6366811CCE4AA83C27EA09AD80C188C203B5C3FA7BA0F65656937B6421C13E1F7BA6A054C4585E0FDB9A85EB8765F792DEC38F33E76
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz
Preview:	...........[.o.9.......h..N.....J...$..n...y\|...f.2.V..d..Y......aK.v.8 ...&...U...Y.....Z..{..tc$.D..[N.d....U..T.>..0.8.j..j.~<M~...?.J.&..?.=........o.KDai_..G.a4....E6....ig.".%mf...OLh.......0.Y.,..?.K....KR......\|..Td+s=/.<...rI._~...y..2.\..L...>......iX..M..-..u...:..\|,"X.'s\G6..DG...$...XdK...R...v5_.+....W&..h^.L...,..M(I...`..v.k..pF...3.dM...^E..,IF.N...s.L..8..1..._.O.(-..x....h.AI.:O%....{r..AY.b...v............dG$.J.b..)...V.U..../.....b...3C...).:g..]....,.U=.(...Nq.M..k..9.1..O.!.g..b..Vg..+...D.{..kQ..T..J...E;.Wt.7(37;..(....\|./U:....Q.M!..l5.>...X....b..SI..`...&...BW..iG'n...}{(.S...G+...mj...s..+...~....t....K.$w...x!..aV.i..a.zh.......}..]...S. m..2YD..@=...4..H.].'D...l.]..j.}.y.u..i.......5T.j..Hg#...C........T..248.i.4.,.9u67...9.7.../2.....=h.Z.0...$....]...'<..88._O..%.%N.../.0..S.5s."....T6..w........<t..s..Uap.........F.Z.&O..0,.!_((s,...y.e...O......?...(.....?.5.\|p......?.(..V.....r...(.XN...?.\|......

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.942373347667344
Encrypted:	false
SSDEEP:	3:qTkIDZxVsJYkup3XyHFeTrAyTKTWKMrBKblbJ4ZNDpVbz2USrGXI9kBbZ6iF4:qTjxVgYkYv3J/14QpcUAVuB965
MD5:	3437AADDCDF6922D623E172C2D6F9278
SHA1:	F69066CF20141AC93418102D3EEE7C0225B8A623
SHA-256:	35DCC382EB69D00369D708708CDC545F3968B68FA5BBE3E728D11FEDD04F93BB
SHA-512:	2DAE5C5C30C6A0E763D8128F2CE1D467EAD432E582AB4EBB68E23991DB08F57490ABC0EED805FD33FAB5503C1737D9D47D4CC1090AE15D7391593FBB295D66E7
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 21:49:20], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	80614
Entropy (8bit):	7.698000163252409
Encrypted:	false
SSDEEP:	1536:7zKGZQYkqqrkBuw9xKGZQYkqqryGyAztI+GeBJi4RZOPCOSrrA:vKtYECKtYEywGeBRRm
MD5:	5655D4E30F3227837C482F5D6E648FD8
SHA1:	26BC949724D70759DC72F294E5709890BE77D590
SHA-256:	B5FD7CA6B683A3AE213C82A7C585EB5CF9504C278B3E03F80913D92E4F4759D5
SHA-512:	B4F9915457224BAADB4D9D8F9D1766310B3162B6246C914557D51591603F45C26D379FECE67CCD41812CA3D54209C9E516FD86A32D0633F62BFDB84D623ED99F
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/1763/promo_image/medium-99071db021f7644ac5966c3500b6bc32.jpg
Preview:	....4.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 21:49:20.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...............................2023:06:23 17:11:35.2023:06:23 17:11:35.+10:00..+11:00..+11:00....A.@B...T-.@B..................................f7:.....f7:.............................................SAMYANG AF 14mm F2.8........................................(...................

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:39:32], baseline, precision 8, 1300x651, components 3
Category:	downloaded
Size (bytes):	326984
Entropy (8bit):	7.942522393783743
Encrypted:	false
SSDEEP:	6144:o1P140WiVi8mlLDgwGXve9bDGRYLEOzpASg8c6lRi:ji08mlHgw0ve9+POqXmRi
MD5:	C70F6E06B2397048EBBF029F6EB2D5E7
SHA1:	055C482C05A9ED7F187A72F3FDB8EAF56CCD1996
SHA-256:	E740BB0FE29569C91CA659B795F205F8253E7B46ECB1D3EF96D09EF82DDDE3E5
SHA-512:	D9BD621286A06FE3B0BA44947A22D17A19BB4048AD03BD592EF1A092BFD15DAE24AA5F5C1D938911DE57BE7005F16264CCF9B6D13DC8BDBA2A0E420BBB107DD4
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/420570/image/hero-8d27dc9e6aaf5f3808809c4dfc0889d2.jpg
Preview:	....OQExif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:39:32.DANIELLE NIEUWENDYK...........<...........D..."...........'.......d...........0231........L...........`...........t...........\|.......................................................................21..........21..........0100............................................................................................................................................2023:03:08 12:59:06.2023:03:08 12:59:06....@B...T-.@B............................}......_S...........................................(...............................?L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:39:32], baseline, precision 8, 1298x866, components 3
Category:	dropped
Size (bytes):	428141
Entropy (8bit):	7.953858010541414
Encrypted:	false
SSDEEP:	6144:k1P14TL0szE40bw3YKl1rkgtcuox85f8ou6v45W0wWURhfG7JRie6xrn:rw9MoKoxuox85f8qE2xRh+Taxrn
MD5:	6EB0D805DF85E40E424E1DF9F5844D06
SHA1:	544E8AB2C291A024CC5B5B38870FF21836D483F6
SHA-256:	7555E1057526724E7DF791C811789F893D77D000FBB3D7CE7476EF041AEE595E
SHA-512:	F869F4E7781189E186668CF7198C79363FD22EF0AD547C53F41007C2B9F8FA0123E9472E8C46AEB9E67161CD8F2D067B6D91F82152AC598160B0E0BD08B314A0
Malicious:	false
Reputation:	low
Preview:	....OQExif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:39:32.DANIELLE NIEUWENDYK...........<...........D..."...........'.......d...........0231........L...........`...........t...........\|.......................................................................21..........21..........0100................................b...........................................................................................................2023:03:08 12:59:06.2023:03:08 12:59:06....@B...T-.@B............................}......_S...........................................(...............................?L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 15:29:59], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	96144
Entropy (8bit):	7.737097755566131
Encrypted:	false
SSDEEP:	1536:WlC+fLR2Oh4EkvaC+fLR2Oh4EkAGBh26Ywocs4I+NjzF0CEnSZvjAuwv3n56PjLr:UCgR204EJCgR204ERS6cQqj/aSlnm3QT
MD5:	795835E6DB92368143C782DFDD2C4F0B
SHA1:	F2A2C3C791FE64678129CC4D72B2AB40E9358906
SHA-256:	93A69E22A09024D89D339E4F111C12D3FF35903C72D3B6F2E52EA8AD3C042631
SHA-512:	74F78AC66684A306C11EA8BC0D27E37F0D66248879E9BB78BA7D36BAE1C15A888EFAC74E9A1F7A3006A065EB0EDBDF980A3E028CC24DC12775A69B927849524A
Malicious:	false
Reputation:	low
Preview:	....4.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 15:29:59.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4................... ...........2023:06:23 13:17:26.2023:06:23 13:17:26.+10:00..+11:00..+11:00..P'..@B....F.@B...T..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	5.120755987626891
Encrypted:	false
SSDEEP:	48:iKQKFYYCvoDlgVDyNQ2glkMBaqNTYEZqNF5XmbxDy:jJmYoyGPlkMBa+TrZqp2y
MD5:	3867B2388B619FF7FDDC29EF359FC9AA
SHA1:	511BED0C4D3D57AB4CF1B1D7596FB845ECFBA6AC
SHA-256:	31892C21AE4FB908A875BBE29DBF0DF74C2E84171CFBCAC23540F3AD8222A35A
SHA-512:	7BFD6E6CD2FE7A79F4797439BC7294A36D076D67A3DC5BB8E86FA5AF19B50F0E8FEC18BF33B30588486B231062E43F417708333044207A586AAD999E97E819A5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n.__default)\|\|void 0===t?void 0:t.enabled)\|\|void 0===i\|\|i}t.d(e,{n:function(){return i}})},5081:function(n,e,t){t.r(e),t.d(e,{schemaFilter:function(){return o}});var i=t(5163),r=t(9254);function o(n,e){function t(t){var o=n,u=t.event.event;if(o&&u){var a=o[u];if(!(0,r.n)(o,a))return t.updateEvent("integrations",(0,i.pi)((0,i.pi)({},t.event.integrations),{All:!1,"Segment.io":!0})),t;var s=function(n,e){var t,i;if(!n\|\|!Object.keys(n))return{};var r=n.integrations?Object.keys(n.integrations).filter((function(e){return!1===n.integrations[e]})):[],o=[];return(null!==(t=e.remotePlugins)&&void 0!==t?t:[]).forEach((function(n){r.forEach((function(e){n.creationName==e&&o.push(n.name)}))})),(null!==(i=e.remotePlugins)&&void 0!==i?i:[]).reduce((fu

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7783)
Category:	dropped
Size (bytes):	2057724
Entropy (8bit):	5.176612652425808
Encrypted:	false
SSDEEP:	6144:BkbZVUmfZZUiSvHaONk0yJ8FoyJJZJXjyJ8dIyJP9x3qCskVA8lEgY2PwUgDf4D8:eZVU9Nk0yJ+oyJpyJKIyJH8
MD5:	BF3A56B6D20A6B894BCD7BADB7D0A743
SHA1:	E516FB29AD05DA48258F4F7223F4C59869A8D888
SHA-256:	8186012B95AA0E90FB47C6939B6FD5D4CAD1906C59E772DC7B7CB0958054B559
SHA-512:	4D2C33E5E94F281EDDC055A05E5AB02B4130747FBE2781A083CA67639D6B04811BBD841170510174DD2F0D696B67DCC7F3FB85593B7387D922A89EF43F11995A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html. class="MktRoot". lang="en-US". data-js-controller="Page". data-page-id="Home". data-page-title="Stripe \| Financial Infrastructure to Grow Your Revenue". data-loading.>. <head>. <script>window.__capturedErrors = [];.window.onerror = function (message, url, line, column, error) { __capturedErrors.push(error); };.window.onunhandledrejection = function(evt) { __capturedErrors.push(evt.reason); }.</script>.<meta. name="sentry-config". data-js-dsn="https://7cd38b0eb2b348b39a6002cc768f91c7@errors.stripe.com/376". data-js-release="bae6c7b20df843c351b1198155f9138ab57f4062". data-js-environment="production". data-js-project="mkt".>.. <meta name="experiment-treatments" content="acquisition_top_cta_change.control.ursula.5654b1dc-2086-483d-970e-44b4bb872bd8.a,wpp_homepage_title_copy.control.ursula.4688a5a9-9202-4966-9f93-87a55363c935.a,acquisition_home_email_input_nav_cta_switch_v2.treatment_1.ursula.06ea3b10-a976-4d6a-9553-9c267df15ff6.a,acquisition_jp_home

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12390
Entropy (8bit):	7.980130411862464
Encrypted:	false
SSDEEP:	192:xA6u6ANl5v6wbq7oYGK3MxAdfYmLmX7srS65bOFLImluj5kNMyGnZKe171P:xA6t25v703GAa/Yu7imYuNKZKeN1P
MD5:	FF9657763A291E4BD333A65CC3E0BB21
SHA1:	CF39A185A66E25DA9155963CD3ABA063FC5471DD
SHA-256:	1F31270BB8243FCB858E1A9D87BE92DEF9219CF926140F5DD5B7DA456AAA8EA9
SHA-512:	3B9414CCEA5091F9A2F8DD376C41A38F31800B056B4E321609D7A764D1198B7E29CB701C2FD389FCD81FB2510F696481B6316148863A5B6AE1840FA57AAD087C
Malicious:	false
Reputation:	low
Preview:	RIFF^0..WEBPVP8LR0../..?...6..&O6....k......\|.`#I..o@.z8.m)....>..m+.n......; ...!s.2.AD.k..;E1>D......W.%p2..<.......&r.<p..............d...%.......%.0...h....x...Z.Q...af..Z.U.>..Yw.B..`...MzRm.....+$(N.G`W..\|......tuuu..^[D.!...Z.+...CH..r.E.SW.R.8..]..\.F..1.P7.4.r7n...3._.~....?._.?..[...1....`.Ec...N&r.#s........h..w.S;...."...2..~..U.J1.w.a.,...1......3......b..cW%.h........k./....#........;.@......n..V...\|..%.]1..`.{....Wr..\..%.E:...Ba.}d.v..(..!..Mw......4...n.\...._...Q....g.K(.a.....eb'..I\...[..B.W.aj...2...E.n...dKGQ..35.I...t2..F........e.@....\|.r...+d....2.m....t......C...e.y.M.@.?].....s&.@.9..d....Pmc.h...Z.5...H...\...f1W;.d.........^X.......G........},./.ET<..F.g..D.r.r....A..+;...U.......~3....I<.zG:..s..t27^I.\|.:......{0..>..,e=..6.. ...m.D.,r...=T.:$...;p.}P].....$.h3.].. m.......]...J..x...8E6...bC.j...u..Y.M...`...-..1..a..D...M.[......56$.M..!.9I8...<...4.I6.H........../.J......M.P,.n.W.5.:..h.t..y6..s..W.-7.f

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 16:05:51], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	81777
Entropy (8bit):	7.7315457675647545
Encrypted:	false
SSDEEP:	1536:UQZ6WzkH3wZunAXLQZ6WzkH35Gj7/e8FCGcg6sNdkckleeduwk3yt:UQMH3iQMH35gC8slZNlXuZyt
MD5:	A3842F9E2FC3411140DA4373274162E4
SHA1:	E8959B9940E11D469039DE2869C693075FD4E2A9
SHA-256:	3F4CC2D9480DAB896CFC0FFF0C7B33A67868DA516EA61189D44077618845A96A
SHA-512:	0C24955A6B6C89809392867A5DF9787EC9BB72295AA217818C1F231AB98564B7D9FD8AD275CD12E908E507C335BEDBCA81136BF0BA825631D228CED88991466B
Malicious:	false
Reputation:	low
Preview:	....2.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 16:05:51...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................00..........00..........0100....................l.......................................................................................................................2023:04:01 21:53:34.2023:04:01 21:53:34..t.@B...T-.@B............................}......_S...........................................(................................/......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	25675
Entropy (8bit):	7.957115103494195
Encrypted:	false
SSDEEP:	768:j3CTrnAM2RtTxu5g8WA3oribOhT4DKqndU/:jyY5AS8WAYr9evndU/
MD5:	FA5767092A8FBDD836A67C1983A6A202
SHA1:	BA024472F912A0CA9BF55BEB71EF54F4559269EC
SHA-256:	DCA7374669DE923E59393AB73DF98B0F47E6107A0D3C0E8C26C2FEB0474036E7
SHA-512:	51F814E4B4A7021BCAD834729107E8A2D88D86B71367801C43FADDA7136C1D3660D1DB62A699DA28C037C996E77FE20508CB4F65BC8331CF1B80F03866C3B0FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............HPhotoshop 3.0.8BIM..........Z...%G........8BIM.%............x/4b4.Xw.....Exif..II*.................http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="64C0E24530A5A57CC89A2A01BCCD84F3" xmpMM:DocumentID="xmp.did:648FFCFE655E11E9BDB8A76B5DB05616" xmpMM:InstanceID="xmp.iid:648FFCFD655E11E9BDB8A76B5DB05616" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 7.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3f124dca-23d2-4549-8023-ae27d3fabbc6" stRef:documentID="xmp.did:3f124dca-23d2-4549-8023-ae27d3fabbc6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	130318
Entropy (8bit):	7.97101192349246
Encrypted:	false
SSDEEP:	3072:y2d8rfW2d8rfGHF5YvEjMy0EfjyoM7J8jyy9EvF07:/d8Xd8CF5YcjVjNSJ8jtcF07
MD5:	4BC742518107F658EB8948CB46510305
SHA1:	BAF4B734EBBD5B5175CE4602569BA003BA616AC1
SHA-256:	77E65EE5320A4BC96D114B3B9F5177595813320AA7C659FB44A509220C14ED90
SHA-512:	E6A4308C68284E50FF1DA33DA5F99ACE7FA68100EFCCBB09B3724841D2B40B3C5751A19784F047AAB9533FAF32950128DF155F33475D60BB7149DEB5CC0E0D24
Malicious:	false
Reputation:	low
Preview:	....J.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................I......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........*:JZjz....................?..\qO....9.#Jx9...IZ...nX....5..%M[...W.K..f..}=.+2....?.r.1..n.....O...7.0pD..L.E9/..G..w..Er....5)...9.g..IS..D.~..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4773), with no line terminators
Category:	dropped
Size (bytes):	4773
Entropy (8bit):	5.82941473195093
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUtMKRt5VSD:1DY0hf1bT47OIqWb1YMKRt5VSD
MD5:	4456F65ADE70AABE321A7BA0D77B9D69
SHA1:	7F5601DBF393E35A9D5FFBF18215345498B776D4
SHA-256:	D7F6B01ED65FD8CFBF62F5E2B20720CF8BC07C3438EE4E43ABA2976BB6A788DA
SHA-512:	182434B8E37B1959D983AC1DF201EBC0F187FDCBA774D1776FD3C5C9ACEA274DE73228EA1DA7DC6F427A0EF7AF4FE37288F071BA31D1EE1B9370509318A84974
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	690296
Entropy (8bit):	5.369021400255205
Encrypted:	false
SSDEEP:	12288:dk3sWNfk6y6RLKWO0Y0k0h0Jy1nKJg6Nu0BXYD+I9sMc8Mh6v6ecfwe0aSFEPm/T:WR2n2Edbmsm
MD5:	78AAEA0B91BF05493002B40F2441BC59
SHA1:	B78DFD31E36C8B3FEB647079CE70A3DB800791D3
SHA-256:	2BEA4BFDB845E2FDEE34CF138BD40E7A6EB727CE4D1DA92E9E415FB9A24D6870
SHA-512:	85D2FB23129998A178822FAA248D2B30A156B5F02D486C2EF3449A69549B12754D5C65B59492926EC3246E12E20FB4E938DD38D146372652E64308F8BAF2C04C
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	82195
Entropy (8bit):	7.950728629137877
Encrypted:	false
SSDEEP:	1536:Khrn6WOphrn6WOpGCYZJiMZBBUwDWq0uZLwpFG04n8qbaB2s63Ph:KhLNOphLNOp0JioXWqT0iVbe2s6/h
MD5:	2B61F3F680B7564F7249F27CD86DE16A
SHA1:	6C930E9D4CCD3E56209E0CAEB490D2DF3F32327B
SHA-256:	1E5116492E7132FB65DEBE7C3B9E7707E5C0C62C63F6E2CD955B7DC2E1131FEB
SHA-512:	BAE6D05497BAC70E0DFE9CB87E266FCA6D7B267D634FE823B9E83778F864F37C6B14A55D6C43AE3364B4D2D1CB7EAADD3218092C167194E6BB8C81CFE0DB0475
Malicious:	false
Reputation:	low
Preview:	....7.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................6......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...d..v........2w.x..Nmn.jQ..;d...)E.T....\...ikp.._........_EB....i....q%B...7.9.~#.Zb.......`J...~<}..?.mi....zF6!{...b

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28228)
Category:	dropped
Size (bytes):	28277
Entropy (8bit):	5.210847083904635
Encrypted:	false
SSDEEP:	768:PCh2wVWTs+jIrKc1N4xPOlkis45B5rgrW1/sN+2R5tnt3NappYqRFgkSRcZacj7R:Nw4xUMHaYqTgkSpU
MD5:	4E4E40C0CCC652A7CC4CEF7C2146C1F5
SHA1:	45B78F7C8687B680DAE7B6A09FB1B9CBEA7C2D34
SHA-256:	C664E784D6CBA355616EA0A6EB59603579A7B0E49FC4B9595264BA736AECCB4D
SHA-512:	98C8AFDBC62EE4C50927F1B4C988436FA4D38F57AA76B400C9B2098A3A10797A345EA15AC779C1C0A02285C83372F641E8480C70175575ED719D4FF573F1FBA3
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkDestination=self.webpackChunkDestination\|\|[]).push([[845],{1291:(e,t,r)=>{"use strict";const n=r(6150),o=r(6086);class a extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e);let t=(e=[...e].map((e=>e instanceof Error?e:null!==e&&"object"==typeof e?Object.assign(new Error(e.message),e):new Error(e)))).map((e=>"string"==typeof e.stack?o(e.stack).replace(/\s+at .aggregate-error\/index.js:\d+:\d+\)?/g,""):String(e))).join("\n");t="\n"+n(t,4),super(t),this.name="AggregateError",Object.defineProperty(this,"_errors",{value:e})}[Symbol.iterator](){for(const e of this._errors)yield e}}e.exports=a},6086:(e,t,r)=>{"use strict";const n=r(1209),o=/\s+at.(?:$\|\s)(.)$?/,a=/^(?:(?:(?:node\|(?:internal\/[\w/]\|.node_modules\/(?:babel-polyfill\|pirates)\/.*)?\w+)\.js:\d+:\d+)\|native)/,s=void 0===n.homedir?"":n.homedir();e.exports=(e,t)=>(t=Object.assign({pretty:!1},t),e.replace(/\\/g,"/").split("\n").filter((e=>{cons

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	77905
Entropy (8bit):	7.958713087927425
Encrypted:	false
SSDEEP:	1536:GCV/PwmvA8ooKrCV/PwmvA8ooTGr6jHm7tE3SKiU5l+jPZnq0wD4mFF8QZ2:GEwmvA8oJrEwmvA8oys6jG76iU5lSRnX
MD5:	226121A0D710A2D633F6EF49DF5A0553
SHA1:	79CBF3549D218FDF91B1F7773188C72D8DE6E624
SHA-256:	C0C716830262BB48498794248943985C5A1EF228BBBEBF9B3E29B790355E59F1
SHA-512:	BB01E282CEA2510C824F27E515490797634A754B9C08104E6376218C5A17BA35A44B166894858632692E104F17B688598371951F38F8A319EBE333990FEB1032
Malicious:	false
Reputation:	low
Preview:	....4.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................3......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...x.Q..=..4...U"..G.w...-....c...u-.>....6......K:Q[.../.Q.S.8.Yi<....x.+.M.9l.>.P....)..>.....YF......Z.I..]j..`.F.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	77669
Entropy (8bit):	5.32432603787047
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QJnYTZ02LKVsdmpyKcicxd:RIT7OXVs9ZVKBtYj8wKcHxd
MD5:	3472ECC98D7324376468C5DE19A2C1DF
SHA1:	3117F8637634DCEF00E679D07E0C64C1EA68D499
SHA-256:	9D54A2D2E35E076B0911EF26CBEAC23911BACC14F38017BF8B78947A2B6C687F
SHA-512:	C334E34372D0BC252E3F28F6495827BB1E5C7FB6DE09BCEC4D050AE0895BBF3679A41559BB0E58F0C1DD1A658BCC7F15849BCE42D17AFE6D5EF076BE298E0E61
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/473259996747529?v=2.9.174&r=stable&domain=www.riparide.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	downloaded
Size (bytes):	1559
Entropy (8bit):	5.120755987626891
Encrypted:	false
SSDEEP:	48:iKQKFYYCvoDlgVDyNQ2glkMBaqNTYEZqNF5XmbxDy:jJmYoyGPlkMBa+TrZqp2y
MD5:	3867B2388B619FF7FDDC29EF359FC9AA
SHA1:	511BED0C4D3D57AB4CF1B1D7596FB845ECFBA6AC
SHA-256:	31892C21AE4FB908A875BBE29DBF0DF74C2E84171CFBCAC23540F3AD8222A35A
SHA-512:	7BFD6E6CD2FE7A79F4797439BC7294A36D076D67A3DC5BB8E86FA5AF19B50F0E8FEC18BF33B30588486B231062E43F417708333044207A586AAD999E97E819A5
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n.__default)\|\|void 0===t?void 0:t.enabled)\|\|void 0===i\|\|i}t.d(e,{n:function(){return i}})},5081:function(n,e,t){t.r(e),t.d(e,{schemaFilter:function(){return o}});var i=t(5163),r=t(9254);function o(n,e){function t(t){var o=n,u=t.event.event;if(o&&u){var a=o[u];if(!(0,r.n)(o,a))return t.updateEvent("integrations",(0,i.pi)((0,i.pi)({},t.event.integrations),{All:!1,"Segment.io":!0})),t;var s=function(n,e){var t,i;if(!n\|\|!Object.keys(n))return{};var r=n.integrations?Object.keys(n.integrations).filter((function(e){return!1===n.integrations[e]})):[],o=[];return(null!==(t=e.remotePlugins)&&void 0!==t?t:[]).forEach((function(n){r.forEach((function(e){n.creationName==e&&o.push(n.name)}))})),(null!==(i=e.remotePlugins)&&void 0!==i?i:[]).reduce((fu

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:02:01], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	135209
Entropy (8bit):	7.868301751337817
Encrypted:	false
SSDEEP:	3072:QzxFsz/QswcbONkX37unL+IGDLl/hwkV9XtcOm+yOW:sQ3wcbGkXuL+RsZ/OW
MD5:	62BEE73E72E3840333AF445A943972BB
SHA1:	2D9374AAEF163DDF6F409A3EC0BD898098A8AC45
SHA-256:	191A051509854100FB0A49B82860A4E6037A3319F2363914DBE9AB7FA37AC6C5
SHA-512:	4E59DC29E427E8431B52237DE4DC171155E3C6D21C362226E213ED3BB6EAC26221A2CF24F42DA4A980D0D89822BC65D3D23AAA2E474F5F6417C509507471E248
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..091209..>..20190322..?..091209.8BIM.%......MN..M.6F...TS[[....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:02:01...........H...........P..."...........'....... ...0...........2....... ...........0230........X...........l...............................................................................................24..........24..................................................................................................1...........2...........4...........5...............................2019:03:22 09:12:09.2019:03:22 09:12:09.H.2.@B..........................#.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 13:02:21], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	90010
Entropy (8bit):	7.758905000658642
Encrypted:	false
SSDEEP:	1536:uZmjwTaYprOyaAjZmjwTaYpTGatPmug5kvgexP6jQfcqXDZjb4+6cOhVu:uZmkTakrZmkTakTlmuSikMfFTB6lVu
MD5:	7F4D37C0A655F2A83CD9320D55D558F9
SHA1:	FCD2FD414ADB52B21182F52405DD64C65B4B9ED1
SHA-256:	D0F5EE75F56D9B2C5CB6A72C07A5FF03B5C4E33EA11783FF8E7EFA422868501F
SHA-512:	5DBE11A0B2CF37FDE882D378C93C8CBBDC6147883F9FEFF14981EC8D6406AA0B503419B5FA42A406D68C959AF7EF4BA94BD706ED17B137929A288CCDAFA727E7
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/425195/image/medium-b1ac1f31b3123af1cdaf9460843678fd.jpg
Preview:	....5.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 13:02:21...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................75..........75..........0100....................l...............................................................................................................8.......2023:04:01 15:41:53.2023:04:01 15:41:53..t.@B..f.K.@B............................}......_S...........................................(................................2......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	69512
Entropy (8bit):	7.757609715713452
Encrypted:	false
SSDEEP:	1536:7kIc/Gj9EXE7ofEUGiRffj+S42lCDMMHNyNeNesO:kr1ooC4MHVNo
MD5:	EB8F40817DF98017791F8256F0D55D19
SHA1:	9B4C8EC42EED58BC57A02933B4F51E7BB58B0F75
SHA-256:	F1C8B896ADD15B9544BA64C75F1F414417182C30C32A6E7277FF6A938CF955A9
SHA-512:	A0FC51B43E4CA1DA00B11D3FE5D63F0C20FCACE47ABE08D0E0B7BCEE64D21025343AF73C7A751E8F80C9AE7F89594872270A1D92160DF6F4144AB3DA82E48D86
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......}...0...........2.......}...........0230....................................................................................................................48..........48..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:.......................2023:09:17 09:50:03.2023:09:17 09:50:03....@B...T-.@B..................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........5...........A...........3...........D.......

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12430)
Category:	downloaded
Size (bytes):	289146
Entropy (8bit):	5.47084645578821
Encrypted:	false
SSDEEP:	6144:5VPCQYGPmpcwj/yBNtuHAgli3YhhpR4JXcO:5P+/yBNtq/3O
MD5:	AA24F9E701D73AC2BDF54A3A922D6A8A
SHA1:	1E4C6F81E22A52414F98480097C5EB8CF38AB34F
SHA-256:	7473CC047BE088C76B7242457564FCAAAA08FD6BFF66171F84681308F229BEC6
SHA-512:	58C28DFF42DD3D4BF7FA18FF2259391A03FA5F0CBF1615215FE3CB965E50D87D99F125C8CDEBD469BBF4F860A7ED517FBBBFC9FB2AF2BE09A4A24B630E3DFE79
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_GB/sdk.js?hash=159716819cc0e629bd650d16077040d2
Preview:	/1730342486,,JIT Construction: v1017824523,en_GB/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:37:41], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	135408
Entropy (8bit):	7.86343848131367
Encrypted:	false
SSDEEP:	3072:9KWXjshN9QKWXjshN9RuiajFv40dRbBHwLHKVu/SAAOt:MWzsnWzsRuiegkRQuet
MD5:	EE8BDDE00DB2E8D972BDB328125D0D23
SHA1:	ABCA1B12C989F0717915CB2FF1B53A3455746312
SHA-256:	DD83AA79D1D441442F7F7566C2F69A66BA2D88EAB2ADBBF9BE28D6FBFF19E640
SHA-512:	78550F18A16D504139A0B06C3DC91BB3352C8F1598FCCF98D695BED29749C5F748D2982164E68819E93D88E166CE616EC7E7EB9D002D048ED5532696A77CA2F3
Malicious:	false
Reputation:	low
Preview:	....G.Exif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:37:41.DANIELLE NIEUWENDYK...........<...........D..."...........'...................0231........L...........`...........t...........\|.......................................................................47..........47..........0100....................l...........................................................................................................@...........2023:03:08 12:53:20.2023:03:08 12:53:20...~.@B....F.@B............................}......_S...........................................(................................D......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Apple, model=iPhone 13 Pro, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:04 17:31:59], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	135197
Entropy (8bit):	7.874091675022356
Encrypted:	false
SSDEEP:	3072:VOhpOhUpj2/EIESyBpsttH8Nd7wRQSEmvh3d:UhQh+Sapst98NtIQSEGd
MD5:	B78FFA730DBDA1A4A2DA6838C5396D5E
SHA1:	2F5955D48AB3A809D15863F27B655EB71D1669D0
SHA-256:	B1CFEA9AAE7C4E1E2281C168B486AA6653C47A9E26EA5BB07EBFB681506BD475
SHA-512:	867DA8073CCC03DC2651347D0DBCBBC14515FC346BA50643F672891DDE027E020AAEBA430AC947E86B6FA296A4890334E5F8FEBA88EC7EF66F4F0826E8619C74
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/425185/image/medium-7618020b2998c63cd2074455a1a90a1a.jpg
Preview:	....G.Exif..II*...............z...................................................(...........1...5.......2...........i...............Apple.iPhone 13 Pro.,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:04 17:31:59...........&..............."...........'....... ...........0232........6...........J...........^...........f...........n...........v...................................~.......................500.........500.........0100....................l...............................................................................................2023:04:02 16:00:51.2023:04:02 16:00:51....@B......@B..Ru..o...............d.........2.......................................(................................D......H.......H.................................................................................................................................................... ....Adobe.d.......................................................................................

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12026
Entropy (8bit):	7.980740497035061
Encrypted:	false
SSDEEP:	192:BmK5s7KWsZ37vJ0IAShwXQu4yOBKCA0dq+tQvVMjHyyM9pTWPV5gFBJ5KKMR9gti:BmxGrvS4JLAB+SKHy7wfgFtni
MD5:	A095F20E0610EE63BE8E9D17121CB298
SHA1:	FD103AC02D4AE8038F8458758A2865AF579E51FF
SHA-256:	D94DA7B06064CF8DC78AAA534B7239AFEC707060AC21327446B9E676C3A1DBC7
SHA-512:	B0AC794733017918F0DAEAE1114D8F466499E18B96793E2D309E05D7841EC918762326195B18D19D4E6606D1F8538C41B0A9842A25514C9566FBEAD47F36DBB0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.7.6.$'{....6E.1.S.....4.F...w......rR....?...<.].!.W...R........S..."..)...@...$... . ....Q...b,.(.KEq-...K......X.qa.:}...R..l.[.%.%<.%....(\|...?...g..:..6..6.o.vL......h.C..c}..K...^d....~.\|.e].c.[. ..$..n[./\|..,......L.....oRFF......;.m.....=....x}c.;...,.(...LL...?....A!....{GK..w....W..P.R...H....."<0.&.....r""=....J..I.U}....-...S20$vt.[.?.;._.EYhgR...H!C..r~.r.. K..............1T.R._psS...,G....8l.e........jhN..... pT>s....B......!.....H...a.B.c.5...F.v$....\|F...D..R4.K....{q.h....Q..b..g...Q.i.'.....z...vxAz.61.....n1....,NW..m..A.Q....>@G.<....D$_{i.iopz..s.\v+n&.A......v....nP.].&.;.....NN<....k.x.o\|......>L+......5/....S..P.\|.=.~vX. .:.)`.........}..r...3.-. .....u..".?...LB.WZ.......q."2...._....37...\|p..T.^.%)..G.m.#.!C~..%4.>.E.jy..}.;X...&;......C~..Bh..9.r.............ID.A...M......L..}u.P..P..R....P.......a..x....d....).C..3...j..b,.i.d.8......\|.....x6.\|..iy...y...E..{.1.=VQ..i{.}....@..J+...D

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.379664004902596
Encrypted:	false
SSDEEP:	3:Ul/ygn1ZrFIWz7an:UAi1Zlin
MD5:	E28B0610EECFC83EDB5DF4373B7E3AEA
SHA1:	E6FBF0BD786E3585FF5EDE4BA8CE574EC58A02E8
SHA-256:	72011C98E109178D38B70BFC4F548E18FFCA52C411E8797C768BD6967FD7F782
SHA-512:	24218D0AE13A0122D62C2C1C76330635CF07882FEA3CB5985BC2E79613CFDBF6B5DA8A9791FEDE79EE9E78D688C2B10D1FD6EDE6C09B5775987316D12AAB8CA6
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i114!3i80!4i256!2m3!1e0!2sm!3i711462225!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=97792
Preview:	RIFF$...WEBPVP8L..../..?..P..U....E...".....

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	48999
Entropy (8bit):	7.611413078104807
Encrypted:	false
SSDEEP:	768:px5prS9Yy6pAqLBOd+hwhYXNWujAC4MF82U/f4w4+29zaKxRdZ+hlj4MZuKh:px5g9GZe+hq8WuMC4hR/Jl2taEDYlj4m
MD5:	BFFBDBA92EB27CDE0122CBE79052E3D3
SHA1:	3AD51C85388D0870ADB6F8D24F347AD6D8D363E3
SHA-256:	8C6AA963E20582A5278F3CC2BCFF0894FCBAD4B3840439F1204E002E9F7A44BF
SHA-512:	6D3A5C6881E2652F4E71E7558F27683B2F4ABA7ABADB97E0F3F8169EEE4539F4BAC7C3D1A76C8F0C9A49B94EAA819899098DA1A626ED1B5224F5E31F906E94B5
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/444971/image/medium-f24be8b76afbfeb64030da5cd4ce1860.jpg
Preview:	.....:Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................17..........17..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:.......................2023:09:16 17:56:12.2023:09:16 17:56:12....@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........9...........A...........3...........D.......

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9305
Category:	downloaded
Size (bytes):	3181
Entropy (8bit):	7.939269325735068
Encrypted:	false
SSDEEP:	48:Xus0ftPBxSJpcGRLfo4nnX/SiRH1PX3lhHnI6H6PI+NrRKLuUMyrxxBZ:szxSJpcr4ndH1PHlI3VwLu05
MD5:	41D391D5B119FB8C4FE6EDD0C6FC1D21
SHA1:	C8968E33AAB3614DEDA148DA7316DFEEF8C904A4
SHA-256:	30A371F6FBD61C65D6F42A5CA7492BDFC42EA3436D8ECAB9F367DF6DC68E7F7F
SHA-512:	DF53A851ED6DD5DE1887315393BCD26C3F3D830995F3A297AAFFEBFDED035DFD2FA1DB1B8D14F43284BEB23BCDEE146692ACC948933B1F5FF420540AF4E5E028
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/amplitude/3.3.3/amplitude.dynamic.js.gz
Preview:	...........Z.s.6......w....~$m.R.L&.....$v;7...&a.)...hG......>%.no&c.x.v..~..-....=.."......d4...0l...R....#.~.Kx...w..>..;..7..o..?.`>....F.)..e)R\..F.b.Tb......v...u.<2..7....F.hB.3;...~....9I...'..4}N.......G:..tN._\|f...%.4...WT...'J.L.U..<.%..x,gz>..qQ.._`...Cr0E9..Q.=h.(X2d35O.......8.SM.Z.(....4a.FS.(n%.iQ....n.r...F5..h.....^...^..............Q..c.D..\|z..$rV..B.~.U..x..^)..'.0",..5.....'2....uEd..~rP..6i..hK~..&..9f_....:Y.)Y.!.d.....j.0.d5,.D..Y....O.U:^&..8M....m....u,.1.....%..6...f.\2E/r6....LD.U...yoP.7;.....y9..Z^.\|<v......bqJ....7...U^.I.Vfe.".&...L.a....'......pl.U..,......B.3....H.3......N.$gK/\..5,.e.G..(,..D.$..Z.&.j......@..U2....k.".4..Hs\8l........W..\|.u..$\.$..h!.Y5..W.-....\..4......I.....N.5.$...i...].4...-Eq..w..!..x.m..#...M.kb.Nh.-68p..K...... .tV..aw..}..g....Y@.<.k\|...hPj6B...N..0.....@4>_}....9>..r...5>...g...o.8<....._..\....=>U...%A.{..^].]...+....PpeL.'..i&.(.C .....o..\|...GO.\.?0.B.b5X%2.^.#A.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18308)
Category:	downloaded
Size (bytes):	18928
Entropy (8bit):	5.641565573664448
Encrypted:	false
SSDEEP:	384:qohDrghXUPMCvumkDNYuZtlI5SJr9eY/l4naes/bAgdZ2A6Hr0g:jfyUwmydVr9e5aegd2A6HH
MD5:	14829D397567F087775A174778343B90
SHA1:	DDB522B447CA0DE357BBABC7A32A906CA619C032
SHA-256:	6F9D05882DC626A84E3E41728F81D871A8C935B5735C9EA7570D177CC90767E9
SHA-512:	9B8BA9463A744CFF9C644E19B07D3D883D9CEB95A232D9E63EC51308A0388324D0C9E34D5538C2773195E5E70158E166DAF7B83ABCDE23D47D0686397886C5B9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTML:F,createScript:F,createScriptURL:F})}catch(y){p.console&&p.console.error(y.message)}return T};(0,eval)(function(E,T){return(T=t())&&E.eval(T.createScript("1"))===1?function(y){return T.createScript(y)}:function(y){return""+y}}(p)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)*(d<<2)),T).H=T.s+1>>2!=0\|\|T.H,p)\|\|Q)T.C=0,T.I=J;if(!Q)return false;if((T.i>T.g&&(T.g=T.i),J-T.B)<T.i-(t?255:E?5:2))return false;return c(T,360,(t=(T.Pu=F,S(T,E?157:360)),T.P)),T.W

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	19612
Entropy (8bit):	7.987200097062731
Encrypted:	false
SSDEEP:	384:ftBApwD2NS75APRAjfMzH7clk2scxubBIgbRw6uzmWNoxQGg5:ftB9D2NSORAjfMbuub3bRxuiwo+35
MD5:	8231F69AE66B4C943DF78D2899E81AB8
SHA1:	B60AD6752726BAB21DA75FB5F54667556C1CFB6B
SHA-256:	57E3B1B1EFDF5313AC246CE0C41889E20A75395553EF6B5467386D9EEADFD5C8
SHA-512:	900F4559CDAFA595BF8DCF3A79BB313852178DBE90429313E292AF072FD9213791842A8428B4278C1FDA603DDD5825A6266F823A6F4C9F15F2E66309DB410430
Malicious:	false
Reputation:	low
Preview:	RIFF.L..WEBPVP8L.L../..?... .mU.Oq.@y...].r..p..l.$......\..s.C.M.:.l[M.Eqg.,..#.x.d..."....\t..4.<d`F.-*#FW.$<L..Q...:.........<9&..\fU...Q)..!.X)...0........8"I.Sx..nt ...m:.e....iUp.Y...KP(...+..R.D$..J. &B.UG..6.......\..7...M.lC...H.99.;....7,R"..T..B..?..&......J#j.l...Z.k...:..5..;<4...Vhn..'..V.s...rx.......m.@.J#[W=$8...dp...T.+..J41R.}.U...0j..].U..?....].u.."...m.Z.D.+.....K...)...\.G.\|I.+.I...3..ll}.7..LiL.0,r.....!s{;[5....R..$.....$S9 ....]L......Jnl%.R..J5.q.%1,!....N......M..y.....w....j[{..B...$....V....%.CF..S...M^.M.l.J..1...).......-{..`FJ..%.I.E!......R.. /y..hy..C..Y..g.N5.-....~..o...NJ>.N...3..j........6...Q..0..Q........5.1.q.............?..+.."Q>.[...X...$Q...4..p..?C.K_.....3.J.L.......(_.o............"G.........!P)....nZ..+Z.a.JE..&b...+>.)nS%r.%.8K..B..}......[.sJa.n.....f`...<..1z=.8dw%....Q.....7....D.$....^{....86...P...1....ylG>.6.iG]SY.....6...x7p....7....\|=...G..........b....c..>...d.....B...c;`.:>R.p.',

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/out-4.5.43.js
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15894)
Category:	dropped
Size (bytes):	45748
Entropy (8bit):	5.6068150554657725
Encrypted:	false
SSDEEP:	768:6v1Sbm2KrC1QhEL6rQhNhMBBeMwABul3wkxw7RM2y1OWbtsjkYG8lX+cjiAFE/pz:b9KviN6GMTQl3w4w7RM2y1HbOjkV8MY+
MD5:	A8188DB4B78ED8BF38CA31E53D34B6C5
SHA1:	B08233F80BB71E6509B48CCF42F14C6D3BE4E794
SHA-256:	A29518F71D68B6D75503613C7700B6A68CAB62239B89E4842D5FA8B1C0548FF3
SHA-512:	039D3F4D6EE37A3EF3558E9FC00F11E10C2FA6487B3F7405F26A7301604810D512A7B4BFBACA9DC3B450C951134FAD2C8C8CC44AA0618D02C6B18968DE601EF7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><meta content="Short nature escapes" name="smartbanner:author" /><meta content="https://www.riparide.com/assets/app_store_icon_192-cb9a702dbf025614cb1eaeea18ef22189185a340765e4605e8a8d9f38204dbd2.png" name="smartbanner:icon-google" /><meta content="Use app" name="smartbanner:button" /><meta content="https://play.google.com/store/apps/details?id=com.riparide.android" name="smartbanner:button-url-google" /><meta content="android" name="smartbanner:enabled-platforms" /><meta content="riparide" name="smartbanner:custom-design-modifier" /><title>Error \| Riparide</title><meta content="https://www.riparide.com/graphql" property="og:url" /><meta content="Riparide - Book a short nature escape" property="og:title" /><meta content="Riparide helps you plan

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, xresolution=144, yresolution=152, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 18:50:01], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	50139
Entropy (8bit):	7.486655219237192
Encrypted:	false
SSDEEP:	1536:ORJUdp4GYwlWotU5/wsMM9vkyw2BY32LqU:4y4LHtWs/9TV9LqU
MD5:	6DCAA2451ABC785B8217A8D00DEFF962
SHA1:	7A59732CA1CEC8710C1B95176DF562D9A3AAE80E
SHA-256:	A5A36579CBCF7A11245615110B8D93C0CD61FEBC3D127BFDD55280F28D5A95C6
SHA-512:	9BA698C2B7B8364EED0C60D65C0353216030D65CB1E55DEC3E833D900DB0B9E0F03E630C31D08329A3245F4A735B9BD3AEB943620263309E47DCFE667333E1B4
Malicious:	false
Reputation:	low
Preview:	.....BExif..II*...............z...................................................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 18:50:01.!.........x..............."...........'....... ...0...........2....... ...........0230....................................................................................................................29..........29..........0100....................l...................................................................................................1...........2...........4...........5...............................2019:03:21 15:54:12.2019:03:21 15:54:12.H.o.@B...T-.@B..................F.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	downloaded
Size (bytes):	8389
Entropy (8bit):	7.7729849799464645
Encrypted:	false
SSDEEP:	192:NRJCDSvy1I5V4kdJ6snTlJfzKnA15Bvsh37VIeQZUJpXIgQ:NODl1I51L6gx1M6UJ+gQ
MD5:	257C0826FA74F817497BD090E5754799
SHA1:	ADD8B78FC3833B00CFE85D36C360E04AF8B9B53F
SHA-256:	0C8F95D50025E659AC28AB53E43A9A436F68EB119E1B3AF7A06158AA90D7127A
SHA-512:	C728A7839C206A1258C23B5DB3574442CAFAAC3075C534554491363F303C85AD34F8F43E189A0CCEA1A0667CBC9503860AAEF7E0957B14AD228DF0AE6FD4113D
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/user/5362/avatar/thumb_lg-3c61dbd467955338da5f7034b3c7b32c.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br.......

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:02 18:38:48], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	166357
Entropy (8bit):	7.875526077310135
Encrypted:	false
SSDEEP:	3072:XM/I7qC4TjxmKSc0tGx8tTCa4wmVXmn/VCVVwIDHBxxfwIPLBP:8/I7qComVrtMyLbAW/EVi23FLF
MD5:	071FDE4724D0D3C50008BCED16E76A3B
SHA1:	BEFDA3C9BACFADC8FCB8E42B5ABCCE4FAAD5EF9F
SHA-256:	0525B190C7811142FD570D716581D9A5DA8EFC9417A4AAE8BFA9D795BF81304B
SHA-512:	76BAAA02C6B3DE8B3082D7BD735AA3BC24D1FD12BF58A579DF24A9EA2C60DA89569DB06E5333E48F2501FAE2EF44EDB5561F686F11A2DC119CDF26B86240F49A
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/158/promo_image/medium-26bcd4286c1fcabd4889af1034811984.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..081443..>..20190321..?..081443.8BIM.%.......s..8..q...A{0t....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:02 18:38:48...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................25..........25..................................................................................................1...........2...........4...........5...............................2019:03:21 08:14:43.2019:03:21 08:14:43.H.2.@B..........................#.......................365012000017..........#.......................EF16-35mm f/2.8L II USM.000085027e.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12390
Entropy (8bit):	7.980130411862464
Encrypted:	false
SSDEEP:	192:xA6u6ANl5v6wbq7oYGK3MxAdfYmLmX7srS65bOFLImluj5kNMyGnZKe171P:xA6t25v703GAa/Yu7imYuNKZKeN1P
MD5:	FF9657763A291E4BD333A65CC3E0BB21
SHA1:	CF39A185A66E25DA9155963CD3ABA063FC5471DD
SHA-256:	1F31270BB8243FCB858E1A9D87BE92DEF9219CF926140F5DD5B7DA456AAA8EA9
SHA-512:	3B9414CCEA5091F9A2F8DD376C41A38F31800B056B4E321609D7A764D1198B7E29CB701C2FD389FCD81FB2510F696481B6316148863A5B6AE1840FA57AAD087C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i116!3i76!4i256!2m3!1e0!2sm!3i711462345!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=65901
Preview:	RIFF^0..WEBPVP8LR0../..?...6..&O6....k......\|.`#I..o@.z8.m)....>..m+.n......; ...!s.2.AD.k..;E1>D......W.%p2..<.......&r.<p..............d...%.......%.0...h....x...Z.Q...af..Z.U.>..Yw.B..`...MzRm.....+$(N.G`W..\|......tuuu..^[D.!...Z.+...CH..r.E.SW.R.8..]..\.F..1.P7.4.r7n...3._.~....?._.?..[...1....`.Ec...N&r.#s........h..w.S;...."...2..~..U.J1.w.a.,...1......3......b..cW%.h........k./....#........;.@......n..V...\|..%.]1..`.{....Wr..\..%.E:...Ba.}d.v..(..!..Mw......4...n.\...._...Q....g.K(.a.....eb'..I\...[..B.W.aj...2...E.n...dKGQ..35.I...t2..F........e.@....\|.r...+d....2.m....t......C...e.y.M.@.?].....s&.@.9..d....Pmc.h...Z.5...H...\...f1W;.d.........^X.......G........},./.ET<..F.g..D.r.r....A..+;...U.......~3....I<.zG:..s..t27^I.\|.:......{0..>..,e=..6.. ...m.D.,r...=T.:$...;p.}P].....$.h3.].. m.......]...J..x...8E6...bC.j...u..Y.M...`...-..1..a..D...M.[......56$.M..!.9I8...<...4.I6.H........../.J......M.P,.n.W.5.:..h.t..y6..s..W.-7.f

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 860493
Category:	dropped
Size (bytes):	187117
Entropy (8bit):	7.998264893754537
Encrypted:	true
SSDEEP:	3072:2kACHcTMWaThLlRff6M0QSQgrLOWVAf9KlDMNONZP6Fbmhsd07+6iRq9/E:2kj8TXehLlRn1bSFaWQMlgNONZPDsi7y
MD5:	A419FF95AB0FE313515D05FEC50E9965
SHA1:	4929CAD096C0F52E59B4A99C1DCE70D1FE749DFC
SHA-256:	8D962E43EADE9FE508B5B48B26994FC7185C55E7E07A7952B0A7C1A3A1A3B7B5
SHA-512:	D9FB57F9D40FDDA2CA19BEAB2E90AD17E8D82842C065A308DB7CB613AFA3344E49D61C0BEE7FD7BA23271FF42FCB0F9D9E7C4D15A2D6433646579829E300EF36
Malicious:	false
Reputation:	low
Preview:	...........yw.F.7....0g........X...U.g.y.8.;...W."!.1...(K6..._5vB.....E..........<.....L..5....x9.M..q.S."I..y<I.@...HK..s.d.....;.7K..\|..<8...Q..y.....N.=.g.h.m..r{y.~g..w......8.8....).....l9:...+.U.)O..."....<-.J.C...t2Z.D..._.dmZ......qg.,/.Sk.N:.<......L.Y{n/;Y.ire=..g.vk?.R...t`Mf..qb.O..W..iuv.....J..l...~.....>?...O....u......z.J.....K.>=.9./.m{.Y.3g.,f....^:...\|..Q.h......~t...sZ...{.)-..s..%f..<{!..F.P.6/....zAhG...E......P.~.......ha....=7..@..b.....G...^....1{..H{v....<=T......H.y."0..5cI.H?...SJ..k..k.O..T.Z.H+9..O~.....V..Q.@Jj8...".v.)..>.7...c.B..=.3.8..C.k.V.b^.F..l. ..2.]-....4...yU.U..QC.E>B...1....\|=.@S....._...Gs."..8.)p.-.......M0$..$_.....}a.nR.H.....x..y...m..iz..B...K[..........}.sQ..\M.\|..e....A.?.S2J..}....UdZ...*.l...;.D..`.....^.;.>.a:..q.....05-.U....&P5..X.mG.....W.(....E.,.y.I.eG:..h#..o.1S\|YtWF.-..`.U..."J.:..aw..b.....e...?.....{..^.t......l2Z$..lw..0...5..11u..c....g.....N.;.x.N...g[t.I\|.:

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10106)
Category:	downloaded
Size (bytes):	273535
Entropy (8bit):	5.409294334917848
Encrypted:	false
SSDEEP:	6144:Y8S7cwziGx4WNgYCsGsRtcVFwE8AGknurzbprox/JMtMPtshK:Y8S7cwziGxmYAVFwE8ADnurzbprox/Jz
MD5:	C80C822A0297DD817361DB1ABE7EEDBE
SHA1:	11D77914252B4A43A0B344B1079B8B7E71B1EF09
SHA-256:	87969313EC0E62CA6DD87F362F5D80BE5D5850DF5CC92E40AEA16D405A80B9B0
SHA-512:	18C05753143D5770273BE0A19BFCCE79A822E363743165C7A2789185AED54678D4C289DA86B7A12857DD65ACA403783299A060CE84E9C4876C47414A8B5A3290
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Nia,Mia,Pia,Via,bja,cja,fja,Er,gja,Fr,hja,Gr,ija,Hr,Kr,Mr,kja,mja,lja,oja,pja,rja,us,tja,vja,wja,Fs,Aja,lt,Jja,Lja,Kja,Pja,Qja,Tja,Uja,Vja,Qt,Wt,$ja,Xt,$t,aka,au,bka,du,hka,pu,lka,qu,mka,nka,pka,rka,qka,tka,ska,oka,uka,vka,vu,wka,cla,gla,ila,kla,yla,Xla,$la,dma,ema,mma,nma,oma,pma,tma,rma,mx,nx,vma,wma,xma,yma,Ama,fw,gw,Bma,hla,ew,hw,Sia,Tia,lla,Uia,Zia,aja,Gma,Hma,Ima,Jma,Kma,ux,Wv,Nma,Oma,Pma,Rma,Ela,Wla,Pla,xja,zs;.Nia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Qg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Mia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Mia(f,a,d+1));e&&b.push(e);return b};Mia=function(a,b,c){a instanceof _.hh&&(a=a.Eg(b,+c));return Array.isArray(a)?Nia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.kc?_.rc(a):a};_.Nq=function(a){return!!a.handled};._.Oia=function(

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:01:14], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	140670
Entropy (8bit):	7.8762669862347305
Encrypted:	false
SSDEEP:	3072:Eot+LCwyUVl32gNHfIE1bOMo4qhzacqDq8QwjOFJjRWgNs:8+wyUVzVxir4qhzafq/u6j2
MD5:	C8D150F268C091A37CDD3A76FAD8489F
SHA1:	772E75F3212487FA601AE4089CF33D1FF5063C6B
SHA-256:	1DBD79ACF3DB5C36D6D7B7566ED69259429ED75D4F76500635132AA3A0630A17
SHA-512:	9822B5A111C5D60ACB5A6D631D727552F15B39B52F57BEE296624DFD204168EF1B5AB04E2A8F303574D71D788CD52163E5BFEA1E6AEE58A0B90CF51DE7A23114
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/31441/image/medium-f2b059556a7c813eab919cf5d41618f9.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..085855..>..20190322..?..085855.8BIM.%......j.Xy..H1....$. .....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:01:14...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................08..........08..................................................................................................1...........2...........4...........5...............................2019:03:22 08:58:55.2019:03:22 08:58:55.....@B..................................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (908)
Category:	downloaded
Size (bytes):	3103
Entropy (8bit):	5.510735401791146
Encrypted:	false
SSDEEP:	96:f1nwxyuy1jIb1ih7vYtsxoF6oCwlwCIzBDY:eyuyebS7vMsiFL5l52BE
MD5:	C34986F135A732DC6A2AD74B935A68E8
SHA1:	40055DFEADADD788DFDA1B87ACDB6D2C5482945A
SHA-256:	2B7D10CAD01C30138EB10C3EF677DD327A29F448AEF7E85B8C7B3EB1CC47FD2C
SHA-512:	C31B93DF1A9C15F849BC39EE39E9BF0E5F19DBA9D48FBC10C7D8436E67FDE63A9C036DE38C390FF3C1599F3E9737BD514558F66BFF9DD33313325FEDAA0BEA6E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/geometry.js
Preview:	google.maps.__gjsload__('geometry', function(_){var $pa=function(a,b){return Math.abs(_.wj(b-a,-180,180))},aqa=function(a,b,c,d,e){if(!d){c=$pa(a.lng(),c)/$pa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Yi(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Yi(b.lat())),_.Zi(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.wl(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Yi(a.lat());a=_.Yi(a.lng());d=_.Yi(b.lat());b=_.Yi(b.lng());c=_.Yi(c);return _.wj(_.Zi(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},bqa=function(a,b){a=new _.fk(a,!1);b=new _.fk(b,!1);return a.equals(b)},cqa=function(a,b,c){a=_.jk(a);c=c\|\|1E-9;const d=_.wj(a.lng(),-180,180),e=b instanceof _.Mn,f=!!b.get("geodesic"),g=b.get("latLngs");b=b.get("map");b=!f&&b?b.getProjection():null;for(let t=0,u=g.getLength();t<u;++t){const w=g.getAt(t),x=

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8526
Entropy (8bit):	7.947104727452242
Encrypted:	false
SSDEEP:	192:QqBLNr+DRSvlxQgBQ/Bp8eqkPYulilr1uoegEjnb66Ham9TnR:QQ8dSvlxwBGeqkAKilr1uoxEjnLh
MD5:	A76948F3E9824F064FA30C1E957373C2
SHA1:	6D24CF6AC9B20D439AD36A848A3C81A493C63A2B
SHA-256:	2731F6C1B8D88AE3906F67F9F57A87D3F9FE147794DBB9DDB810AA8B3A0ADDE1
SHA-512:	0380696A484ECEB1BDD4B09CEC0BA2D4E4819E523BEE6CAF12E6DE51E0A5953337A3D906012D5BDD4C629D83523AD074665CFD338548689ED50418B0AE9BB6DD
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i115!3i76!4i256!2m3!1e0!2sm!3i711462345!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=48569
Preview:	RIFFF!..WEBPVP8L:!../..?...4.$.Qq.i.gr..`..V.........A.=...F..B.ks.....6.?^y.............M.A...:l..x.......9\|.......D.....[..^T.\.`....mi...=...,..6R..[.bKr..?MZIN}..........u.?....KA..PlE..A.Z....P..........(.".....Y.S<...Nt,......E.9.2X...$M..f\VQ.._.st9..f.#...9D.....c........2...kX..................T..f..;+......?..7.._(C..XCz+h#."......2..R....N%...;#O&..XR...4.M.C...}.h..P#u,.Du'.H...7NwF......3!.D.!esR....y.+t,...;i......M...#...3.D.T:CWdC3..".I.W.;EV.c...dD.......zQ).`....X..x.....{..F(Ea.....[..^TJ..>a..N.V..(.s....J..S'Cs+H.H$.....:...2...o).c.B..Ip.Ih.b..........B...._.K.t..%.$..e3.,wARi..C..b....lH'e..c......wd.J..v5..c..\.?.....FT..BV...[.....<....R%d...Y%.2.F2...Z.t[+\.@.$K%J..f.2RbOf=.H..>.4P.T...6......._.F~....H.w....K.H*]..Pj.3..xaPD.H....\| O..BU!..HCW.6.F..B..Ad..6c..x..+.(...i.....)r.b..+......$...n..G.9_$......L.....T.l.&..J...1...?..PrSR..l...C.k....I.=pY....I..V.....&64..h.e.).-.r.J.+dWQ...H.....=f. .F..E..rJ.q..8.Ye.v/<.% Hn

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8016), with no line terminators
Category:	downloaded
Size (bytes):	8016
Entropy (8bit):	5.743648863843074
Encrypted:	false
SSDEEP:	192:5trKvf7o7jV3Rxls374blFr4uxMM6pk0/DfhQlXFGT:brIf7o7jV3RTscbXrrGpLbhQlXFGT
MD5:	18C3E78CBCF88792DB5A1E2760049902
SHA1:	89DFDB1835DCEDCB40A0F472E585C80F9FEAE4CB
SHA-256:	04FFE7FACCAFB251D946A3C2688DB90E43566BC3B4F03EA4989FDCBA61CCBD66
SHA-512:	AC1F84769E14189E93E9691B157CEDE595B3DC17A69916A2421F15E294B1F4E4AC8774DC204CBFB708E809873D2F4D6C57182E00990E2FECE47064B38C12A1EA
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,o,s,z,A){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=-parseInt(U(211))/1+parseInt(U(129))/2*(parseInt(U(185))/3)+-parseInt(U(137))/4+parseInt(U(157))/5+parseInt(U(212))/6+-parseInt(U(208))/7+-parseInt(U(186))/8,d===f)break;else e.push(e.shift())}catch(D){e.push(e.shift())}}(a,261479),h=this\|\|self,i=h[V(183)],j=function(W,d,e,f){return W=V,d=String[W(132)],e={'h':function(D){return null==D?'':e.g(D,6,function(E,X){return X=b,X(187)[X(149)](E)})},'g':function(D,E,F,Y,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(Y=W,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[Y(230)];Q+=1)if(R=D[Y(149)](Q),Object[Y(205)][Y(150)][Y(219)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[Y(205)][Y(150)][Y(219)](H,S))J=S;else{if(Object[Y(205)][Y(150)][Y(219)](I,J)){if(256>J[Y(172)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(175)](F(O)),O=0):P++,G++);for(T=J[Y(172)](0),G=0;8>G;O=1&T\|O<<1.62,P==E-1?(P=0,N[Y(175)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	82195
Entropy (8bit):	7.950728629137877
Encrypted:	false
SSDEEP:	1536:Khrn6WOphrn6WOpGCYZJiMZBBUwDWq0uZLwpFG04n8qbaB2s63Ph:KhLNOphLNOp0JioXWqT0iVbe2s6/h
MD5:	2B61F3F680B7564F7249F27CD86DE16A
SHA1:	6C930E9D4CCD3E56209E0CAEB490D2DF3F32327B
SHA-256:	1E5116492E7132FB65DEBE7C3B9E7707E5C0C62C63F6E2CD955B7DC2E1131FEB
SHA-512:	BAE6D05497BAC70E0DFE9CB87E266FCA6D7B267D634FE823B9E83778F864F37C6B14A55D6C43AE3364B4D2D1CB7EAADD3218092C167194E6BB8C81CFE0DB0475
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/425347/image/medium-8dd590e34faaa1e83bb2749d8c25e161.jpg
Preview:	....7.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................6......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...d..v........2w.x..Nmn.jQ..;d...)E.T....\...ikp.._........_EB....i....q%B...7.9.~#.Zb.......`J...~<}..?.mi....zF6!{...b

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32033)
Category:	dropped
Size (bytes):	69015
Entropy (8bit):	4.938059212094187
Encrypted:	false
SSDEEP:	768:aR2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq76IPxxQ2PZxJIPxxV9:Pg73zhq0GvbJ3ZKm9prd
MD5:	23114C67A22710F3FBCE2C83D40F1BE2
SHA1:	2F12F1EAE52B2D0F94F188A97B32E0CB2E784F91
SHA-256:	88ED83298805C38E86C5A6E986BB108FD44547D328F5991F8B5E2BEDE35F0C4F
SHA-512:	2A56448759B393CBDF885FC1DE8785E5A4D4BFCED98CC642E820BFC9BFF10AD040B8093B8DD0FC6E0AD6121E717E1812B8401CA1F936A9116DBEE0F94E15A00A
Malicious:	false
Reputation:	low
Preview:	/! modernizr 3.6.0 (Custom Build) \| MIT . * https://modernizr.com/download/?-inputtypes !*/.!function(e,t,n){function o(e,t){return typeof e===t}function i(){var e,t,n,i,a,l,u;for(var c in s)if(s.hasOwnProperty(c)){if(e=[],t=s[c],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(i=o(t.fn,"function")?t.fn():t.fn,a=0;a<e.length;a++)l=e[a],u=l.split("."),1===u.length?Modernizr[u[0]]=i:(!Modernizr[u[0]]\|\|Modernizr[u[0]]instanceof Boolean\|\|(Modernizr[u[0]]=new Boolean(Modernizr[u[0]])),Modernizr[u[0]][u[1]]=i),r.push((i?"":"no-")+u.join("-"))}}function a(){return"function"!=typeof t.createElement?t.createElement(arguments[0]):c?t.createElementNS.call(t,"http://www.w3.org/2000/svg",arguments[0]):t.createElement.apply(t,arguments)}var s=[],l={_version:"3.6.0",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=th

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3750, bps=194, PhotometricIntepretation=RGB, width=5000], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	146308
Entropy (8bit):	7.449639658095174
Encrypted:	false
SSDEEP:	1536:A1YWFEkpY9TLRqRes3le9GRiTQF4Hn04ToQAiQzU5BhIgyxuRcdsb41jh8JNIEng:W2JsCj7C0BhuxuROsb4z8z3M2j72
MD5:	1057000C557348D202535B78ECDE8695
SHA1:	5FD462DFACD72A9936259DA81C56B8528D107006
SHA-256:	4C56354FD0F59152FE483C5DCBC077931882C7F32D91DDD4A7641840D616D046
SHA-512:	7F214400AAAADAF3680BF52AC1BB84D47D9238CC8A262CD8DEDF2EA5A324010AD8655214845D7103698DCA3DA50CF0C888D1E69E6604DB2403AFAC0C96C10087
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............................................................DJI.............................................................(...........1...<.......2...........i.......0...%...........N.........FC3582....-..'....-..'..Adobe Photoshop 25.2 (20231010.m.2357 03d1051) (Macintosh).2023:10:16 22:06:44.$........................."...........'.......d...0...................0231............................................&.......................6...........>...........F...............................................N...........0100....................l.......................................................................V...........................................................................1.......^...2.......n...4...................@...........2023:09:23 07:09:05.2023:09:23 07:58:10.+11:00..+00:00....~.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.......................E...........&.....

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=11, description=default], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	84459
Entropy (8bit):	7.802957600010483
Encrypted:	false
SSDEEP:	1536:rFNQaGif+rXanKviDklJRpyo1c3YWYd80n7QQ0UsZZZX:L4anKQ33YWV0n7CX
MD5:	093C0AB343D8D4137E07BA30CC6E8B84
SHA1:	2FE04BB3937DB9098488826AC23E15AD8677074F
SHA-256:	20EEF46F35AE906C0320A87D182A83E83F40B20F0DF26C5C76BEF0DCF888CFF3
SHA-512:	C9B9F049AC7CFC5CAF0FB9968670D49F28D2DB5DB405638965BD95492DD8D6F93E2C9A7FCE003C2C67975B791542FD98AFC3A564B76EE18112F11561D440A78F
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/1823/promo_image/medium-92f2ae26f6e9fec3505d1c825c8b64ce.jpg
Preview:	......Exif..II*...........................DJI.................................................(...........1...........2...........i...........%...............default.Test_Pro..H.......H.......Capture One 21 Windows..1970:01:01 00:00:00.!.........r...........z..."...........'.......n...........0230................................................................................................................................0100....................l...................................................................................................................................................1...........2...........4...............................2023:09:15 17:41:24.1970:01:01 00:00:00.K.;.@B...T-.@B..........)...d.... ..............42ULJ1P13A0188......................d.......d...-- mm f/--........................S...........p...........E...........................................&.......H....'..................h)...'........................................................(.............

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:02 18:38:48], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	166357
Entropy (8bit):	7.875526077310135
Encrypted:	false
SSDEEP:	3072:XM/I7qC4TjxmKSc0tGx8tTCa4wmVXmn/VCVVwIDHBxxfwIPLBP:8/I7qComVrtMyLbAW/EVi23FLF
MD5:	071FDE4724D0D3C50008BCED16E76A3B
SHA1:	BEFDA3C9BACFADC8FCB8E42B5ABCCE4FAAD5EF9F
SHA-256:	0525B190C7811142FD570D716581D9A5DA8EFC9417A4AAE8BFA9D795BF81304B
SHA-512:	76BAAA02C6B3DE8B3082D7BD735AA3BC24D1FD12BF58A579DF24A9EA2C60DA89569DB06E5333E48F2501FAE2EF44EDB5561F686F11A2DC119CDF26B86240F49A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..081443..>..20190321..?..081443.8BIM.%.......s..8..q...A{0t....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:02 18:38:48...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................25..........25..................................................................................................1...........2...........4...........5...............................2019:03:21 08:14:43.2019:03:21 08:14:43.H.2.@B..........................#.......................365012000017..........#.......................EF16-35mm f/2.8L II USM.000085027e.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3187)
Category:	downloaded
Size (bytes):	269265
Entropy (8bit):	5.553984695542467
Encrypted:	false
SSDEEP:	3072:QpiwizDGLETu0oWn005CptcY0/H8+ARrrOS2WrDmKD0C8rT/We6:Q6GLgu0oIozRiSRx0C8rT/y
MD5:	4C6842037FE23A11C2CBEDFC55C3A641
SHA1:	D4E7EDB3B9F22D676E466D568A9A199D6E5BB517
SHA-256:	B89B7229D41FF95945A6B006A0B872B9D9BA79A769EF5D8035B1C7CF7859682E
SHA-512:	A828F483A176A31C6A18D5C1B26D9DA7D5A0628CD77AF39186A6A0F0C2513FB702AE58B2F81198448B44F51BC4DFE7DD380B2621E0FCBFD63832E043FB3C3DC8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WDTTRC
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"11",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return google_tag_manager[\"GTM-WDTTRC\"].dataLayer.get(\"gtm.element\").parentElement.parentElement.innerText})();"]},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"fu

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=3500], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	78980
Entropy (8bit):	7.8425011102235365
Encrypted:	false
SSDEEP:	1536:5O8XtlHnHGs1WbZs2sigAzXVDgO+5NjhYu+luik14+9jmzz2iP3:jn31WFlsilDgO+5NjhYu8X1oj3iP3
MD5:	01A343B3DB5B746D3E9AF9061E7BE720
SHA1:	06877C256B1484B18FE83F1C89B7977DE40B0C9E
SHA-256:	4DD82AE73539474E3924FDD585CA1976ABB8B054EC9255F1FCE68B842BA92D92
SHA-512:	46F27A9A09A050E53CFA22866F6DE99390EA08A426C4843842F6ED51A43C5EE26D46FCF92B217A8A916E1A0B612DB4A6FEB8C5A1B2B3853D88A83B7BB051D827
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436886/image/medium-bbd74c1a5674017c54670a660d7c8a8b.jpg
Preview:	.....eExif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 24.7 (20230712.m.2239 0f0768a) (Macintosh).2023:07:19 12:10:40.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................d...........2023:06:23 07:12:57.2023:06:23 07:12:57.+10:00..+11:00..+11:00...`e.@B..........Z'..............................f7:.....f7:.............................................SAMYAN

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1956
Entropy (8bit):	7.874963651145711
Encrypted:	false
SSDEEP:	48:LMnGwoE9z0YMpfIbYTUE/dIMHW6hu2Ww8fSql6jqN7zN3/yG4N:LMn1ogz09fI0xJZwfEGeG4N
MD5:	A62D1D504D5DACF84F7CB43EB7B1AB08
SHA1:	07B07D650C6986692D39CEA535E4039C758B73CC
SHA-256:	CA757D589E06F8DADC6CDD1B9D739940B75FDA091A6FF2542B4804F4063E34C3
SHA-512:	BB73050510CDD0A7659CCD037FB420DE866B73D5C5BE6441407E3C44834FAE1E34F12398CD9DCFB2E6F6999E79D036B3FE056ACE133651E7522E3E89F6A2718D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...&..4.s.O.......`..@...I.9.{x....sa\.6+.<........(.......>..[u..).>.\|.c..G r,......:a.L....B..$w.....n....5.....E&E...U.E.3...wZ.....R.<ti..3b.m...h.=iK/.y....._..s.MP"...Y....E..p):..>O.g$.z.%o..{.p..NtG.].s1.bbC..O!.......].}...}r..............c.L.H..9...b.Eh.B.8+.i..=.6.B....\....`.<....+.....0.C...s.U@s....V...Ff..JcI._..1.Y.26%...s.+.C..I.'{..?O....:\>..t.G.Y.....O.wt..I. .+..=.B>....e.......?.. d.>..l...P....#!...\|..g.....'.).....?.ac..\|.C\|B.m.u..O...!..g..}.!<..m..gR..(>.}.........7...6Hl.....J......4l..L..%zR.]....d....II..m.o..F{D...AlH..R0...^.Oh.}........#..M.6.....c{......./k.h.k.!I.$$...5...3l..6.......m.6.?..Y\|R...M.........}.$6.~.#6.OK..l....h......tG.a.U....6....L......>H. m..............!i.I.O...y.?.m..v4l.....?.}c.6h....V`..>..A....9.}...6i.1:.}V.?*..>...>...S.._...jt!..@!.[.8dW<q'.p....x.8.}f.w.9u}n.;..V<Q<R....$.../(...:..\QT..._..}..e.2N..s>..."..N../...}..y..wcn..n4.u?.3/.e^..W....Tp...@.&.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	82206
Entropy (8bit):	7.798886257362462
Encrypted:	false
SSDEEP:	1536:4mwPWGxNZ3cwHgcuNzlcp9g3Z0nylgs6gNVeGpEI:zpPzulcn6gNEGqI
MD5:	D8B33B9C805C674A007BC4F0E1731204
SHA1:	C41DFCC223A9F23FB1D085233994B4A36CB8196C
SHA-256:	B3D2227D1ADFD61516A90E5E256DF1AA3DD93C31DDF8D83E2646931FBA938DED
SHA-512:	B0DDC9C754064BB7FD938E9FC9CEF99FA38AA5513E91B26D748050B75101015D9553B0653180693EDC8020C9433C2D1EF8064E1E866DF8E960A27EC6C27F5C9D
Malicious:	false
Reputation:	low
Preview:	.....ZExif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................37..........37..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...........}...........2023:09:16 17:58:46.2023:09:16 17:58:46..Jj.@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........12..........A...........3...........D.......

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8526
Entropy (8bit):	7.947104727452242
Encrypted:	false
SSDEEP:	192:QqBLNr+DRSvlxQgBQ/Bp8eqkPYulilr1uoegEjnb66Ham9TnR:QQ8dSvlxwBGeqkAKilr1uoxEjnLh
MD5:	A76948F3E9824F064FA30C1E957373C2
SHA1:	6D24CF6AC9B20D439AD36A848A3C81A493C63A2B
SHA-256:	2731F6C1B8D88AE3906F67F9F57A87D3F9FE147794DBB9DDB810AA8B3A0ADDE1
SHA-512:	0380696A484ECEB1BDD4B09CEC0BA2D4E4819E523BEE6CAF12E6DE51E0A5953337A3D906012D5BDD4C629D83523AD074665CFD338548689ED50418B0AE9BB6DD
Malicious:	false
Reputation:	low
Preview:	RIFFF!..WEBPVP8L:!../..?...4.$.Qq.i.gr..`..V.........A.=...F..B.ks.....6.?^y.............M.A...:l..x.......9\|.......D.....[..^T.\.`....mi...=...,..6R..[.bKr..?MZIN}..........u.?....KA..PlE..A.Z....P..........(.".....Y.S<...Nt,......E.9.2X...$M..f\VQ.._.st9..f.#...9D.....c........2...kX..................T..f..;+......?..7.._(C..XCz+h#."......2..R....N%...;#O&..XR...4.M.C...}.h..P#u,.Du'.H...7NwF......3!.D.!esR....y.+t,...;i......M...#...3.D.T:CWdC3..".I.W.;EV.c...dD.......zQ).`....X..x.....{..F(Ea.....[..^TJ..>a..N.V..(.s....J..S'Cs+H.H$.....:...2...o).c.B..Ip.Ih.b..........B...._.K.t..%.$..e3.,wARi..C..b....lH'e..c......wd.J..v5..c..\.?.....FT..BV...[.....<....R%d...Y%.2.F2...Z.t[+\.@.$K%J..f.2RbOf=.H..>.4P.T...6......._.F~....H.w....K.H*]..Pj.3..xaPD.H....\| O..BU!..HCW.6.F..B..Ad..6c..x..+.(...i.....)r.b..+......$...n..G.9_$......L.....T.l.&..J...1...?..PrSR..l...C.k....I.=pY....I..V.....&64..h.e.).-.r.J.+dWQ...H.....=f. .F..E..rJ.q..8.Ye.v/<.% Hn

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	83982
Entropy (8bit):	7.960899445884166
Encrypted:	false
SSDEEP:	1536:C74dDMRfcq74dDMRfc1Gp88gsc0KNnkdq4H2YnraYILAwFU2qF5kdfEQgB:CEdDMxJEdDMx8E88gsQnH4H2i3I052qd
MD5:	47A81684FDFC4BD5D83A538431DC7CFF
SHA1:	DA84D47177C82635A9BCC53DC8F8AB6EA3F667CD
SHA-256:	C491C1424D5AFBFB36EB1E9B5FBF2C4A4200040592D3966710DD47B53B31D2E8
SHA-512:	9F49F84DE61C204850D2A020ABF3B015F9F9A3E129E42E1BA502FA553DB5FE5BEDA04F9B6E764178D00EAB387E87F856278C22F4E3CF0F08A9400D5FC3F8C82B
Malicious:	false
Reputation:	low
Preview:	....7.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................6......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........*:JZjz....................?..(#u=+..v..x......$...E(....?..5..+&.....mg-...."..9...QP;..B..._..I.h..D.U.E.<ME0.v..........9...Rj1;..@MM.\|..i.!).....

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	72765
Entropy (8bit):	7.771485016441706
Encrypted:	false
SSDEEP:	1536:/pP8ofvPUSGy0Kd3nMX7fitwg0WxVGiAO5JIZmp0A+DWs:REUvsSGQd3nM7itwnWxkiH5iJCs
MD5:	B1BEE232465DCE5C946CCD46F5DE8DF9
SHA1:	2EF30097875DC960588207C954633B7D002356A1
SHA-256:	0A8036BA504CDC51FF2615F3E2E0294F1AB1210BC5DF5B8F7CE11F4A0453ABAC
SHA-512:	7C69309D7D07128A96C186FEC478D3B768ED9E3D0DF8410EA46F42FE9BFEEB44445A34B6B3CB51FF21CA52C123F2A2D149765F13D047ACBD019FB4E536BF690C
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/1805/portrait_cover_image/w400-a1158bdc97b424f5c2bc986c3588c528.jpg
Preview:	.....^Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................78..........78..........0100................................................................................................................................................1...........2...........4......."...5.......:.......................2023:09:16 17:26:28.2023:09:16 17:26:28....@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........8...........A...........3...........D.......

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	100625
Entropy (8bit):	5.4765103185988
Encrypted:	false
SSDEEP:	3072:bHxNqTAZ2WJpBRVxztvtO7cCyahbdVIxqEety2P8WmM7XFcaVG+tPyZ+O7+/e9Do:bHjnDRVxztvtO7cCyahBVIxqEety2EWP
MD5:	835A75928B7D86C64AFB03767C8C99E2
SHA1:	159E13B4B5D16AB48C85780BE28CCA4976859CEA
SHA-256:	D422128EEA28CCDF1E598004F0E8CE733E387FD0B4978AC4DBA23FF131461C0E
SHA-512:	1F6655F420FA0C413A2960AEAE741D4CF501857D30060D2817D601DA34B9EEA279B22A1F7BFED552DC16418514E127874BF4AEC8A121C2D102D8DEAB22B91206
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var BJa,pL,CJa,DJa,rL,EJa,FJa,GJa,HJa,tL,JJa,uL,vL,wL,xL,LJa,KJa,NJa,yL,OJa,BL,PJa,QJa,RJa,zL,DL,AL,CL,GL,TJa,SJa,HL,IL,VJa,UJa,WJa,XJa,YJa,$Ja,JL,aKa,ZJa,KL,bKa,LL,NL,OL,eKa,fKa,gKa,PL,QL,RL,hKa,iKa,SL,jKa,mKa,kKa,nKa,UL,qKa,pKa,rKa,WL,tKa,sKa,uKa,vKa,zKa,yKa,AKa,XL,BKa,CKa,DKa,YL,EKa,FKa,GKa,HKa,IKa,JKa,ZL,KKa,aM,MKa,NKa,OKa,PKa,QKa,RKa,LKa,SKa,TKa,UKa,VKa,WKa,YKa,cM,$Ka,bLa,cLa,dLa,eLa,fLa,hLa,iLa,gLa,jLa,kLa,lLa,nLa,oLa,rLa,sLa,dM,tLa,mLa,pLa,yLa,wLa,xLa,vLa,eM,zLa,ALa,BLa,CLa,FLa,HLa,JLa,LLa,.NLa,OLa,QLa,SLa,ULa,WLa,kMa,qMa,VLa,$La,ZLa,YLa,aMa,hM,bMa,rMa,fM,iM,iMa,ELa,XLa,lMa,dMa,fMa,gMa,hMa,jMa,gM,eMa,yMa,CMa,DMa,jM,EMa,FMa,kM,GMa,JMa,IMa,KMa,IJa,MJa;BJa=function(a,b,c){_.Pq(a,b,"animate",c)};pL=function(a){a.style.textAlign=_.Uy.Dj()?"right":"left"};CJa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};DJa=function(a){return String(a).replace(/\-([a-z])/g,function(

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	3.9102439045469075
Encrypted:	false
SSDEEP:	3:4sNdh4HHXXgAZdTS4:4sN/KAgu4
MD5:	3BF65A4609AC928700028EF0ECFF177E
SHA1:	F69325818002090E23BDFBF77D16DE537A788233
SHA-256:	A260F3B020F77DB474BC285869E02A6A76943210368D4886A394F8B7C1F840F4
SHA-512:	C45F05B8CB79F5363EFA606121485E4D7631AD65640F73B64CB4824D82F2E5D9559C991D1465486C6EF63BFE28EFB673242786FB904213D6BE24A764386EEFA4
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/api/features
Preview:	["personalised_search","referrals","ripavideo"]

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 65212, version 0.0
Category:	downloaded
Size (bytes):	65212
Entropy (8bit):	7.995291537975246
Encrypted:	true
SSDEEP:	1536:5artjT8+7Th62saV3Ud5TRFiNFBM7JABcQ0O3/Fbs28:5apf8+/h62pATRANFC7JVOP+X
MD5:	F055E310F051B83E753D8090F39C0EF1
SHA1:	6CB0B4A544191E8AA60377A98A8E7E0BB91059E2
SHA-256:	094F652F96999C294DAC753B25309D1CF9463ECBA9407D31C069183E4DFE37B5
SHA-512:	E5F90A65A595ACE80828184C002B27595AB66EABEB401C33904158947C2FB12247D0A8B521061F2838F6DB230243776584CDF84ADF2BAA9C26DB2452883EB1BC
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff
Preview:	wOFFOTTO...........X........................CFF ...4...A..b..FY^GDEF...x.......dz.\|.GPOS...l..-...n....uGSUB...t...F.......#OS/2.......O...`jb.lcmap............/9".head...$...3...6.wH.hhea....... ...$....hmtx...X...C... .9..maxp..............P.name............6...post... ....... ...2..P.....x.c`d```a`p..X..o......\/kr......e)bn.r...@..e&...x....$M...l....toc.m...w.m.m[..m...~.NdOv.].\|..^FF...Y.z.../.pV.aS..j..^...nh.>O....~G.M......!..'...=.+.v\=.^5..Z.............<.{.d..;....\*.........a-..z....w....+k..n........O.c.....q...zA.[%.c......!.^../.^lqa.A).......j.....5....o.QI?P)[&w......do!^.]F.i_..Q.}C.a....;.......WR...H>.....&u..YK/....O.o)..?..k.r#._.....kN.n.[{\..z.v..h..".R${....T..S.....6]..ho...5.\wt..`...~...A.3.b\|#..Q.......`..a(.M........e..i.vj.........~....S..=.J...u.puMd.<.--."...[...;..2..N....L.$.BS.$Me.M.....]......^T~c..v.]7._j..ul}cw.%.p)X.i......NI.z\|y#.Rgv...{v...^j..:\U....z.&...V.2..4....2...$.db..`...s..+^.1.y..5go..R.R)j...v.V]

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226541
Entropy (8bit):	5.378840825832781
Encrypted:	false
SSDEEP:	1536:6wmvhwvwVyhMwe+04f1VHv9ixmXeTX0b7DDDbGw5wyP+zhEK9yr2IG+UNsnVB0iR:2hwvwVaMwB1TixsnpIhEY6VUStJYScYt
MD5:	EC34F7A549BB7B8A0957652DE86E3475
SHA1:	C49251C4A953052F327F76A0275135E102AD8536
SHA-256:	C0D57EFF0936A57E0C8D6BC93314585C734E5ADE88D6DE970E1E305AE5D87224
SHA-512:	805FB48BF271D8960E19B014D07FDEA5A054036636FC4074781418E020DB1CCD8B773853AE3A59F44DBAC0C5E53ABCC70266DF6E908FDC5D46783FB2106BE777
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.625495a901d247c3e8d4.js
Preview:	/! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	dropped
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	1897295
Entropy (8bit):	5.530580079511122
Encrypted:	false
SSDEEP:	24576:/hTJZt7cpHMhxcnS9jciEc0ZnT48tYv9sD4qng9DxQB0UVOZ/wuYQt0do0UrByiH:/xjkJVOzyOOPwEuDDbk62i
MD5:	41F97AFC297AABC844D956EC71DBB43B
SHA1:	CC6B99D9900E4FE2E3451A625F1679ED38F399AC
SHA-256:	4FBFF840AC59047AEE85CA6E8DD46E93C3CF919341181015321CA57618244056
SHA-512:	FB2D3DB79CEE9BCA2A860A598C815F6D16B04137CF4FAC320E222F096A01AD68C384950580D53C8838EA5AFF8493BF12CB0A149238358AE933EA2A340F0ED001
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/main.d44653dd034d226877c0.js
Preview:	!function(){var e,t,n,r={82987:function(e,t,n){e.exports=function(){return new Worker(n.p+"clustering-gql.worker.03501d17d6d5ce0028f9.worker.js")}},53756:function(e,t,n){"use strict";n.d(t,{Cp:function(){return d},Qv:function(){return g},SF:function(){return l},Vu:function(){return p},Yp:function(){return m},a$:function(){return s},cG:function(){return h},k:function(){return a},rW:function(){return u},s6:function(){return f},sE:function(){return C},w2:function(){return c},wm:function(){return v},xE:function(){return o}});var r=n(9669),i=n.n(r);function a(){return function(e){return e({type:"CURRENT_USER_FETCH",payload:i()("/user/current_user")})}}function o(){return function(e){return e({type:"CURRENT_USER_SILENT_FETCH",payload:i()("/user/current_user")})}}function l(e){return function(t){return t({type:"CURRENT_USER_UPDATE",payload:i().put("/user/current_user",e)}).then((function(){return setTimeout((function(){return t({type:"CURRENT_USER_RESET_UPDATED"})}),3e3)}))}}function c(e){ret

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14570
Entropy (8bit):	7.982425131382693
Encrypted:	false
SSDEEP:	384:xMqL4bDCj3tfu7DZr/MGiu/UE5oy4cfWnbZQavs6aHUQps/H:Go4bDCXEK4ItaVmH
MD5:	B6816900741F34DDB671CB12E4600ED1
SHA1:	0CE930C51D69F839C374DE272F52854F69275650
SHA-256:	D8503E5662C39C600DF9AB017A3EF0CBFE8FD13FBCEC7A409729361CF1B5D2E7
SHA-512:	37F5506F52027FA461CA5BF322E677D0996977C80F1CD530ECA3793E4B85BE5A1DA2186CF649B8C1B7D05978DA266F466834CEC1A8D203825F52F3022DBACC0E
Malicious:	false
Reputation:	low
Preview:	RIFF.8..WEBPVP8L.8../..?.w.6..4O,..p..cG.......m+..NN'..CF..].1..D.vw.?....:..?.....0o...@.......c..g .?...(()BBH .a%2HL.H..3J1I..i.Y.$...@0..F=..R....../..@...H0.B..H..9.X...v..5....8[.L...1...A.k..R..p..n\o.\|H.S9.RWN...n.....i.We......#.Em.$......DP..K....PQc....f...x...........;.$)..FD.e.c8...e6T7.3...l.....h+.`..G..n.e... ..........x..w.".`..O[JU......a.A.....8...7....m.&.IF...S.G..d... K....G..i..`..9.:...7......i...p:.;.i.1U.....f.x........Mo.....=$..@.a.....&J+.....6...j.y..D...o.CS.....[/@U.bGP..d.O7.dY..e....o...&...i9...\|!v9]..q..^...W.%j.I....f..[X.:u/..`.J7.y'....w....=v......9N...k..j.nV ....8..u...`N.......(..U.i..nz..j..#...[...gq....eR..!.....!..p...z.>d......3....'...Y.j..`6..h..C........{wU.L.EV..K....Q....nryf.......p.Uy..(....uf......U........s\|.r...R.`..B...ru...v......8>8.DK......v...VB....^.l...!33.....h.6.9.....-...lF...jH...0#.!fxHDG(..v..U.IZ..G?_.....U.\|..r...J.k?..h...R...8.B..I.L.a..#..=.QMc._..T]D.....?^..e

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3750, bps=194, PhotometricIntepretation=RGB, width=5000], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	146308
Entropy (8bit):	7.449639658095174
Encrypted:	false
SSDEEP:	1536:A1YWFEkpY9TLRqRes3le9GRiTQF4Hn04ToQAiQzU5BhIgyxuRcdsb41jh8JNIEng:W2JsCj7C0BhuxuROsb4z8z3M2j72
MD5:	1057000C557348D202535B78ECDE8695
SHA1:	5FD462DFACD72A9936259DA81C56B8528D107006
SHA-256:	4C56354FD0F59152FE483C5DCBC077931882C7F32D91DDD4A7641840D616D046
SHA-512:	7F214400AAAADAF3680BF52AC1BB84D47D9238CC8A262CD8DEDF2EA5A324010AD8655214845D7103698DCA3DA50CF0C888D1E69E6604DB2403AFAC0C96C10087
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449406/image/medium-f6bf30f1456c8f193d0bd589d99edcd7.jpg
Preview:	......Exif..II*...............................................................DJI.............................................................(...........1...<.......2...........i.......0...%...........N.........FC3582....-..'....-..'..Adobe Photoshop 25.2 (20231010.m.2357 03d1051) (Macintosh).2023:10:16 22:06:44.$........................."...........'.......d...0...................0231............................................&.......................6...........>...........F...............................................N...........0100....................l.......................................................................V...........................................................................1.......^...2.......n...4...................@...........2023:09:23 07:09:05.2023:09:23 07:58:10.+11:00..+00:00....~.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.......................E...........&.....

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:43:22], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	128997
Entropy (8bit):	7.788745215534772
Encrypted:	false
SSDEEP:	1536:7zSOjcaxa4ZSOjcaxacGLq/M1sz87z7CPGaKfA+gkRxSvbwLRCGNX7/+DASfg1E0:fJj7Jjph/f8eGaaxqaCoL/IABgROke
MD5:	55F412C1212701496B8686FB2EFC597B
SHA1:	FDB00F3BA920E45A9B87321DF5D72A5455776FBE
SHA-256:	3A888FF44B7E4727D20DEE962B7A0D5B849595F61EDE9C6264BABA26B7444463
SHA-512:	B5A1C9FE1DAD787D77DCBF046145698B7C041E45D8BC8F2FF9C66104839D6CB7E86DB5E89B0B5BDACBA42E343C3029D101FEED859B100C58BB05C6AB50EABDE6
Malicious:	false
Reputation:	low
Preview:	....B]Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:43:22.)........................."...........'.......}...0...........2.......}...........0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...............................2023:09:23 09:54:10.2023:09:23 09:54:10.+11:00..+11:00..+11:00...<..@B..........0V..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:36:05], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	138160
Entropy (8bit):	7.870734271431411
Encrypted:	false
SSDEEP:	3072:XrokVWbLvqWrokVWbLvqkrTLdinAmPZPea9noR0eN/JU9lhnr+WC:ksWvIsWvxrHonAuXnE0HDyX
MD5:	43619D499E13545739A706BC88F43F33
SHA1:	9635DBB88DD564FD6878BFC4CCE3A69228C653CB
SHA-256:	B7B9CDDB82ABA48E6DDCF11DD23059676E8A27FBFA4CEA406FB93B57A525108B
SHA-512:	46C3DD3A06FE784ABD605758F578BA3E7A6823110D337E961CF9F5773F19CF37E32009975A33D1ED884E36DE631D4DCBBFD3DD5743730E7161C46E140E8DE5FB
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/420572/image/medium-ebcdf96c54690bcd5e78702c61a2d484.jpg
Preview:	....O.Exif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:36:05.DANIELLE NIEUWENDYK...........<...........D..."...........'...................0231........L...........`...........t...........\|.......................................................................74..........74..........0100....................l...............................................................................................................?.......2023:03:08 12:44:36.2023:03:08 12:44:36.X.y.@B....Q.@B............................}......_S...........................................(................................L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772), with no line terminators
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	5.823942529272946
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUjFw2t5VwuK:1DY0hf1bT47OIqWb1eFHt5Vw3
MD5:	1CBE8334E8C25F388B4FF34E2B4EDAC9
SHA1:	D7C0A6A23D1F2F7E71861E9553AFD309CB289EC7
SHA-256:	4FAC982A3332A2814178A135A5E7839D9B208E062BB7C92BD40DA39393588E07
SHA-512:	96086F6B491FEFBF77AFF9F21F9AF26DCE03843CD8B57AB6E52E16AD609BDF43F8E1B43E43C086CE6C01FDE2227F0980567BAB044FEF163F11B34623F88A452F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/740117353/?random=1730342490526&cv=11&fst=1730342490526&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12280)
Category:	downloaded
Size (bytes):	393004
Entropy (8bit):	5.671144001429586
Encrypted:	false
SSDEEP:	6144:/2e6Lf63mod3WEIML6WX+pGTRA/LY9Fawb7TAgY1fY/I3dRmDWzhqcGkT12mY0TD:/2e6L3odIMLn2LYXawb7EtwcGkXY0T/L
MD5:	E93415F90E2A54C64EF087ED5DEBA9A6
SHA1:	7ADA839290A29893719091ED9F082183F054FB5B
SHA-256:	E11D9664FBFE672FF1DCF97AEF0ED42075A846749727EA70836196EDDCFCE100
SHA-512:	DD5164144916ACCC269960C2A2142F2225CE3A64DC79015C3C21436DACAAE03673137468EC41ACD75722D322E827C892BA851BF68090D8FBB9E66B6CC4CAC3AC
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&libraries=places
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en-US\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=989\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3600, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, width=5400], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	66886
Entropy (8bit):	7.501032195725173
Encrypted:	false
SSDEEP:	1536:ohmcfR6cmhmcSoxYorHmW6lnkYmeLeCXwpCjer:oAA+glnkYmAgpCjer
MD5:	D1C1E3FFB98DE7B11759664C05F55F4D
SHA1:	EBC16491B7FA2DA2113B95B291919EA6D9B14A4C
SHA-256:	958C6C591D275CD0D425FE439FBC3F020900835FA3CF02286402CCE91398B7C2
SHA-512:	3439234A8B9A6A08E3D7B2BE277C5E549868581D8DAF978951C1BEAD8D3FE421E941D4A06079BDC752CA9BCF3C161B25AE0201A01F21C6F19BA7D3F78658CF7C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......2.............Canon.Canon EOS-1D X.......'.......'..Adobe Photoshop 25.8 (20240411.m.2581 c235e07) (Macintosh).2024:04:15 10:31:04.!........................."...........'...........0...........2...................0230....................................................................................................................90..........90..........0100............................................$...........,...............................................................1.......4...2.......B...4.......b...5.......z...........d...........2019:03:21 17:34:32.2019:03:21 17:34:32..`e.@B...T-.@B..........................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846........................................(.......................................H.......

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	82985
Entropy (8bit):	7.8184477824829735
Encrypted:	false
SSDEEP:	1536:SkPTlGk/qv0JZJNtGbOsJAARbWTXgcG70YFIlOO8EbuSM:lP5hqvUZJ29dRCS0YzOA
MD5:	9EF37E814EAA1E6FA53F954C88A08204
SHA1:	C595F3E1FFA0932DE1711A235AE1C9C837E3A1AA
SHA-256:	4AC4A9E60696310D1DDA6D1AB9A10AFB98D65CA55F8E9511015EA3B09F08097F
SHA-512:	F01EECAB8F0DEA5AB000DC2F8280D3CF7B899E76AA2581C27260CD40AF0B54712EE5BABC56B211FEBE8FB89A8305C8AC237343AF08E2CB8AB74BECEDAE8F60E1
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/444957/image/medium-83fba692fde36de61c4cfe25ef576154.jpg
Preview:	.....`Exif..II*...................................................................(...........1...........;...........i...........%.......F...x...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......d...0...........2.......d...........0230....................................................................................................................58..........58..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...............-.......2023:09:16 08:25:56.2023:09:16 08:25:56..=..@B..A.......................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................V...........p.......WGS-84........................................(.......................................H.......H.............

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4271
Category:	downloaded
Size (bytes):	1879
Entropy (8bit):	7.9019247183819115
Encrypted:	false
SSDEEP:	48:Xxv8AXyz70+abxe59zh/NCSKx//hkI15hL8d3aPkZ1LN5u+ClZG:N8Iyz7lqSI/hJh4LZ15U+0ZG
MD5:	DE0A11B95ACA20DC7CC5BCEC42ADC9E4
SHA1:	D8CAF184A39CBBF2FD55FBF5E7E477C1B64D860E
SHA-256:	58BBE7CADCD9BF4C2CCE390E289E135F2D83D7A679D213D80F2DAF2C1E0D2464
SHA-512:	25DDC03ABAC771E6F39D2CE3DF06FCF67B2273BDD5F69E07228A95D5B2065490D6CF626DDBA91CE30DE6783AEC78E2D20C033320EC69D7D9CECC6E19579664D5
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/intercom/3.1.0/intercom.dynamic.js.gz
Preview:	...........Wm..6..._.#]Y.7.%W).....[d...Aqg..-.6.Yd(j.\|...=C.X.n....!93.7>3~Pe....U....o.T...>..W....)]VW.....,;,c..:.......E.....z.}.......Z..z...H[.M..+]m.I....7.;...COOd(..6..vR2.....e.\/X.......\|.H.7&.d.q.4..Hq3...n.Af.6V;..F.[Q.=....H..q&.".LE....tZ...!-pY...('..d....X........_.5T.i....4.j.....(..$...0.......v.0j..`1D.1.......~8.\......N......#...Y..g..y...`......+S.....[v.1.U.....N.t&.....f...,.5LPR...%S....D.......Uik,m.J$+.g.;L.M.G.....e.f'Z!TqA..{..w.1.g.e..rc.i..k"...m...}F=.A..NZ.d......D.......g..C.'.........;..YUn~....s7>.eHVQ.$..y].....RV.[/.l.....I..J.U..E...T..r)N...@......S..O7...\v.eV.'.....!`.......u...^8x...T......+..........Q.5......[.^....#......N.7h.;......... .L.u."%..............h........;..C.0...nM.H>\&J.%....W..Zt..k`Q}B...#C3...t\.....yp..o...:....N..hPWrB)G..-..0..{...h.w../@...P?. B:..h....'...?.W.3.7r.=..weu.."...a@.D?..'.........b.eS.(.....>...m...o.......D.....`.m...[U~.R.d.04....IT..rb.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 17:47:03], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	119157
Entropy (8bit):	7.846720838898707
Encrypted:	false
SSDEEP:	1536:2TtAfywMFCtAfywM8GHDj95fp2yWvc3GbVNyhBY88zFEFXjTnjFvnZ2:mt2+ct2+8QDpGvbRNyhq885onjFvnQ
MD5:	717801F46F6F895669B408C7A049471A
SHA1:	366B9FB2F5F6E8405AFA4C8C2CA7CC76694DDE5A
SHA-256:	8986E7DD24CC0E9FC0E2C6413A9FE6DA68F6AB1119B9E6DE5ECA10D9B250C579
SHA-512:	0FE5258461A855616566A2B4252AF01A8398E7F20DA63E4FD61D4E8A636FFDF8B4D502F2541DC288E527EB2647EAD015A8554AD05B1E5B61B107EB350002D15C
Malicious:	false
Reputation:	low
Preview:	....A.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 17:47:03.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:06:23 11:50:49.2023:06:23 11:50:49.+10:00..+11:00..+11:00......@B...........i..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	226541
Entropy (8bit):	5.378840825832781
Encrypted:	false
SSDEEP:	1536:6wmvhwvwVyhMwe+04f1VHv9ixmXeTX0b7DDDbGw5wyP+zhEK9yr2IG+UNsnVB0iR:2hwvwVaMwB1TixsnpIhEY6VUStJYScYt
MD5:	EC34F7A549BB7B8A0957652DE86E3475
SHA1:	C49251C4A953052F327F76A0275135E102AD8536
SHA-256:	C0D57EFF0936A57E0C8D6BC93314585C734E5ADE88D6DE970E1E305AE5D87224
SHA-512:	805FB48BF271D8960E19B014D07FDEA5A054036636FC4074781418E020DB1CCD8B773853AE3A59F44DBAC0C5E53ABCC70266DF6E908FDC5D46783FB2106BE777
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:40:03], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	101882
Entropy (8bit):	7.811971194274981
Encrypted:	false
SSDEEP:	1536:23oNgZFjqzPc/O4491oNgZFjqzPcKG6jq3vs4JsdYT7Kt86TZ6uH+bKh8zDqlg:02mjqzPz2mjqzPlpQs4tfKtfTHV4q2
MD5:	67076E64CAD119383FFF59EA0A13E8AC
SHA1:	37BA950872049EC6AB15E331DEE49AF56036B502
SHA-256:	9DBD673CFD593A0F330C91F629BF71B9B9BD1C92DD63D549493D36D81112E1E5
SHA-512:	61BA2A6A17FB8EFAA76CCAE6CD40A693E4EDEAF483028F7AEA1D3570F1891C842978ABDD083C3B3C14BDAE4BDC59AB6C376CDF975827B3C1B91F491701B6BA31
Malicious:	false
Reputation:	low
Preview:	....8.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:40:03.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...................<...........2023:09:22 18:08:23.2023:09:22 18:08:23.+11:00..+11:00..+11:00...!Z.@B...T-.@B..................................f7:.....f7:.............................................SAMYANG AF 14mm F2.8........................................(...................

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	249337
Entropy (8bit):	5.548972651900016
Encrypted:	false
SSDEEP:	3072:LawiztGbETrakoAy0j5CptDY8/I8+yr/OUYhcDmKD0C8Gp/SXG:SGbg+koiM/GUTx0C8Gp/SW
MD5:	EA806CE9450BFA2BA9B71B3D71EF8076
SHA1:	28D9CD643C65C54DA5E3A3DA9788DC4F8CB9BFCD
SHA-256:	903BD9761EF8922BCF5B977E9227DD102B758C6ED2940A52A33F0037D15431FA
SHA-512:	E4F2B4C87817860DB6715F2BAC8EE2284C5DDD2C722E56027695D7B511866044AF1E4E2937AED04D2489BCEB5DCF5E1D117A231E2D3BC9CCF672A8905B47E5B0
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:04 17:04:56], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	75154
Entropy (8bit):	7.705820789301764
Encrypted:	false
SSDEEP:	1536:WTJ6F82HxHAmTJ6F8fCGViqfhHKc9lCGNSNruHHYcEnOQCD0ILH:WTr8TrqCnhHZlCA+u0OQCRLH
MD5:	0B2E91A931E4AD6D39421C46E9D88902
SHA1:	D3D807B98F937E7DB6AE8E572EB9703A19742F7C
SHA-256:	DD7EEBC68B45EAB7C261253810321C9E43CE5CAECDA22D7357DBCAD3FB5188EA
SHA-512:	07EDE682D56618AF7986C41A32A37356E62F6A3019835BA5736487DB0695D894741C3BAC60799638A9EF871DC3ABEADA0D8609C01A4468614BADE1FF7E655340
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424645/image/medium-84852f836f8723b8c69d216c9cf3dcd0.jpg
Preview:	.....Exif..II...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:04 17:04:56...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................03..........03..........0100....................l...............................................................................................................G.......2023:04:02 17:00:17.2023:04:02 17:00:17....@B..VLV.@B..................<.........}......_S...........................................(................................'......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772), with no line terminators
Category:	dropped
Size (bytes):	4772
Entropy (8bit):	5.822957082392679
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUjFw2t5VS:1DY0hf1bT47OIqWb1eFHt5VS
MD5:	BE3F84BAE80231D0C497EF9473FD176F
SHA1:	EC770C771453BDA8E01F3A059A4B4D3950B9838E
SHA-256:	F2BC30905AD2121C0A5D5569847DAF57C3743442EFDE6AD4145043FBF0187E7E
SHA-512:	BE1DB5F9E3B3C8DDFC8026ABCB09B687F46C0C22433A095C22E5042B528300AC416EBB9844F6B8290908127B9ADAB52A0FC6B4EEFB3FA3A73974AC91805E9602
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	320104
Entropy (8bit):	5.616222133932442
Encrypted:	false
SSDEEP:	6144:x4YhGbgBuzogk2639cM8Gp/c2N3tu9BW24nOm:KYecuzogc3AEb
MD5:	778AB999155A212FAA1FD675AE5B7FF5
SHA1:	82DE0D0435F4B736E15EE22CC0B7DECAF3B50145
SHA-256:	E96772CC9C522CBF15F999900B6821F01DF7AFCF21D3E50BFBC9378C77A54D86
SHA-512:	F0E49A278A68AE885F3A56384EC95C1BEBF6283186CFFEB70F4056EE6FC7D1F8DD68E397A781D144F23295580E918CC3240C32F2427E8E139B468BF64E525D06
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-SHR37QWWNF
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11881)
Category:	dropped
Size (bytes):	13121
Entropy (8bit):	5.385364209308327
Encrypted:	false
SSDEEP:	192:4xbnBC5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRFWERcxzPuiv3NK:4xbnBhjURHjXo2BtcCuzcxz/v3NK
MD5:	0DBD11FF1A37E906BBE2F25FB2CF3F69
SHA1:	7B57E9B3C5471DD0666CB696A40E212138D590DD
SHA-256:	3ED2F045F7B1912D4062CA83C617DEFBFDE477B0400EF3EEF2A85C1162203DC7
SHA-512:	EA03EC064EABEB9B620BCA2B90CDABE2CDD8778070582731B9BE889C75F1F7E02D2C426345BF04BAD6DC39BADEB4C9641209546493227436C2D050EC46C16944
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":769445,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[{"component":"url","match_operation":"contains","pattern":"weekendMonths","negate":false}],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.p

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	201240
Entropy (8bit):	5.3816896220407004
Encrypted:	false
SSDEEP:	6144:86Q9kWUaFl2R6D4gtjvv+iqHRD5Wc3oSyRhRj2Ng7My:iNtjvv+iqHRD5WAoSyzRj2NiMy
MD5:	20D5C4B1BD8FF4A9EF6D20AB75983251
SHA1:	A2D3138E86DE37A2A9C01161E9277D7917939438
SHA-256:	96B227FD0DEC8B3853C8AA559EB63E7AB437B9ECAFA92892B959776E3C45069E
SHA-512:	ED982652F9F7722A54EED39E8E032EDFDDC44ABA70FEC08849903F6B4B942DC25289EF30B90ECF16F38C127ADBDD530DA7B7C2017FFAFB69383DEABBA08D1FCC
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/actions/google-analytics-4-web/2c69bee66ca16e286c8a.js
Preview:	(()=>{var e,t,r={7948:e=>{"use strict";const{AbortController:t,AbortSignal:r}="undefined"!=typeof self?self:"undefined"!=typeof window?window:void 0;e.exports=t,e.exports.AbortSignal=r,e.exports.default=t},1291:(e,t,r)=>{"use strict";const o=r(6150),n=r(6086);class s extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e);let t=(e=[...e].map((e=>e instanceof Error?e:null!==e&&"object"==typeof e?Object.assign(new Error(e.message),e):new Error(e)))).map((e=>"string"==typeof e.stack?n(e.stack).replace(/\s+at .aggregate-error\/index.js:\d+:\d+\)?/g,""):String(e))).join("\n");t="\n"+o(t,4),super(t),this.name="AggregateError",Object.defineProperty(this,"_errors",{value:e})}[Symbol.iterator](){for(const e of this._errors)yield e}}e.exports=s},6086:(e,t,r)=>{"use strict";const o=r(1209),n=/\s+at.(?:$\|\s)(.)$?/,s=/^(?:(?:(?:node\|(?:internal\/[\w/]\|.node_modules\/(?:babel-polyfill\|pirates)\/.*)?\w+)\.js:\d+:\d+)\|native)/,a=voi

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 65128, version 0.0
Category:	downloaded
Size (bytes):	65128
Entropy (8bit):	7.9948169532328555
Encrypted:	true
SSDEEP:	1536:fnVCart9bfhiyCDOY9WmrWb0pA1YjEMV5jEy748kvWjzq6d+4dKs28:fcappfhLCDd3E0RjEMHjEy+v4ztwOX
MD5:	6C3C513944A6D77D323C005EC7C76557
SHA1:	21FC422998BC62F4B9D97F7408CA0C0123561258
SHA-256:	59AFFCD0842445FC868597AAF11DEE96E4D21BA1D3AAA4F78F7E09AA95485E31
SHA-512:	1077C9AC398A9790D13C4736DCC3BFB10C4ABF9B9FEBD6BFB0BD182B45A8257AA63FA4F04CFACF6DA4727EC0977A875B09C084C9A22846ED197BC831AF332F9B
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/GT-Walsheim-Pro-Light.39e23e8dcc12250f70551b8baf74b7cb.woff
Preview:	wOFFOTTO...h.......0........................CFF ...(......e.-?.GDEF..........dz.\|.GPOS.....,u..m....GSUB... ...F.......#OS/2.......O...`i..`cmap............/9".head...$...3...6.rH.hhea....... ...$....hmtx...X....... .n..maxp..............P.name...............Zpost........... ...2..P.....x.c`d```a`...p{<..W.f...@p....F.../.....230.D.r....x...pc.....f)..q._..zy../..g.m_..................tFNl..3...:W::._I...~..a..&..W.A..>..RQWR_..~JEW..]..m.}8....^.h_.a.CI.y-......{..SI.Ws..5.Xj......{......\|6C.4..~he.b..2-a[.....5...k.<T.hk...X.j.<V..ly...y..._.k..rp.....c..;e.......\|w..Q>.......;..u.}.{/eh.u.2.I.w'.O..W..~.$....k......!....G-.....6=..0.........0...3.Af....+,.cZc...RI..{..{kC........0...^..w....:T.zT`kS.wk..R..Sw...v.....G...p..k.!c#......T.H...&.FM@..M@_,....O.Yg......MNz..Mn....}VY........+I..~^...y......j.....W..L.#.A.~N-.g..Kg.@..ap.......`......M.d.Vm....).....{.......=R.~..~+....O.]..g...9A....Pd.Fa0...>6~L.....t(...RV...~...r

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18308)
Category:	dropped
Size (bytes):	18928
Entropy (8bit):	5.641565573664448
Encrypted:	false
SSDEEP:	384:qohDrghXUPMCvumkDNYuZtlI5SJr9eY/l4naes/bAgdZ2A6Hr0g:jfyUwmydVr9e5aegd2A6HH
MD5:	14829D397567F087775A174778343B90
SHA1:	DDB522B447CA0DE357BBABC7A32A906CA619C032
SHA-256:	6F9D05882DC626A84E3E41728F81D871A8C935B5735C9EA7570D177CC90767E9
SHA-512:	9B8BA9463A744CFF9C644E19B07D3D883D9CEB95A232D9E63EC51308A0388324D0C9E34D5538C2773195E5E70158E166DAF7B83ABCDE23D47D0686397886C5B9
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTML:F,createScript:F,createScriptURL:F})}catch(y){p.console&&p.console.error(y.message)}return T};(0,eval)(function(E,T){return(T=t())&&E.eval(T.createScript("1"))===1?function(y){return T.createScript(y)}:function(y){return""+y}}(p)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)*(d<<2)),T).H=T.s+1>>2!=0\|\|T.H,p)\|\|Q)T.C=0,T.I=J;if(!Q)return false;if((T.i>T.g&&(T.g=T.i),J-T.B)<T.i-(t?255:E?5:2))return false;return c(T,360,(t=(T.Pu=F,S(T,E?157:360)),T.P)),T.W

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3600, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=5397], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	73164
Entropy (8bit):	7.742925900080249
Encrypted:	false
SSDEEP:	1536:KTI9gs+jhAsLTIjozIypOZR7GHa7oMbp5ZRf8Ku8lG1Yp2Tvr:iIKIjEOrS6kMbp5HkEGiavr
MD5:	F3926BB9257547A91FDF3B8D3B167043
SHA1:	9CEA94A9115BE0F5AE1D17A245F0D7BD031220EF
SHA-256:	B4550F44BA616E0F1F716B128E09A3A14D6CDA0DEA23FD93A3EB61011138AECA
SHA-512:	81A0B246ED2EDDC92CAC63F181A46B2A84FB1D4850419F9EFF85B1523CD128FDDBF1CF687A93FCCF389784FD28FF505ED5C984645D7195479958905CCE6AA502
Malicious:	false
Reputation:	low
Preview:	.....hExif..II*...............................................................................................................................(...........1...!.......2...........i.....................Canon.Canon EOS R5....-..'....-..'..Adobe Photoshop 24.3 (Macintosh)..2023:04:17 11:42:24...........`...........h..."...........'.......d...........0231........p...........................................................................................................34..........34..........0100............................................................................................................................................2023:04:01 18:28:48.2023:04:01 18:28:48.8...@B....................................}......_S.......................................&...(...............................2.......H.......H.............Adobe_CM......Adobe.d...................................................................................................................................................

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12192
Entropy (8bit):	7.975728993642575
Encrypted:	false
SSDEEP:	192:pKeneoBp9NaxuDhRXhbUY4WXcqeVPYnzTRdc+eCfGEE9fsbKgeVjpRgr6ltopajw:7RBfXhYJYfeVPYJ3eCf7W7gojMbEzQ
MD5:	9B9BD56A8F539CC93C3202C9471B9F8F
SHA1:	775F6B85DE71283742CCC7007BA32333A5C1BB0E
SHA-256:	9A0C5B83830E4737E9350D2F611F1264E7F9CD319E0B6FDCBE2162F2BF8A30EA
SHA-512:	FFF918010EC270B8E17FDCCF3FBDE82C973D3CE132B2FC37A33586BADC2C5FCBE191CA4E1B1E9762D97C3C67773BD30233BC1A7EC6610E622F8416CBC862BF33
Malicious:	false
Reputation:	low
Preview:	RIFF./..WEBPVP8L./../..?./..m%..0...HM)g..]...#IR...@J.O.....8.l%...Q.....'....w..._.......q.w.g...,......-t...QN....I... ...k.7pK.e.<W.).9:mk....M1.~8.....p1.%LF....N..9-"i......(....?..^.`..4..E..5.5.Z+.\.t.Y.{....7YU.K2...HO.m...../D.E.H....i)..q`....O..........C.m.nt0%&&C}........F...{..1.....e.NDD3.s...8..........a...=s9......;i.T.t.4I..A"h.U.g.....ND.7........H.I..W...N....a.g.....%.{.B(.......8...G......Q........<[...}7<=...r.r?..7.C.d...r.h.n...u...........8.......s.;....[:...vM......C....2.+);..d.O..Za..{:....-.......l.\|A.Dn!.\|.....K%...1....M.......g..2.m.D'@......s.G..%.V..U.'....4X.[V.........M$...a.m%.[.#.H^.80t.....D.e.eSb b.F..d...}'e.0Z"i...\.Y...i...<T..(.E.p....(0..[.......'..^.AZP.7.$S\Y.U.IY.o.I..^.w....,Z,..%B1g.G."....-F..I....>.1.].+X.....(..}.MT.....u.JRB...ALNw.....[{.Z......)x.2........z.x.KiTby@.3..(.....[..Y..<b..M.[.q........$...%...~.[.. ......y2.-s.Y...pa....U..l1.....~PJ<86.Y....81F....q.Y....M..8.j...h.}2.=...g.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14658
Entropy (8bit):	7.951369003952926
Encrypted:	false
SSDEEP:	384:fqNtXfncdUBHiBVvPFUb/BmStqnUECSxXW0Dc8668uafW1:fWfGUBHuPCASUHCEXW/erafM
MD5:	5F5202C92F91F161B784BDA8DA735F9C
SHA1:	2E7E1A871B918C1B569103722D9616EC170CDFD7
SHA-256:	09DCA09F9FB0DB736342700CAC5300233B36D5328DB0C623B37FDE2BEB77AADC
SHA-512:	E7EF0096861BF7DAA8826DD1D0DE56F4F171F5F8A72D062504F7CC71A37E8E093212B0E5C6FFF2B8A6FD912FEF468EE93D8C40CDFE5EDDC3279CE825E29A08CF
Malicious:	false
Reputation:	low
Preview:	RIFF:9..WEBPVP8L-9../..?.'.4..$s."........]fo0.$[.... ..H.;7w.'nk.V.g...V(......]f......w.b....e........!o...(~.A.J<....b(P.a..~..E..?...?-.Be..E.(......d...n.I\|..$..Fd....8.a..#Qg...u.Q^.r..Tx.4... I,_..{.9..9V.'54.....8w...[...m...6.`.......68%UI.3.#.$.o...J/eze.m[..3... .....zAj.$.;.B.....U2=+E!.r&.@[>.a.Z.md.B.D.BB..f.\|.IU%2.[.....Q.C...3...)..B............2.......Z......y.Y. ...@.k3>...J,2..q\|t...1........m.b..D...F...TR....V...2....$Ms.xls.uN%([KS..A~N4.R.D......<c4....p......A8.....Z&...5g.(N..@.ip..C._.3..Q..d!QS.H..%..&..."X ...>d...O.i...m..P.l. ..DfM......j....Dlf+..%.#.Rp.....R&@.l..[:.U!..(&............eM=.,N.j-.....0..f.Z.z.(. KRp!.([....0D.i5U.8.. +.W......."G.m...l.^.5.s..4Z...4.,y.`3}-..$..,).@...L...1`..8.......$....q...?..pbn... .".tjY.j...$...U....t.d}K..P..).-.X.<e.l..Z.A.pR....b.k(....y:.........j..kr.kAr......>].j.kc.T. Yk.7h......u".$....D......Z....R..TP...$.....u....2..5y..dJKEDk.x.5.7.H...).....?....X......u.hc.[K'8.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	downloaded
Size (bytes):	3119547
Entropy (8bit):	5.4721211665528795
Encrypted:	false
SSDEEP:	49152:MYLo5+jZWFenGHXuCpV6k18VEcLlGDtuS5qGa/e0nr3b/cBkQABIx/Q9HGs:MXFBXv60ee0nr7NJ
MD5:	0E8A8522C3ED304F3EE410E371B52C07
SHA1:	32FD921ED6AD60A744F5A16F770CF05DF79C999E
SHA-256:	5DE8FC77D6A5F8C581DA7AF0E03D7CE3E724039AAEB73D90CD71931DC8E4F185
SHA-512:	8A3C09D0B4896E7A4C2D146F3570DE155412D99AAE39F9EFF043911CEA767F8EF4C15E4C49FB4D2A9E2EA618B3C84AF94F5E90BB937A6458B75C500EA7C6B441
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/vendors.d5a186ee975a655f6996.js
Preview:	/! For license information please see vendors.d5a186ee975a655f6996.js.LICENSE.txt /.(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[216],{93133:function(e,t,n){e.exports=n(50176)},74720:function(e,t,n){e.exports=n(23565)},74828:function(e,t,n){e.exports=n(94175)},66406:function(e,t,n){e.exports=n(68207)},58548:function(e,t,n){e.exports=n(82624)},93287:function(e,t,n){e.exports=n(44221)},33929:function(e,t,n){e.exports=n(15297)},77219:function(e,t,n){e.exports=n(71922)},7544:function(e,t,n){e.exports=n(72974)},4626:function(e,t,n){e.exports=n(69488)},89186:function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports},58886:function(e,t,n){var r=n(94513).default,i=n(4626),o=n(58548),a=n(93287);function s(e){if("function"!=typeof i)return null;var t=new i,n=new i;return(s=function(e){return e?n:t})(e)}e.exports=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!==r(e)&&"function"!=typeof e)r

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.60226109919606
Encrypted:	false
SSDEEP:	3:zXiCnSYERtiui5TxAS22AS22C3Tn:zyuSzL9icSfASf0T
MD5:	2CB4E8A6C560E72A5F11CF47200BDA8F
SHA1:	E52EE7E3F89AF993434127152F15DC0D198D0966
SHA-256:	996EFC547369007F3C65DEAE7FFC1EC1FD2D19FDE94C09ED1B3840FDDCB450DA
SHA-512:	A2CD68F2ED2CC2672EE5C0EE3C2AD50B3EF85C914FD0148CB3C3D136CFCD310B5A1C49993BB98862B9D72240EB0C19D8C971C16158012B85A9718002BA8B9DE7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmihBukKdU9phIFDSbzfSsSBQ0WyP4HEh4J9bcMe13jlb0SBQ09H1M8EgUNPR9TPBIFDVNaR8U=?alt=proto
Preview:	ChIKBw0m830rGgAKBw0WyP4HGgAKGwoHDT0fUzwaAAoHDT0fUzwaAAoHDVNaR8UaAA==

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 15:29:59], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	96144
Entropy (8bit):	7.737097755566131
Encrypted:	false
SSDEEP:	1536:WlC+fLR2Oh4EkvaC+fLR2Oh4EkAGBh26Ywocs4I+NjzF0CEnSZvjAuwv3n56PjLr:UCgR204EJCgR204ERS6cQqj/aSlnm3QT
MD5:	795835E6DB92368143C782DFDD2C4F0B
SHA1:	F2A2C3C791FE64678129CC4D72B2AB40E9358906
SHA-256:	93A69E22A09024D89D339E4F111C12D3FF35903C72D3B6F2E52EA8AD3C042631
SHA-512:	74F78AC66684A306C11EA8BC0D27E37F0D66248879E9BB78BA7D36BAE1C15A888EFAC74E9A1F7A3006A065EB0EDBDF980A3E028CC24DC12775A69B927849524A
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436885/image/medium-32f309f8ac15526c197661f878ecb351.jpg
Preview:	....4.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 15:29:59.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4................... ...........2023:06:23 13:17:26.2023:06:23 13:17:26.+10:00..+11:00..+11:00..P'..@B....F.@B...T..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11881)
Category:	downloaded
Size (bytes):	13121
Entropy (8bit):	5.385364209308327
Encrypted:	false
SSDEEP:	192:4xbnBC5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRFWERcxzPuiv3NK:4xbnBhjURHjXo2BtcCuzcxz/v3NK
MD5:	0DBD11FF1A37E906BBE2F25FB2CF3F69
SHA1:	7B57E9B3C5471DD0666CB696A40E212138D590DD
SHA-256:	3ED2F045F7B1912D4062CA83C617DEFBFDE477B0400EF3EEF2A85C1162203DC7
SHA-512:	EA03EC064EABEB9B620BCA2B90CDABE2CDD8778070582731B9BE889C75F1F7E02D2C426345BF04BAD6DC39BADEB4C9641209546493227436C2D050EC46C16944
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-769445.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":769445,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[{"component":"url","match_operation":"contains","pattern":"weekendMonths","negate":false}],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.p

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:36:05], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	138160
Entropy (8bit):	7.870734271431411
Encrypted:	false
SSDEEP:	3072:XrokVWbLvqWrokVWbLvqkrTLdinAmPZPea9noR0eN/JU9lhnr+WC:ksWvIsWvxrHonAuXnE0HDyX
MD5:	43619D499E13545739A706BC88F43F33
SHA1:	9635DBB88DD564FD6878BFC4CCE3A69228C653CB
SHA-256:	B7B9CDDB82ABA48E6DDCF11DD23059676E8A27FBFA4CEA406FB93B57A525108B
SHA-512:	46C3DD3A06FE784ABD605758F578BA3E7A6823110D337E961CF9F5773F19CF37E32009975A33D1ED884E36DE631D4DCBBFD3DD5743730E7161C46E140E8DE5FB
Malicious:	false
Reputation:	low
Preview:	....O.Exif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:36:05.DANIELLE NIEUWENDYK...........<...........D..."...........'...................0231........L...........`...........t...........\|.......................................................................74..........74..........0100....................l...............................................................................................................?.......2023:03:08 12:44:36.2023:03:08 12:44:36.X.y.@B....Q.@B............................}......_S...........................................(................................L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	249612
Entropy (8bit):	5.548959638453044
Encrypted:	false
SSDEEP:	3072:L+wizDGLETu6odn0j5CptcY0/H8+ARrrOS2WrDmKD0C8rT/FX9:kGLgu6oYozRiSRx0C8rT/FN
MD5:	AD49531611E28DAA9EB3C59BC84D0742
SHA1:	56B2E2ACCC8DAE6F219E477A6673011E9550A520
SHA-256:	D7A89838D0FE57A07246072AF0F9AB1B76605FD98F937F824A6FC049E6ECBDB6
SHA-512:	BC89D2A52757ADB2F7CFB4C22035F6BEC8D4873DB8EBCA59BB8A2F0B4F43DCAA82FF13DFCBA9E1ABA3B01D58EE5A6B87C4BEA80634A942534F8C9D546EE03880
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-871543968&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	dropped
Size (bytes):	100625
Entropy (8bit):	5.4765103185988
Encrypted:	false
SSDEEP:	3072:bHxNqTAZ2WJpBRVxztvtO7cCyahbdVIxqEety2P8WmM7XFcaVG+tPyZ+O7+/e9Do:bHjnDRVxztvtO7cCyahBVIxqEety2EWP
MD5:	835A75928B7D86C64AFB03767C8C99E2
SHA1:	159E13B4B5D16AB48C85780BE28CCA4976859CEA
SHA-256:	D422128EEA28CCDF1E598004F0E8CE733E387FD0B4978AC4DBA23FF131461C0E
SHA-512:	1F6655F420FA0C413A2960AEAE741D4CF501857D30060D2817D601DA34B9EEA279B22A1F7BFED552DC16418514E127874BF4AEC8A121C2D102D8DEAB22B91206
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('controls', function(_){var BJa,pL,CJa,DJa,rL,EJa,FJa,GJa,HJa,tL,JJa,uL,vL,wL,xL,LJa,KJa,NJa,yL,OJa,BL,PJa,QJa,RJa,zL,DL,AL,CL,GL,TJa,SJa,HL,IL,VJa,UJa,WJa,XJa,YJa,$Ja,JL,aKa,ZJa,KL,bKa,LL,NL,OL,eKa,fKa,gKa,PL,QL,RL,hKa,iKa,SL,jKa,mKa,kKa,nKa,UL,qKa,pKa,rKa,WL,tKa,sKa,uKa,vKa,zKa,yKa,AKa,XL,BKa,CKa,DKa,YL,EKa,FKa,GKa,HKa,IKa,JKa,ZL,KKa,aM,MKa,NKa,OKa,PKa,QKa,RKa,LKa,SKa,TKa,UKa,VKa,WKa,YKa,cM,$Ka,bLa,cLa,dLa,eLa,fLa,hLa,iLa,gLa,jLa,kLa,lLa,nLa,oLa,rLa,sLa,dM,tLa,mLa,pLa,yLa,wLa,xLa,vLa,eM,zLa,ALa,BLa,CLa,FLa,HLa,JLa,LLa,.NLa,OLa,QLa,SLa,ULa,WLa,kMa,qMa,VLa,$La,ZLa,YLa,aMa,hM,bMa,rMa,fM,iM,iMa,ELa,XLa,lMa,dMa,fMa,gMa,hMa,jMa,gM,eMa,yMa,CMa,DMa,jM,EMa,FMa,kM,GMa,JMa,IMa,KMa,IJa,MJa;BJa=function(a,b,c){_.Pq(a,b,"animate",c)};pL=function(a){a.style.textAlign=_.Uy.Dj()?"right":"left"};CJa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};DJa=function(a){return String(a).replace(/\-([a-z])/g,function(

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.riparide.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80302
Entropy (8bit):	5.195605632321911
Encrypted:	false
SSDEEP:	1536:YdCWn9Ax0pUFOiVmVG/Tiima9ouMDFew2:K9A5OymVG39ou82
MD5:	DDF66D492E77FC149633A129F1F09C40
SHA1:	233268A822798C5BA360B36C5EEC56574F03B070
SHA-256:	41764F6CF1CFA99FAD12F1EE265EA0BB292761F6B15D1F5432756524854CD77F
SHA-512:	2E3662E9F6D5B230FF08613E0C4E2C80497950639FFD126D0437D84FDEAB2EA618E42A75434465A4978BBE863F26AEA5739AAED26DA97EEA26DC70D713A730AB
Malicious:	false
Reputation:	low
URL:	https://cdn.rollbar.com/rollbarjs/refs/tags/v2.26.1/rollbar.min.js
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=6)}([function(t,e,r){"use strict";var n=r(11),o={};function i(t,e){return e===s(t)}function s

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3187)
Category:	dropped
Size (bytes):	269258
Entropy (8bit):	5.553969304822614
Encrypted:	false
SSDEEP:	3072:QpiwizDGLETu6obn005CptcY0/H8+ARrrOS2WrDmKD0C8rT/Weh:Q6GLgu6oLozRiSRx0C8rT/5
MD5:	DBA381E057E1475F6DA7E7BD90E360AE
SHA1:	64599627C89144E41FBCF4FCF8CF00B022BB6E2C
SHA-256:	317175FE894C2CCCF7C87C8C99D1D0ABD6261D16375F2603210F1D0471689159
SHA-512:	60E72A0DA72A60674D7D48E7694D6329B741550AF1ABF6CB11E2EA0AFB49F34C4D6095736F457849DDF1097859607ACC6C65B9B0103F9149B1517F77044F6F60
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"11",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return google_tag_manager[\"GTM-WDTTRC\"].dataLayer.get(\"gtm.element\").parentElement.parentElement.innerText})();"]},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"fu

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	139594
Entropy (8bit):	7.964716878355736
Encrypted:	false
SSDEEP:	3072:m+ivwAn+ivwAkm+CDS1ULqFfU0vQxVlxR85aO2hsnNt+ZA1DaYMp:mNlnNlnbgHFfU04LlxRhSNwAIYO
MD5:	637E1AF05C8157C50F3E3EDD13795D77
SHA1:	A59CA7EB8186B78D56E3FE81E32951669586288C
SHA-256:	5CFA015241CD76D087BA5C8511C2BF5B746F4B010DF50E804BD42313EE2B57E5
SHA-512:	A22AD9F3DA091406E3D9D271BA14C407087B302F6064D08A940B06707FC52B2B67849786F13D24F7C6BE664D8B8EAB944E14E2EEA20E664EBC55BDC038F06B97
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424890/image/medium-5d58451f9792b8030d79c2cade98af24.jpg
Preview:	....N.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................M......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?..P.R..,......B0a...y0....7....Z....}t.0..ra.F.7N.....>...R.G...\|,..@M.'.r".H4.....+.K..D....~@......C..L-.....]F.V.`B

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2782
Category:	downloaded
Size (bytes):	1337
Entropy (8bit):	7.864431939331979
Encrypted:	false
SSDEEP:	24:XSakXdi6RX+/uUb8DG9CkZCbEneIxNDMVIyQl7AufebMAvzu5XY0bo80JQUSZEJ:Xy8mYuUb8D0CV83LDMVvUAuCuE6Ub
MD5:	B0CFD2E8E8967AD708B94773BE4834A7
SHA1:	7FFBD1C9B53C72FFF013112CA9F8FD769B1572DF
SHA-256:	F441466B88FE286DE8847FF3385E72B7068B65B6E8948C8164FFB4AB1343CC70
SHA-512:	2805BCA742CAAA427DE36567F898A728EC2C992CDAA9AA0DABDD92FEFA6134722DAADC582A9FC72D4B4DC5C9F1724E822A6C33DA88ECE026CC05548BF15F4D98
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/hotjar/1.4.0/hotjar.dynamic.js.gz
Preview:	...........Vmo.6..._!s.".mw].Y%....}..u_.#..sDW&..J.9..;../I..0,R<.=........ia.Z._.rO....d...k+.2.o...83..N..../. ...?......'.vd...{kd.....u.\|%4.E.\|mu......!...{....$.3c.[i#.j&..'...1].....l%&...E.z)y........B.W..a......o...^H..N.iM..oy&.2Q..q..."..^.H...Q..b...6R:r..\:f.e..v!....C...f...RZpW..OhB.%."..mbX~.?G.Hd...'{f<.../...0....f..f.h..MS.R.v2...'.\...H.5w.A..S.X...ReX..s6..:.y..I..7m..aJ...f....(..:.S...hh.+.9.[..]....N.......].......X.{.f.q.T.2.....\|#<.y&..x~.n......0...}msX).CE[...z.V.K...k.3......%..v.d$B{.U.q.Y.2..'..J_.-...k...2,VY..3y].i(..fru..7...&.\..~[.i..W...R.c.C.\|....1m("..\|...?D:l.j..,H.....wHX...]3.od]z.....Y?k.......".SO....}...Q.5\|.r....?}:pt.H.'...:...+.7./,.;8..F$A...p.AIz.o...!...!-.R.2{..Jf..pFWWZn..Xr..((......K...@=....[......%.Qc ....0,W..\2'?.~.$l.k\.....#Jj.Q(9.`..NH...!..a\|....~8..&.k..j......u.9.Vi.,.. ....,.M._(..q<.............N.K\..c.3.u.........0.j.M.=.:46P<D#..f.....C..Q....3._.G+Y:`.6>...s...

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	3.5964477504193777
Encrypted:	false
SSDEEP:	384:6mWFhj/B9y+0GTnUMn76MfzG/BMWFc3Ma6VGyelnHbd5GXi/SVcCOlia78olZJHa:aT7f5d7JoolZJkIT
MD5:	8C211959F6447EFE1579C5A9F0B84553
SHA1:	F4AD087CFCA3BC7315F5A3F5E5B4A288D5F0CE08
SHA-256:	312027D3E98DDA1AC5E22B446D57B169B63CDA800789FDD08D54D488FD7A5AED
SHA-512:	081F30D5982277689E44254F75F3FF0C8C6A8F579BBE921469E9F8E155DB9B99F6C97FD64A513179BA26F5689B87842260D9A00E7572928DEF9D43CC870EF593
Malicious:	false
Reputation:	low
Preview:	......@@.... .(B..F...00.... ..%..nB.. .... ......h........ .h....x..(...@......... ......@..........................................................................................vh..vh..vh..vh..vh..vh..vh.=vh.ovh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.vvh.Cvh..vh..vh..vh..vh..vh......................................................................................................................................vh..vh..vh..vh..vh..vh..vh.Lvh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.Tvh..vh..vh..vh..vh..vh......................................................................................................................vh..vh..vh..vh..vh.(vh.{vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.1vh..vh..vh..vh..........................................................................................................vh..vh..vh..vh..vh.'vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 13:02:21], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	90010
Entropy (8bit):	7.758905000658642
Encrypted:	false
SSDEEP:	1536:uZmjwTaYprOyaAjZmjwTaYpTGatPmug5kvgexP6jQfcqXDZjb4+6cOhVu:uZmkTakrZmkTakTlmuSikMfFTB6lVu
MD5:	7F4D37C0A655F2A83CD9320D55D558F9
SHA1:	FCD2FD414ADB52B21182F52405DD64C65B4B9ED1
SHA-256:	D0F5EE75F56D9B2C5CB6A72C07A5FF03B5C4E33EA11783FF8E7EFA422868501F
SHA-512:	5DBE11A0B2CF37FDE882D378C93C8CBBDC6147883F9FEFF14981EC8D6406AA0B503419B5FA42A406D68C959AF7EF4BA94BD706ED17B137929A288CCDAFA727E7
Malicious:	false
Reputation:	low
Preview:	....5.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 13:02:21...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................75..........75..........0100....................l...............................................................................................................8.......2023:04:01 15:41:53.2023:04:01 15:41:53..t.@B..f.K.@B............................}......_S...........................................(................................2......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (908)
Category:	dropped
Size (bytes):	3103
Entropy (8bit):	5.510735401791146
Encrypted:	false
SSDEEP:	96:f1nwxyuy1jIb1ih7vYtsxoF6oCwlwCIzBDY:eyuyebS7vMsiFL5l52BE
MD5:	C34986F135A732DC6A2AD74B935A68E8
SHA1:	40055DFEADADD788DFDA1B87ACDB6D2C5482945A
SHA-256:	2B7D10CAD01C30138EB10C3EF677DD327A29F448AEF7E85B8C7B3EB1CC47FD2C
SHA-512:	C31B93DF1A9C15F849BC39EE39E9BF0E5F19DBA9D48FBC10C7D8436E67FDE63A9C036DE38C390FF3C1599F3E9737BD514558F66BFF9DD33313325FEDAA0BEA6E
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('geometry', function(_){var $pa=function(a,b){return Math.abs(_.wj(b-a,-180,180))},aqa=function(a,b,c,d,e){if(!d){c=$pa(a.lng(),c)/$pa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Yi(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Yi(b.lat())),_.Zi(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.wl(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Yi(a.lat());a=_.Yi(a.lng());d=_.Yi(b.lat());b=_.Yi(b.lng());c=_.Yi(c);return _.wj(_.Zi(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},bqa=function(a,b){a=new _.fk(a,!1);b=new _.fk(b,!1);return a.equals(b)},cqa=function(a,b,c){a=_.jk(a);c=c\|\|1E-9;const d=_.wj(a.lng(),-180,180),e=b instanceof _.Mn,f=!!b.get("geodesic"),g=b.get("latLngs");b=b.get("map");b=!f&&b?b.getProjection():null;for(let t=0,u=g.getLength();t<u;++t){const w=g.getAt(t),x=

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (930), with no line terminators
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	5.12292712843304
Encrypted:	false
SSDEEP:	24:0jHQfOuH41YiLY3WL3QquM32EhEcx+Ps2P2pCgrsLHOII:0EJpNqycBxWACgrsDOt
MD5:	06BFCD88AF438673A8BF9B845A11AA6E
SHA1:	D024A745032CBE115526ABE648D9FA0F0A10A681
SHA-256:	947AC0903521F5ECEEFC90637C066306A8CA67466CCC188BB0107FB7CFB532D1
SHA-512:	6A37EA27F3AD16DE6BCB4C386D9F09962902AE2F2FDF76B6723CFF8155CD0B9D4504D1EA6ED3C4D5C9D49BE9C636EB9386BB13C9A787A71F02640A8EC939D180
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/inner.html
Preview:	<!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=false/.test(e)\|\|(e=(e=e.match(/version=(4\|6)/))?e[1]:"4",window.StripeM.p({t:!0,v:e})),e=function(e){if(window.opener\|\|window.parent\|\|window)try{var i=((t=JSON.parse(e.data)).message\|\|t).action,t=t.message?t.message.payload:t;switch(i){case"ping":window.StripeM.p({t:!0,o:{muid:t.muid,sid:t.sid,referrer:t.referrer,url:t.url,title:t.title,v2:t.v2},v:t.version\|\|"4"});break;case"track":if(!t.source\|\|!t.data)return;window.StripeM.b({muid:t.muid,sid:t.sid,url:t.url,source:t.source,data:t.data},t.version\|\|"4")}}catch(e){}},window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onMessage",e))},document.body.appendChild(e)}()</script></body></html>

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1246)
Category:	downloaded
Size (bytes):	3490
Entropy (8bit):	5.384278352974127
Encrypted:	false
SSDEEP:	96:rGLx6tdpBneWBWTz1hAxBUUvz6S8TIYb9VH6n:cx6tdGB3TYL6/TlW
MD5:	BDDE56E47E5547D7D6F017D57D7E53DA
SHA1:	29815B3C01E9CCA53EA5FBBBCBD5C5289A05CDE2
SHA-256:	AB026C66559122A7442E73781C124E1E6DC2D6F3B82C699C44B6BC4FE8B7DB65
SHA-512:	89FC21F0C590F7E1F36E9A7788DB941E74297300AEA85200F70B1BFA119F72B6E1B779E81B8C961122FD83769440A5AFB84CC9FA628A83A17910686885FC350C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/overlay.js
Preview:	google.maps.__gjsload__('overlay', function(_){var Owa=function(){},JB=function(a){a.dB=a.dB\|\|new Owa;return a.dB},Pwa=function(a){this.Eg=new _.Nm(()=>{const b=a.dB;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Rwa=function(a,b){const c=JB(a);let d=c.Fg;d\|\|(d=c.Fg=new Pwa(a));_.Kb(c.Eg\|\|[],_.vk);var e=c.Ig=c.Ig\|\|new _.Ypa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Qwa(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.Om(d.Eg);c.Eg=[_.tk(a,"panes_changed",e),_.tk(f,"zoom_changed",e),_.tk(f,"offset_changed",e),_.tk(b,"projection_changed",e),_.tk(f,"projectioncenterq_changed",e)];_.Om(d.Eg);b instanceof _.Xk?(_.ql(b,"Ox"),_.M(b,148440)):b

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	83982
Entropy (8bit):	7.960899445884166
Encrypted:	false
SSDEEP:	1536:C74dDMRfcq74dDMRfc1Gp88gsc0KNnkdq4H2YnraYILAwFU2qF5kdfEQgB:CEdDMxJEdDMx8E88gsQnH4H2i3I052qd
MD5:	47A81684FDFC4BD5D83A538431DC7CFF
SHA1:	DA84D47177C82635A9BCC53DC8F8AB6EA3F667CD
SHA-256:	C491C1424D5AFBFB36EB1E9B5FBF2C4A4200040592D3966710DD47B53B31D2E8
SHA-512:	9F49F84DE61C204850D2A020ABF3B015F9F9A3E129E42E1BA502FA553DB5FE5BEDA04F9B6E764178D00EAB387E87F856278C22F4E3CF0F08A9400D5FC3F8C82B
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/1691/promo_image/medium-742140469fac69af92ad4cc2dff70074.jpg
Preview:	....7.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................6......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........*:JZjz....................?..(#u=+..v..x......$...E(....?..5..+&.....mg-...."..9...QP;..B..._..I.h..D.U.E.<ME0.v..........9...Rj1;..@MM.\|..i.!).....

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 622470
Category:	dropped
Size (bytes):	196869
Entropy (8bit):	7.998533262475691
Encrypted:	true
SSDEEP:	3072:/6gjI1dFxVBTVuqIQJfdhMu4BVB+mBLgom2imDiC+Wm7X9LbRoKfAa62ANSJvJ0N:5iZvuTQBdhMum3Z1duF7XRRazCOi1K
MD5:	72AFB86F841A4306B6702132C561FDE7
SHA1:	4178D6AA907C6802358CE9999C0C161F9EE336CD
SHA-256:	FCAB5EA9832DBE10288FC44037876C5BF0B3A732CE0EA40366F4C97B7AA0778E
SHA-512:	61CA72C0CC54F8425307E57EEA11461E8E96ACD3896E97D1FA35ADD091434FB6DD9A6C527C6F6A53098AED98EBE67DEEB5E8A4FB7700117E250DD625300619A1
Malicious:	false
Reputation:	low
Preview:	...........{..8.0...).m'#.c;q.rU..M.=..i......mk"K.Iv...\|...I..8Mg..{.m,Q.. .. ..?.i...F.,LX..'Q<wR?....9..0.X.......)..NZ.$.wo_...8o..i.....',..n.x../g....S......~..z=....2....a.......I.gM......L....N..n.......Y...Y....\|.1.+'n.v....O:....a..m.><vN..z...c..wph..<..'......6<..x\|p.92.......y3m...m.~.....f.ypb.v..........pd.4;..bf..7..](..=...7....S...B.....^..0..^......'7~......0.]..U.1.]...o..t......1s..TE.......+W?.Z.D?<.F.{6l6...I.....u.Y.fR.X]+`.4..6..8. ...[o.....f..L..........v.........!.i....w..BA.q.pj.2`...Z......Y.....L...c.C.B..,...23....(X.C...XY......[..wl.o..;z......=.C...A..q.H...5.1m.3'~.y.,...z.,.C..p.p...S.....PG.p..:....$....h....3_.@.l......g...6...>..........?..-..e.>....t....oSkhM..l.Ye.<....pZ...k...{ZI."...G...%j.G...l...3&. ~+..D1Ez...%H.i....10.=....x.........H;8<8.O..C...'.vO."..;....H;9<....\|GG.=..n.d...wr\|.......w.;._.Oz2...j9.e;m.tp...};......AVzx$..E..G'.....B.Nk...............rv...wm....HuN...83

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9198)
Category:	dropped
Size (bytes):	9270
Entropy (8bit):	5.141086013932976
Encrypted:	false
SSDEEP:	96:jJGAA61T1136GAzxXIzCzXEnMKHTo3Be+ODYTpU9WjfGgCnF8BpXzphl0sLmU:A61D3VAVXIOonMz0+OyjulaHLL
MD5:	00E9C65CBBA11C07C4BF4A6E2727B8EA
SHA1:	AC1A5D9B6FFCDE916A82169CD74C9A734BDF4A39
SHA-256:	129151ED0140041B198CE3B364A11861A3B5BAA5BB60475EBF7BEDB9B0FC94D6
SHA-512:	6C142FA3DE8B0452530D3E0DA7AF3B2CFCA2F0292282E07FF3AEF71426E791B650A8EDE02B5626B7ECF177B45B86630DACDDE9F9480B639E01C7B9D994535D2B
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t.__default)\|\|void 0===i?void 0:i.enabled)\|\|void 0===e\|\|e}i.d(n,{n:function(){return e}})},3162:function(t,n,i){i.r(n),i.d(n,{LegacyDestination:function(){return G},ajsDestinations:function(){return S}});var e=i(5163),r=i(4122),o=i(94),s=i(8404),a=i(1494),u=i(204),c=i(6096),l=i(9254),d=i(5944),h=i(8044),v=i(3098),f=i(3061),p=i(6338),m=i(7566),g=i(7070);function y(t){return t.toLowerCase().replace(".","").replace(/\s+/g,"-")}function w(t,n){return void 0===n&&(n=!1),n?btoa(t).replace(/=/g,""):void 0}function b(t,n,i,r){return(0,e.mG)(this,void 0,Promise,(function(){var o,s,a,u,c,l;return(0,e.Jh)(this,(function(d){switch(d.label){case 0:o=y(n),s=w(o,r),a=(0,m.Kg)(),u="".concat(a,"/integrations/").concat(null!=s?s:o,"/").concat(i,"/").conc

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	80302
Entropy (8bit):	5.195605632321911
Encrypted:	false
SSDEEP:	1536:YdCWn9Ax0pUFOiVmVG/Tiima9ouMDFew2:K9A5OymVG39ou82
MD5:	DDF66D492E77FC149633A129F1F09C40
SHA1:	233268A822798C5BA360B36C5EEC56574F03B070
SHA-256:	41764F6CF1CFA99FAD12F1EE265EA0BB292761F6B15D1F5432756524854CD77F
SHA-512:	2E3662E9F6D5B230FF08613E0C4E2C80497950639FFD126D0437D84FDEAB2EA618E42A75434465A4978BBE863F26AEA5739AAED26DA97EEA26DC70D713A730AB
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=6)}([function(t,e,r){"use strict";var n=r(11),o={};function i(t,e){return e===s(t)}function s

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/openhand_8_8.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:39:32], baseline, precision 8, 1298x866, components 3
Category:	downloaded
Size (bytes):	428141
Entropy (8bit):	7.953858010541414
Encrypted:	false
SSDEEP:	6144:k1P14TL0szE40bw3YKl1rkgtcuox85f8ou6v45W0wWURhfG7JRie6xrn:rw9MoKoxuox85f8qE2xRh+Taxrn
MD5:	6EB0D805DF85E40E424E1DF9F5844D06
SHA1:	544E8AB2C291A024CC5B5B38870FF21836D483F6
SHA-256:	7555E1057526724E7DF791C811789F893D77D000FBB3D7CE7476EF041AEE595E
SHA-512:	F869F4E7781189E186668CF7198C79363FD22EF0AD547C53F41007C2B9F8FA0123E9472E8C46AEB9E67161CD8F2D067B6D91F82152AC598160B0E0BD08B314A0
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/420570/image/large-feeea2089bdfebd0fc49e8d08e914551.jpg
Preview:	....OQExif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:39:32.DANIELLE NIEUWENDYK...........<...........D..."...........'.......d...........0231........L...........`...........t...........\|.......................................................................21..........21..........0100................................b...........................................................................................................2023:03:08 12:59:06.2023:03:08 12:59:06....@B...T-.@B............................}......_S...........................................(...............................?L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10441
Category:	dropped
Size (bytes):	3273
Entropy (8bit):	7.942037964167872
Encrypted:	false
SSDEEP:	48:XJzGjwOjux3QinW+uVDybhMwUqP+vbxSLE6OqNcqC7hzabOaYCUSH/8O+6I5QjQq:ZzGj56S7M/X2bt4dQCLNnHP+B6Q6vd
MD5:	A7CD49C834A0851140E3304C91CB34D0
SHA1:	34B9C9ECDF7B3DF39B09113B2CC4F624C8259BB5
SHA-256:	34334F5D769AB461D59BD77FF08998C66083E289E6ECE6D3932DEB594AE9F9FA
SHA-512:	B4078410098C3F28C173D130E6FE4A3BB30CFDF9EECD7CCDC667C9F3E270C724879C048D4CA0E891000ED4745E721C0667959597368D3A2005DF335F50682200
Malicious:	false
Reputation:	low
Preview:	...........Z{o.7....B...].]...e..N..!i.s......$&+rCr.(.~..!.)....w.....p8...8..L]O.,h..J....y.....l......./5.BIsz.\..j..jL.;c..9..{...o.7..~..`6.>.....k.yQ..y..`;...Z..AA...V.`.4.x.....Z.).^Q=......hFr.9...~...KF$K...{d..]M._F41S6#...xj.\+..&..W..V9.v..4.BMh4..)...Y..f.b.&.........!.yt'.9..2.S1Kr..9..pX..&Y-i..f%.6..hR)L9.b...&T$.. ..lT..F3.X..>R5O..oze..vFDr2...M.#Y...C.<.S3..N.DOs.A..gQ)..b.g"...+r......F.r.....n..mIt..v4..D.4.S.L...H.U......L...l..l\|rF...,k.p..T,.D..LAUq..m.J...Nh.&`F1...DF[.+,F.].../....:.-..k:..../...2...oPH?..'...Z..6..C..[ua...7t9..4.!-....>.^Vd<(#r.......v2........-.l-."...w.O.......H.5......L. ...p....P.Y.!;PX(o.]..Zh..`_.~..V...d.^Z%....S..N.?A...b;FT.s@&'..j.}.u${[.<m....-.5\.J.r\|...`.....}bq:..%.... .<...x.x...<.....%.KI.....w"B...5....L4.......8p....Ei..)`...4...."..0.N......U..n...._.....E../.........S5.@9.<....O.7.....G.l.....sj`%%.ZIP.............h..o..8'...?....<_......$(.,.x.V@9.r1..cS.......... ..p.b

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.80594093635111
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccASkr/+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsQ:VKEcoWKo7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	043145BF2702B847D1030711F68A146C
SHA1:	3576DBE1AA271BDAC340AD8143124E8C8AB97F69
SHA-256:	16E78DB134B6BDD67EAECA00702AA02D83F48F7FD3F12B0002433EAE2EDEF444
SHA-512:	039A556539DA6602D71CE0B746169706A2467D556792D1ECC62674B52D5816C18CBB8B2BFBFC05E8797350DD13BA37F278044FC1E18F36BBAAD31082F5A809EB
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:02 19:06:35], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	154005
Entropy (8bit):	7.878190449945662
Encrypted:	false
SSDEEP:	3072:8+k7CKSit5cl0aFe95koBvubDLVH56DYFXqnDNQEKeaZgoVfjzGz:PcZ95k8vcDLVHIDY8DCuBoV7o
MD5:	084DEF14B77CE7B0F27CBF64B9E31AB2
SHA1:	E0CC765AE5D84B22A3B0336A16E39CE3D9EFD4F2
SHA-256:	3334092AAA5984B24953B478356158DFC48E4D018AB251BA6BF8242C379B540D
SHA-512:	DA3B78CE8C91534F77EA55BE56FBACD4484C476AE4C68BA4F5DDE99A5DF196449A5BCE311DB8FD5A773F30CCE1F5BE7EE10CEBAABF1D5EB640CBA882121577B0
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/31435/image/medium-c50167556730931f6bff045ec6ed7cdb.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..151410..>..20190321..?..151410.8BIM.%.............d...+V.......Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:02 19:06:35...........H...........P..."...........'....... ...0...........2....... ...........0230........X...........l...............................................................................................71..........71..................................................................................................1...........2...........4...........5...................d...........2019:03:21 15:14:10.2019:03:21 15:14:10..`e.@B...T-.@B..................F.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18593)
Category:	downloaded
Size (bytes):	18731
Entropy (8bit):	5.230888467989251
Encrypted:	false
SSDEEP:	384:t4kEaDwiwt8q9JEI4lxdmuXMZuQYgfx/pJlbwBh6aI5giQX1f26FZU1p/:yVrB9JEzlfXQY6bSlZw
MD5:	423395FB538FB5756905E6C3B25D673E
SHA1:	A891AE431AC74206B23B67DDD3E99F65ABAAC61D
SHA-256:	B3AD91D1FD87E45871BDBEBFF87175A57AD2004C1578109406BA99BBB33407DF
SHA-512:	840CB6E6EE257058115DA02F9D892E9BD8A2A6F57B704AC8EE79C5D03DCF1384446079578E3205367FAA5B76A5FC169B5263825C9D518EC6806D806D51BDFA34
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/279.6c6cafc8f2f34e06731c.js
Preview:	/! For license information please see 279.6c6cafc8f2f34e06731c.js.LICENSE.txt /.(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[279],{43549:function(e,n,t){"use strict";var r=t(67294),i=t(33434),a=t(74865),o=t.n(a),s=(0,i.vJ)(["#nprogress{pointer-events:none;}#nprogress .bar{background:",";position:absolute;z-index:1;top:0;left:0;width:100%;height:2px;}.nprogress-custom-parent{position:relative;}.nprogress-custom-parent #nprogress .bar{position:absolute;}"],(function(e){return e.theme.brand.jungle}));n.Z=function(e){var n=e.loading;return(0,r.useEffect)((function(){o().configure({parent:".js-global-loader-container",showSpinner:!1,speed:300}),n?o().start():o().done()}),[n]),r.createElement(s,null)}},57918:function(e,n,t){"use strict";t.d(n,{Z:function(){return w}});var r=t(67294),i=t(33434),a=function(e){var n=e.emoji,t=e.ariaLabel;return r.createElement("span",{role:"img","aria-label":t},n)},o=i.ZP.div.withConfig({displayName:"WarningCard__IconographyWrapper",compon

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 71723
Category:	dropped
Size (bytes):	21911
Entropy (8bit):	7.990284604228861
Encrypted:	true
SSDEEP:	384:eGzePcKhqp8ppchvs0oqCDAJXULtUlxWlkl5HKQ5Ds+XLowwEYDVcDBC0EFYvncy:eGzekKop0cvs2CDWOulHvHKQ5AYOVlDA
MD5:	C467A63B2E7C3A99BE423ACE649014D8
SHA1:	91A3CB3EBF4F3996512A740FC202E1803828594F
SHA-256:	D070E8B363B2CB1BC55B94F1612A1AF673155DF31773E992007F8952E3661EE5
SHA-512:	956B41FC42B9C3C4E161AF37270D3EAEA9E5936B4A99685727235BF9A46BF05ACAE5A64A4EB9A305EBF1ED5F752DF8FB9912626765DEBF1EB82839DF2124CA92
Malicious:	false
Reputation:	low
Preview:	...........i{.8.0...........dFo.N'=.N..>.E.%.b".j...X..~....E.2..<.L."A.P...B-.......5.Xx....a...xs..E....K.0pw.Z..N}....`...[...e..N.......,rn.e.+q.........^yQ..I=......vz.O.QPi....3.\&..j...I..[.Q..i..,../y.....l.W.E.S....d..^.A2..V..S/....f..p....@.e.K>..0...u.&.d....X.i.x.f?...q.z<.G.n.C(..Z..U...lo:.e=....b...s....'..I.Qx]..u...~..0.-.X...Q......q8Z.y.8=...m.....a.i@.\|.].j."Gv8..".]w.%..1....f..3.....1....O.KfY.n.F....Y....r.@......3....4..,..?.x....K7a>.0.....?..~}...=;k..g.....4....$..O...u.6..<Jn.#o6.C.8.p...a..O..,a#............0..WY.....&....~..].5l._...\|w..C..K...[h,..z.y...#6...E.[,x0V.6B.n.....w....t...$.J.j.#=g.........6..%..?<k._.2.......;kx...`.LX.k..\|..".f5..G."\M.....w....m!l..E.U.+M.m.{;....A.Yg....1O.Z..H.,...6$J....".xT8C.Q8+.3...(\.Di.f.P.......>.....a..4a....u/.'c..L.A.Pe.I...%x..pA...............P..3.i.dAG.8.].H..#..:.....'.0L\.aY;a."..g70L..r ....0...h4.............a.D...m>.b..D..6...Yu.at.h7....*W<

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.239822782008754
Encrypted:	false
SSDEEP:	3:mSKUAo2mAooICkY:mSKUAoPAockY
MD5:	4E172CB857D099CD2B226E6FA6B4AE93
SHA1:	B0CCED3E0C84D1F7A692C202C1E403A85E396FC6
SHA-256:	29A46AFC042BF62E5DED8A46D728C668B1CA6A179984D27F45E2AF78C0A97D51
SHA-512:	E0262B2FBACA2A1776A8645F611D31BEC90144C81A3F961205FC67D9D981AFDD1A38EE50C0AFF2F32369C236EE6C1C519ECD39FAB42906AD145383B0727CA08C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgn1twx7XeOVvRIFDT0fUzwSBQ09H1M8EgUNU1pHxQ==?alt=proto
Preview:	ChsKBw09H1M8GgAKBw09H1M8GgAKBw1TWkfFGgA=

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 400x500, components 3
Category:	dropped
Size (bytes):	109837
Entropy (8bit):	7.968619605687691
Encrypted:	false
SSDEEP:	1536:/7z+esCwo9MU7z+esCwo9MmoLYm7nV04x07YLXuAIQ2X/o/Gex9jCdC+bpe8bohh:/BsCVBsCZeYm47YjuEN/GeNX+bbe54Wb
MD5:	C7BB13F0395FD0C4D699AA21ADB4162B
SHA1:	97EBD82089389D30D85080AEA41BDD8F15AF5C0A
SHA-256:	5603CC7938B861E36BF27061B82B9C2073AE4FE67221F73B312A980CB8FFF718
SHA-512:	FDEF3B0180C6BCFBFE59EC55F99D5DC31F561F6FEE4CA032B8AF34B1136F847D6F50B2B783F3E50CEEDE7C84081EB544F84AC61364AC43D10282BF9C41AD9332
Malicious:	false
Reputation:	low
Preview:	....P.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100..............................................................................(................................O......H.......H.........................................................................................................................................................Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...Z..........{..Gv.{.....f-F...cW..D...ER.9..WwWduT.....,sQ.6.$.Y....V......I8,..Q.%x".D..W...0g....G..f.O..k.i..:...m a

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:00:41], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	198087
Entropy (8bit):	7.921222290157694
Encrypted:	false
SSDEEP:	3072:YnqHXxthV8Y7c19DsO15UHA07uEaKzuthXxHVVLqecypRNBRihe0P/NR4Nlh0NCz:BBt0CcV150qEPzyBHVNqhuVAA0PFMU+
MD5:	56354B7CA45D2A172E883D57294CCF2F
SHA1:	CCEA2CA1D4BC4F3BB56EF547C363C58B02CA3590
SHA-256:	222FD2A23448D71F5467922AF6FBFB33DF1EF1EB8B001701FA015B23CFC923D2
SHA-512:	D0E6A30407D187B1B24325E6A9F6CABD42EBB24D7D132812EC4C858261B6B695B3AC98ACE93547197371DD3048242AC23A2EBED70E9B64C1EBF67F4D020EF6EE
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/31438/image/medium-e50dbdffdcc3c9ae6a3e5cd176beaf16.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..080658..>..20190322..?..080658.8BIM.%..........G.me}.E ..W.....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:00:41...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................07..........07..................................................................................................1...........2...........4...........5...................d...........2019:03:22 08:06:58.2019:03:22 08:06:58..`e.@B...T-.@B..........................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8114), with no line terminators
Category:	dropped
Size (bytes):	8114
Entropy (8bit):	5.749814250997521
Encrypted:	false
SSDEEP:	192:UlwIfKhrXEQccStlPCeY+pZUKbN204V4/:UlhSrXEQccSOj+pZ5eS/
MD5:	4B8664B76DD606116387C99FF8B87795
SHA1:	6433909A23EA9F6277F9FC0D97C6229DED1BCE06
SHA-256:	BC4608E91AA662B53DC81E8D76AB3EBFD4D754630CD387057C3AA5CB756C452D
SHA-512:	E330E2ED1EDE80D2C7EDA5EA114ABDB66B8E512A7CBC671739590D4D9516507BCF5B1D67B2E0D55EF9FDD4064682ACA6D8003A85EEAF507E3D1D50D13892A41C
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,B){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(555))/1(-parseInt(U(518))/2)+parseInt(U(476))/3(parseInt(U(448))/4)+-parseInt(U(447))/5*(-parseInt(U(553))/6)+parseInt(U(481))/7+parseInt(U(530))/8+-parseInt(U(547))/9+-parseInt(U(467))/10,g===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,461417),h=this\|\|self,i=h[V(490)],j={},j[V(483)]='o',j[V(515)]='s',j[V(465)]='u',j[V(544)]='z',j[V(501)]='n',j[V(487)]='I',j[V(461)]='b',k=j,h[V(534)]=function(g,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|D===void 0)return F;for(H=n(D),g[a0(488)][a0(532)]&&(H=H[a0(513)](g[a0(488)][a0(532)](D))),H=g[a0(498)][a0(496)]&&g[a0(499)]?g[a0(498)][a0(496)](new g[(a0(499))](H)):function(N,a1,O){for(a1=a0,N[a1(540)](),O=0;O<N[a1(550)];N[O]===N[O+1]?N[a1(556)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(554)][a0(458)](I),J=0;J<H[a0(550)];K=H[J],L=m(g,D,K),I(L)?(M=L==='s'&&!g[a0(456)](D[K]),a0(541)===E+K?G(E+K,L):M\|\|G

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:02:01], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	135209
Entropy (8bit):	7.868301751337817
Encrypted:	false
SSDEEP:	3072:QzxFsz/QswcbONkX37unL+IGDLl/hwkV9XtcOm+yOW:sQ3wcbGkXuL+RsZ/OW
MD5:	62BEE73E72E3840333AF445A943972BB
SHA1:	2D9374AAEF163DDF6F409A3EC0BD898098A8AC45
SHA-256:	191A051509854100FB0A49B82860A4E6037A3319F2363914DBE9AB7FA37AC6C5
SHA-512:	4E59DC29E427E8431B52237DE4DC171155E3C6D21C362226E213ED3BB6EAC26221A2CF24F42DA4A980D0D89822BC65D3D23AAA2E474F5F6417C509507471E248
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/31474/image/medium-c908c7363bf799a81648034ea30bb0c9.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..091209..>..20190322..?..091209.8BIM.%......MN..M.6F...TS[[....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:02:01...........H...........P..."...........'....... ...0...........2....... ...........0230........X...........l...............................................................................................24..........24..................................................................................................1...........2...........4...........5...............................2019:03:22 09:12:09.2019:03:22 09:12:09.H.2.@B..........................#.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Lightroom 6.2 (Macintosh), datetime=2023:03:15 10:39:32], baseline, precision 8, 1300x651, components 3
Category:	dropped
Size (bytes):	326984
Entropy (8bit):	7.942522393783743
Encrypted:	false
SSDEEP:	6144:o1P140WiVi8mlLDgwGXve9bDGRYLEOzpASg8c6lRi:ji08mlHgw0ve9+POqXmRi
MD5:	C70F6E06B2397048EBBF029F6EB2D5E7
SHA1:	055C482C05A9ED7F187A72F3FDB8EAF56CCD1996
SHA-256:	E740BB0FE29569C91CA659B795F205F8253E7B46ECB1D3EF96D09EF82DDDE3E5
SHA-512:	D9BD621286A06FE3B0BA44947A22D17A19BB4048AD03BD592EF1A092BFD15DAE24AA5F5C1D938911DE57BE7005F16264CCF9B6D13DC8BDBA2A0E420BBB107DD4
Malicious:	false
Reputation:	low
Preview:	....OQExif..II*...................................................................(...........1... .......2...........;...........i...............Canon.Canon EOS R5..................Adobe Lightroom 6.2 (Macintosh).2023:03:15 10:39:32.DANIELLE NIEUWENDYK...........<...........D..."...........'.......d...........0231........L...........`...........t...........\|.......................................................................21..........21..........0100............................................................................................................................................2023:03:08 12:59:06.2023:03:08 12:59:06....@B...T-.@B............................}......_S...........................................(...............................?L......H.......H.................................................................................................................................................... ....Adobe.d.........................................................

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65449)
Category:	dropped
Size (bytes):	3119547
Entropy (8bit):	5.4721211665528795
Encrypted:	false
SSDEEP:	49152:MYLo5+jZWFenGHXuCpV6k18VEcLlGDtuS5qGa/e0nr3b/cBkQABIx/Q9HGs:MXFBXv60ee0nr7NJ
MD5:	0E8A8522C3ED304F3EE410E371B52C07
SHA1:	32FD921ED6AD60A744F5A16F770CF05DF79C999E
SHA-256:	5DE8FC77D6A5F8C581DA7AF0E03D7CE3E724039AAEB73D90CD71931DC8E4F185
SHA-512:	8A3C09D0B4896E7A4C2D146F3570DE155412D99AAE39F9EFF043911CEA767F8EF4C15E4C49FB4D2A9E2EA618B3C84AF94F5E90BB937A6458B75C500EA7C6B441
Malicious:	false
Reputation:	low
Preview:	/! For license information please see vendors.d5a186ee975a655f6996.js.LICENSE.txt /.(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[216],{93133:function(e,t,n){e.exports=n(50176)},74720:function(e,t,n){e.exports=n(23565)},74828:function(e,t,n){e.exports=n(94175)},66406:function(e,t,n){e.exports=n(68207)},58548:function(e,t,n){e.exports=n(82624)},93287:function(e,t,n){e.exports=n(44221)},33929:function(e,t,n){e.exports=n(15297)},77219:function(e,t,n){e.exports=n(71922)},7544:function(e,t,n){e.exports=n(72974)},4626:function(e,t,n){e.exports=n(69488)},89186:function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports},58886:function(e,t,n){var r=n(94513).default,i=n(4626),o=n(58548),a=n(93287);function s(e){if("function"!=typeof i)return null;var t=new i,n=new i;return(s=function(e){return e?n:t})(e)}e.exports=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!==r(e)&&"function"!=typeof e)r

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6098
Entropy (8bit):	7.920569924194017
Encrypted:	false
SSDEEP:	96:OXr1YwfDwiNR9q/xnPkjzaAQFZtwB0DAW+Ug2VhMECdnbKaM6P/gUjocN4rB7XTS:RkN6PK2AQfiBukUg23MEaVM6wUUcN4rM
MD5:	6FAAA582FDF281F87092F670B16158AA
SHA1:	E14096CDBDD99D2A1097F810FA0EB5BE6F28537E
SHA-256:	8871123C9A1A0124A05580E86BEFC476CBB05EA8E963295263C5CE576FA9F57F
SHA-512:	507B8FD3DF8A7A5B785DF4DFA82AEAEB90B41708BD5492C9BADB7AECFFC1BB096692F658B9E676232E4623C4B0338D5D1C0EE07AFAC606E8AFBB13B9C3AA898B
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i115!3i80!4i256!2m3!1e0!2sm!3i711462225!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=115124
Preview:	RIFF....WEBPVP8L..../..?.'.&..4\..(HE...s..l#.V...V....."w.q$[.n..@..p.H@..}.?...w..@......x...m.o.<...^..Z?`...,c..k..YK......\.....z6...7.....R3.),.bY'...+$.o...m......<..[......\..^s....\..6.....T...${%..J..H'I.2.^I.}.Z....V<.'>F....s"..x.\|.N..A%ldD..$..Y..`...${6C%~Nd.Ha...J....^.d/I.M..5.d.-IJ....0...x..............1Mr/%{J..]7.-I...x...y..s1...6..\|~1.....d.......D.......@.....<..'.8.<....\..4i....k..-...RH.4.hi@X..h....B...$q..N5{{j.N3.c..1.Xm..(.......4ip..].O....h.H.U.}C.......E..@.8..g........5..x(.. ...=..s..i....kD..lk..^Q....z.%..>......7.lZ...I.o....j...24...u.z.%.K.w..K.>..D._..9..."8....k..d/.$.......<...<.....O....9R{D5..`D{..hz-.dC...`.4iZ.0v".<...<..t.x..D..\..}.M...+I..PW.=PW...iI..F....B.$........k..e..T...W..P...M..7....s.=N...:.Y..=...Z....IV.....T@...V..B_......x.o.G.ui..]c.......5U...~ !5)+.u..PF..@=.....S<x%o....rK...X&.h.....dCrhzJM....@..J.@.....Z..'..bz..O..-)6Ht.0.a....^...@=T.@...*...{Y.....,N....S<B..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9305
Category:	dropped
Size (bytes):	3181
Entropy (8bit):	7.939269325735068
Encrypted:	false
SSDEEP:	48:Xus0ftPBxSJpcGRLfo4nnX/SiRH1PX3lhHnI6H6PI+NrRKLuUMyrxxBZ:szxSJpcr4ndH1PHlI3VwLu05
MD5:	41D391D5B119FB8C4FE6EDD0C6FC1D21
SHA1:	C8968E33AAB3614DEDA148DA7316DFEEF8C904A4
SHA-256:	30A371F6FBD61C65D6F42A5CA7492BDFC42EA3436D8ECAB9F367DF6DC68E7F7F
SHA-512:	DF53A851ED6DD5DE1887315393BCD26C3F3D830995F3A297AAFFEBFDED035DFD2FA1DB1B8D14F43284BEB23BCDEE146692ACC948933B1F5FF420540AF4E5E028
Malicious:	false
Reputation:	low
Preview:	...........Z.s.6......w....~$m.R.L&.....$v;7...&a.)...hG......>%.no&c.x.v..~..-....=.."......d4...0l...R....#.~.Kx...w..>..;..7..o..?.`>....F.)..e)R\..F.b.Tb......v...u.<2..7....F.hB.3;...~....9I...'..4}N.......G:..tN._\|f...%.4...WT...'J.L.U..<.%..x,gz>..qQ.._`...Cr0E9..Q.=h.(X2d35O.......8.SM.Z.(....4a.FS.(n%.iQ....n.r...F5..h.....^...^..............Q..c.D..\|z..$rV..B.~.U..x..^)..'.0",..5.....'2....uEd..~rP..6i..hK~..&..9f_....:Y.)Y.!.d.....j.0.d5,.D..Y....O.U:^&..8M....m....u,.1.....%..6...f.\2E/r6....LD.U...yoP.7;.....y9..Z^.\|<v......bqJ....7...U^.I.Vfe.".&...L.a....'......pl.U..,......B.3....H.3......N.$gK/\..5,.e.G..(,..D.$..Z.&.j......@..U2....k.".4..Hs\8l........W..\|.u..$\.$..h!.Y5..W.-....\..4......I.....N.5.$...i...].4...-Eq..w..!..x.m..#...M.kb.Nh.-68p..K...... .tV..aw..}..g....Y@.<.k\|...hPj6B...N..0.....@4>_}....9>..r...5>...g...o.8<....._..\....=>U...%A.{..^].]...+....PpeL.'..i&.(.C .....o..\|...GO.\.?0.B.b5X%2.^.#A.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4271
Category:	dropped
Size (bytes):	1879
Entropy (8bit):	7.9019247183819115
Encrypted:	false
SSDEEP:	48:Xxv8AXyz70+abxe59zh/NCSKx//hkI15hL8d3aPkZ1LN5u+ClZG:N8Iyz7lqSI/hJh4LZ15U+0ZG
MD5:	DE0A11B95ACA20DC7CC5BCEC42ADC9E4
SHA1:	D8CAF184A39CBBF2FD55FBF5E7E477C1B64D860E
SHA-256:	58BBE7CADCD9BF4C2CCE390E289E135F2D83D7A679D213D80F2DAF2C1E0D2464
SHA-512:	25DDC03ABAC771E6F39D2CE3DF06FCF67B2273BDD5F69E07228A95D5B2065490D6CF626DDBA91CE30DE6783AEC78E2D20C033320EC69D7D9CECC6E19579664D5
Malicious:	false
Reputation:	low
Preview:	...........Wm..6..._.#]Y.7.%W).....[d...Aqg..-.6.Yd(j.\|...=C.X.n....!93.7>3~Pe....U....o.T...>..W....)]VW.....,;,c..:.......E.....z.}.......Z..z...H[.M..+]m.I....7.;...COOd(..6..vR2.....e.\/X.......\|.H.7&.d.q.4..Hq3...n.Af.6V;..F.[Q.=....H..q&.".LE....tZ...!-pY...('..d....X........_.5T.i....4.j.....(..$...0.......v.0j..`1D.1.......~8.\......N......#...Y..g..y...`......+S.....[v.1.U.....N.t&.....f...,.5LPR...%S....D.......Uik,m.J$+.g.;L.M.G.....e.f'Z!TqA..{..w.1.g.e..rc.i..k"...m...}F=.A..NZ.d......D.......g..C.'.........;..YUn~....s7>.eHVQ.$..y].....RV.[/.l.....I..J.U..E...T..r)N...@......S..O7...\v.eV.'.....!`.......u...^8x...T......+..........Q.5......[.^....#......N.7h.;......... .L.u."%..............h........;..C.0...nM.H>\&J.%....W..Zt..k`Q}B...#C3...t\.....yp..o...:....N..hPWrB)G..-..0..{...h.w../@...P?. B:..h....'...?.W.3.7r.=..weu.."...a@.D?..'.........b.eS.(.....>...m...o.......D.....`.m...[U~.R.d.04....IT..rb.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2242)
Category:	downloaded
Size (bytes):	80505
Entropy (8bit):	5.469154106732599
Encrypted:	false
SSDEEP:	1536:O/WP4iERTPGRjGd0FU6b4EEtKykfLPmpuZCmsr1jzmGGz/X40kk4BPXUub7EJt:0Wgi4PajGd0FU6b4jKykz+usmsr1jzIX
MD5:	41039E33B02C8A2C2518E4A5729873BA
SHA1:	E58E51EAF60767EB8AA6886F447F6E8D21E048E7
SHA-256:	6709B08448650F2444E9A96D782E86D51DD781F815FF978B0D52920536A8BC2F
SHA-512:	07545CECB287C29B5923E6FBFC07D722406D8167DF4B38D8D3A5AC8CF82D059F6A4F79C0B784C0E3E88D80D03377BB80EC5F7128AEF3C53F130C2C18EF562074
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/map.js
Preview:	google.maps.__gjsload__('map', function(_){var zta=function(a){try{return _.ra.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},Ata=function(){var a=_.Yq();return _.Ci(a.Gg,18)},Bta=function(){var a=._.Yq();return _.H(a.Gg,17)},Cta=function(a,b){return a.Eg?new _.wm(b.Eg,b.Fg):_.xm(a,_.fr(_.gr(a,b)))},Dta=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Eta=function(a){return new Promise((b,c)=>{window.requestAnimationFrame(()=>{try{a?_.fn(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attem

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1956
Entropy (8bit):	7.874963651145711
Encrypted:	false
SSDEEP:	48:LMnGwoE9z0YMpfIbYTUE/dIMHW6hu2Ww8fSql6jqN7zN3/yG4N:LMn1ogz09fI0xJZwfEGeG4N
MD5:	A62D1D504D5DACF84F7CB43EB7B1AB08
SHA1:	07B07D650C6986692D39CEA535E4039C758B73CC
SHA-256:	CA757D589E06F8DADC6CDD1B9D739940B75FDA091A6FF2542B4804F4063E34C3
SHA-512:	BB73050510CDD0A7659CCD037FB420DE866B73D5C5BE6441407E3C44834FAE1E34F12398CD9DCFB2E6F6999E79D036B3FE056ACE133651E7522E3E89F6A2718D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i115!3i79!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=26536
Preview:	RIFF....WEBPVP8L..../..?...&..4.s.O.......`..@...I.9.{x....sa\.6+.<........(.......>..[u..).>.\|.c..G r,......:a.L....B..$w.....n....5.....E&E...U.E.3...wZ.....R.<ti..3b.m...h.=iK/.y....._..s.MP"...Y....E..p):..>O.g$.z.%o..{.p..NtG.].s1.bbC..O!.......].}...}r..............c.L.H..9...b.Eh.B.8+.i..=.6.B....\....`.<....+.....0.C...s.U@s....V...Ff..JcI._..1.Y.26%...s.+.C..I.'{..?O....:\>..t.G.Y.....O.wt..I. .+..=.B>....e.......?.. d.>..l...P....#!...\|..g.....'.).....?.ac..\|.C\|B.m.u..O...!..g..}.!<..m..gR..(>.}.........7...6Hl.....J......4l..L..%zR.]....d....II..m.o..F{D...AlH..R0...^.Oh.}........#..M.6.....c{......./k.h.k.!I.$$...5...3l..6.......m.6.?..Y\|R...M.........}.$6.~.#6.OK..l....h......tG.a.U....6....L......>H. m..............!i.I.O...y.?.m..v4l.....?.}c.6h....V`..>..A....9.}...6i.1:.}V.?*..>...>...S.._...jt!..@!.[.8dW<q'.p....x.8.}f.w.9u}n.;..V<Q<R....$.../(...:..\QT..._..}..e.2N..s>..."..N../...}..y..wcn..n4.u?.3/.e^..W....Tp...@.&.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 14:19:04], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	101444
Entropy (8bit):	7.782421430539202
Encrypted:	false
SSDEEP:	1536:K00OlXdLeycydAZ500OlXdRGP/KjHTvh6A5E106WE2jljIN1dCiOSNurZFhbqW:KclXdc5clXdRis16A500D5jIrwiOSQr
MD5:	84DFFA5BB07F753D012C099720A6C22E
SHA1:	1B71A95A6100A5E6F5E104D04F8E3E8BA8C8270F
SHA-256:	5C16D685BA0297B4AE2542460D5F7BC2013D01BF8EF125E9F7806DFE30F6FFCD
SHA-512:	97CCE25E3499E0BB90A273A4AA8D002C2D83C12492E7D218D159A6BAF23696ED09FEA8CCA5D4832DEC8764A1F6BB190EF959824A44090E967813EC7756A8DE2D
Malicious:	false
Reputation:	low
Preview:	....6.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 14:19:04...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................77..........77..........0100....................l.......................................................................................................................2023:04:01 17:10:11.2023:04:01 17:10:11..=..@B...T-.@B............................}......_S...........................................(................................3......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.5964477504193777
Encrypted:	false
SSDEEP:	384:6mWFhj/B9y+0GTnUMn76MfzG/BMWFc3Ma6VGyelnHbd5GXi/SVcCOlia78olZJHa:aT7f5d7JoolZJkIT
MD5:	8C211959F6447EFE1579C5A9F0B84553
SHA1:	F4AD087CFCA3BC7315F5A3F5E5B4A288D5F0CE08
SHA-256:	312027D3E98DDA1AC5E22B446D57B169B63CDA800789FDD08D54D488FD7A5AED
SHA-512:	081F30D5982277689E44254F75F3FF0C8C6A8F579BBE921469E9F8E155DB9B99F6C97FD64A513179BA26F5689B87842260D9A00E7572928DEF9D43CC870EF593
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/favicon.ico
Preview:	......@@.... .(B..F...00.... ..%..nB.. .... ......h........ .h....x..(...@......... ......@..........................................................................................vh..vh..vh..vh..vh..vh..vh.=vh.ovh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.vvh.Cvh..vh..vh..vh..vh..vh......................................................................................................................................vh..vh..vh..vh..vh..vh..vh.Lvh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.Tvh..vh..vh..vh..vh..vh......................................................................................................................vh..vh..vh..vh..vh.(vh.{vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh.1vh..vh..vh..vh..........................................................................................................vh..vh..vh..vh..vh.'vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh..vh

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9198)
Category:	downloaded
Size (bytes):	9270
Entropy (8bit):	5.141086013932976
Encrypted:	false
SSDEEP:	96:jJGAA61T1136GAzxXIzCzXEnMKHTo3Be+ODYTpU9WjfGgCnF8BpXzphl0sLmU:A61D3VAVXIOonMz0+OyjulaHLL
MD5:	00E9C65CBBA11C07C4BF4A6E2727B8EA
SHA1:	AC1A5D9B6FFCDE916A82169CD74C9A734BDF4A39
SHA-256:	129151ED0140041B198CE3B364A11861A3B5BAA5BB60475EBF7BEDB9B0FC94D6
SHA-512:	6C142FA3DE8B0452530D3E0DA7AF3B2CFCA2F0292282E07FF3AEF71426E791B650A8EDE02B5626B7ECF177B45B86630DACDDE9F9480B639E01C7B9D994535D2B
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js
Preview:	"use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t.__default)\|\|void 0===i?void 0:i.enabled)\|\|void 0===e\|\|e}i.d(n,{n:function(){return e}})},3162:function(t,n,i){i.r(n),i.d(n,{LegacyDestination:function(){return G},ajsDestinations:function(){return S}});var e=i(5163),r=i(4122),o=i(94),s=i(8404),a=i(1494),u=i(204),c=i(6096),l=i(9254),d=i(5944),h=i(8044),v=i(3098),f=i(3061),p=i(6338),m=i(7566),g=i(7070);function y(t){return t.toLowerCase().replace(".","").replace(/\s+/g,"-")}function w(t,n){return void 0===n&&(n=!1),n?btoa(t).replace(/=/g,""):void 0}function b(t,n,i,r){return(0,e.mG)(this,void 0,Promise,(function(){var o,s,a,u,c,l;return(0,e.Jh)(this,(function(d){switch(d.label){case 0:o=y(n),s=w(o,r),a=(0,m.Kg)(),u="".concat(a,"/integrations/").concat(null!=s?s:o,"/").concat(i,"/").conc

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 860493
Category:	downloaded
Size (bytes):	187117
Entropy (8bit):	7.998264893754537
Encrypted:	true
SSDEEP:	3072:2kACHcTMWaThLlRff6M0QSQgrLOWVAf9KlDMNONZP6Fbmhsd07+6iRq9/E:2kj8TXehLlRn1bSFaWQMlgNONZPDsi7y
MD5:	A419FF95AB0FE313515D05FEC50E9965
SHA1:	4929CAD096C0F52E59B4A99C1DCE70D1FE749DFC
SHA-256:	8D962E43EADE9FE508B5B48B26994FC7185C55E7E07A7952B0A7C1A3A1A3B7B5
SHA-512:	D9FB57F9D40FDDA2CA19BEAB2E90AD17E8D82842C065A308DB7CB613AFA3344E49D61C0BEE7FD7BA23271FF42FCB0F9D9E7C4D15A2D6433646579829E300EF36
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame.75f8d952.js
Preview:	...........yw.F.7....0g........X...U.g.y.8.;...W."!.1...(K6..._5vB.....E..........<.....L..5....x9.M..q.S."I..y<I.@...HK..s.d.....;.7K..\|..<8...Q..y.....N.=.g.h.m..r{y.~g..w......8.8....).....l9:...+.U.)O..."....<-.J.C...t2Z.D..._.dmZ......qg.,/.Sk.N:.<......L.Y{n/;Y.ire=..g.vk?.R...t`Mf..qb.O..W..iuv.....J..l...~.....>?...O....u......z.J.....K.>=.9./.m{.Y.3g.,f....^:...\|..Q.h......~t...sZ...{.)-..s..%f..<{!..F.P.6/....zAhG...E......P.~.......ha....=7..@..b.....G...^....1{..H{v....<=T......H.y."0..5cI.H?...SJ..k..k.O..T.Z.H+9..O~.....V..Q.@Jj8...".v.)..>.7...c.B..=.3.8..C.k.V.b^.F..l. ..2.]-....4...yU.U..QC.E>B...1....\|=.@S....._...Gs."..8.)p.-.......M0$..$_.....}a.nR.H.....x..y...m..iz..B...K[..........}.sQ..\M.\|..e....A.?.S2J..}....UdZ...*.l...;.D..`.....^.;.>.a:..q.....05-.U....&P5..X.mG.....W.(....E.,.y.I.eG:..h#..o.1S\|YtWF.-..`.U..."J.:..aw..b.....e...?.....{..^.t......l2Z$..lw..0...5..11u..c....g.....N.;.x.N...g[t.I\|.:

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3600, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, width=5400], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	66886
Entropy (8bit):	7.501032195725173
Encrypted:	false
SSDEEP:	1536:ohmcfR6cmhmcSoxYorHmW6lnkYmeLeCXwpCjer:oAA+glnkYmAgpCjer
MD5:	D1C1E3FFB98DE7B11759664C05F55F4D
SHA1:	EBC16491B7FA2DA2113B95B291919EA6D9B14A4C
SHA-256:	958C6C591D275CD0D425FE439FBC3F020900835FA3CF02286402CCE91398B7C2
SHA-512:	3439234A8B9A6A08E3D7B2BE277C5E549868581D8DAF978951C1BEAD8D3FE421E941D4A06079BDC752CA9BCF3C161B25AE0201A01F21C6F19BA7D3F78658CF7C
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/137/portrait_cover_image/w400-86f4a7aeba46aa15436383aaefb63e27.jpg
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......2.............Canon.Canon EOS-1D X.......'.......'..Adobe Photoshop 25.8 (20240411.m.2581 c235e07) (Macintosh).2024:04:15 10:31:04.!........................."...........'...........0...........2...................0230....................................................................................................................90..........90..........0100............................................$...........,...............................................................1.......4...2.......B...4.......b...5.......z...........d...........2019:03:21 17:34:32.2019:03:21 17:34:32..`e.@B...T-.@B..........................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846........................................(.......................................H.......

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, xresolution=144, yresolution=152, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 18:50:01], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	50139
Entropy (8bit):	7.486655219237192
Encrypted:	false
SSDEEP:	1536:ORJUdp4GYwlWotU5/wsMM9vkyw2BY32LqU:4y4LHtWs/9TV9LqU
MD5:	6DCAA2451ABC785B8217A8D00DEFF962
SHA1:	7A59732CA1CEC8710C1B95176DF562D9A3AAE80E
SHA-256:	A5A36579CBCF7A11245615110B8D93C0CD61FEBC3D127BFDD55280F28D5A95C6
SHA-512:	9BA698C2B7B8364EED0C60D65C0353216030D65CB1E55DEC3E833D900DB0B9E0F03E630C31D08329A3245F4A735B9BD3AEB943620263309E47DCFE667333E1B4
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/500941/image/medium-0aab8e48359365661fe5f14d51f56967.jpg
Preview:	.....BExif..II*...............z...................................................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 18:50:01.!.........x..............."...........'....... ...0...........2....... ...........0230....................................................................................................................29..........29..........0100....................l...................................................................................................1...........2...........4...........5...............................2019:03:21 15:54:12.2019:03:21 15:54:12.H.o.@B...T-.@B..................F.......................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 622470
Category:	downloaded
Size (bytes):	196869
Entropy (8bit):	7.998533262475691
Encrypted:	true
SSDEEP:	3072:/6gjI1dFxVBTVuqIQJfdhMu4BVB+mBLgom2imDiC+Wm7X9LbRoKfAa62ANSJvJ0N:5iZvuTQBdhMum3Z1duF7XRRazCOi1K
MD5:	72AFB86F841A4306B6702132C561FDE7
SHA1:	4178D6AA907C6802358CE9999C0C161F9EE336CD
SHA-256:	FCAB5EA9832DBE10288FC44037876C5BF0B3A732CE0EA40366F4C97B7AA0778E
SHA-512:	61CA72C0CC54F8425307E57EEA11461E8E96ACD3896E97D1FA35ADD091434FB6DD9A6C527C6F6A53098AED98EBE67DEEB5E8A4FB7700117E250DD625300619A1
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor.6349e54f.js
Preview:	...........{..8.0...).m'#.c;q.rU..M.=..i......mk"K.Iv...\|...I..8Mg..{.m,Q.. .. ..?.i...F.,LX..'Q<wR?....9..0.X.......)..NZ.$.wo_...8o..i.....',..n.x../g....S......~..z=....2....a.......I.gM......L....N..n.......Y...Y....\|.1.+'n.v....O:....a..m.><vN..z...c..wph..<..'......6<..x\|p.92.......y3m...m.~.....f.ypb.v..........pd.4;..bf..7..](..=...7....S...B.....^..0..^......'7~......0.]..U.1.]...o..t......1s..TE.......+W?.Z.D?<.F.{6l6...I.....u.Y.fR.X]+`.4..6..8. ...[o.....f..L..........v.........!.i....w..BA.q.pj.2`...Z......Y.....L...c.C.B..,...23....(X.C...XY......[..wl.o..;z......=.C...A..q.H...5.1m.3'~.y.,...z.,.C..p.p...S.....PG.p..:....$....h....3_.@.l......g...6...>..........?..-..e.>....t....oSkhM..l.Ye.<....pZ...k...{ZI."...G...%j.G...l...3&. ~+..D1Ez...%H.i....10.=....x.........H;8<8.O..C...'.vO."..;....H;9<....\|GG.=..n.d...wr\|.......w.;._.Oz2...j9.e;m.tp...};......AVzx$..E..G'.....B.Nk...............rv...wm....HuN...83

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 15:31:46], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	92258
Entropy (8bit):	7.9043497471621
Encrypted:	false
SSDEEP:	1536:yGrTOsUmcPra4GrTOsUmcPrpGwO2UR+5Uo8qSFP+rAKOFU6JcPXQL:ymTOshcP1mTOshcPtC2UR/HVMRO7g8
MD5:	F462BD66251393D7F07ACFC43A33266D
SHA1:	30ABED72AC1F0A60DC3462358D13A8CFECFC9430
SHA-256:	C54BF918808B54CD4239C7F21ACB347D7BEC51146F39AD7EDB9BC391F2CCE5DB
SHA-512:	C86410E419ABF608E915D8A84F2FC6798064FDE9BDE4065A2F68C8A3B18C22C14C7CD067084E2312B8DF8F93FD0D07CF86145B7E5CB2FE12AEDE8F4BAC352A73
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/436881/image/medium-284729fd82e1c7ef95c2374a3cff8812.jpg
Preview:	....?.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 15:31:46.+........................."...........'...........0...........2...................0231................................$...........,...........4...........<...........D...........L...........T...........\...............................................d...........1...........1...........0100....................l.......................l...........t...................................................................................\|...............................................................2...........4................... ...........2023:06:23 15:31:56.2023:06:23 15:31:56.+10:00..+11:00..+11:00..P'..@B....".@B..Z...............................f7:.....f7:.............................................ZEISS Batis 2/25........................................

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	downloaded
Size (bytes):	12007
Entropy (8bit):	7.932813514575133
Encrypted:	false
SSDEEP:	192:NwC1I2uwP+xlxZ2/eSlMTOXxZP+X3fVZc9YD85pY/aUC0RFwjU/u:Nb15utlxAPNxZP+nfTME85pYBRFwo/u
MD5:	4EE08A7C6854D186C00F1C0A571B1006
SHA1:	B804DA653C0CBDBF1E1A67B83B752BB2B723F079
SHA-256:	F1F62DBF8B00B677E3EB78DB0101B86529602A9C4077C8E2E6408856A06A677B
SHA-512:	5A8FE0E8ECFBF719899AE5460DD7B06E6D8C764E22174DD43497822BF6C943889EF395DA66820B20184E1CDF02731EB221B350ABDB87599914E800336E90E34F
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/user/89268/avatar/thumb_lg-3af33225542adb6c76b6afe0ca6cca15.jpeg
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................6Photoshop 3.0.8BIM..........g..HEzrMiYMVZztGsHZx0pm....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$<b....,0..G...g..O.......bW..1.1..!.?.T....?..%....#..B.6...s......b+H.X.S&c.z..@.1W...X.R{].P;.+n.{.c.WZ./p..r....nm...?.....v..uK...n

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	63526
Entropy (8bit):	7.987358662015822
Encrypted:	false
SSDEEP:	768:Ew+yNAaxmonEMasSf56cTbmWmGVWpYVghRfMGu4quX5JltukXRSYGLYr3V6sR2/m:GeEMasSf57bBUpBJZu4qMDHIYGLYZa/m
MD5:	71908143F112CC3F4FA57CCF488CC33F
SHA1:	697DBCB329289FB3AAC24D6C8CC7049C83C282C0
SHA-256:	4C7357184C1800D4AC8D073F2C06F221DF513CC2578BBAD1EB9421FB6A23FCAC
SHA-512:	F2D49C67BC8E4E721B0AD8B07BC1A22D380AA71D3DADDB1BE082DD3BC805683C7A78C324A5E921FD12A6402E1C9B3CAE33B2CCC791E177FC288A864F54AF63EC
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/user/65723/avatar/thumb_lg-0644d7875ccc098efa4646629115fdd4.png
Preview:	.PNG........IHDR.............=..2....iCCPicc..H....T...../IHHh.P.....Uz. U...@B.!!..E....+.b[. .........T.u.`..M.@W.{.{....;w..{3....Tc."Q6..@.0O.......$u....20..l.D.........).o.D..j'..s...u.O.......pr ...w..y..z..tF..2.F.4.0@.f2.P......)............g..".....~T.!;...!.&..>..y....U. [.}.'..>.F\|...#..E.J...(.=..,....l.....Q...XY..eM..1..yaZT4d....\.......C..9. X3....r.....!...."....P.dX{4^..W.E...C....$$n..b.\2.RiVB...M\|.k.gc!?>I.'./H......$+.b..E!?(j.F,.....s...Cc.6.Y.d8/./`E.qd.?>\1...a.c...L.......Q....C.c.....!...!{....&.@n........M./.Dy1..p.L...E.....A .0...40.d.A[O}......l .....4.#..=B...../H< ...(..\|..2.U<.@..7_>".<..."@6.-.......@...90.l.d}?..:b.1..N.%Z.z./.G.?lN...9..7{.SB....:..p{..H.C.L0.t..C..K.>;..zu..q..........].L......j..U:..Z..";.Q.6.l.c.6*.#^d.......F..4..c.A.....?Zb..CX.v...5a.......V.G.......-V.O..#.i>....I.j......@.. O...M....2.y...[.,!.~4.........Z.2.{:..M.{...R....c.=..S....L..e...c...8_..e....U....C.wY........ .... .

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12026
Entropy (8bit):	7.980740497035061
Encrypted:	false
SSDEEP:	192:BmK5s7KWsZ37vJ0IAShwXQu4yOBKCA0dq+tQvVMjHyyM9pTWPV5gFBJ5KKMR9gti:BmxGrvS4JLAB+SKHy7wfgFtni
MD5:	A095F20E0610EE63BE8E9D17121CB298
SHA1:	FD103AC02D4AE8038F8458758A2865AF579E51FF
SHA-256:	D94DA7B06064CF8DC78AAA534B7239AFEC707060AC21327446B9E676C3A1DBC7
SHA-512:	B0AC794733017918F0DAEAE1114D8F466499E18B96793E2D309E05D7841EC918762326195B18D19D4E6606D1F8538C41B0A9842A25514C9566FBEAD47F36DBB0
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i115!3i77!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=82159
Preview:	RIFF....WEBPVP8L..../..?.7.6.$'{....6E.1.S.....4.F...w......rR....?...<.].!.W...R........S..."..)...@...$... . ....Q...b,.(.KEq-...K......X.qa.:}...R..l.[.%.%<.%....(\|...?...g..:..6..6.o.vL......h.C..c}..K...^d....~.\|.e].c.[. ..$..n[./\|..,......L.....oRFF......;.m.....=....x}c.;...,.(...LL...?....A!....{GK..w....W..P.R...H....."<0.&.....r""=....J..I.U}....-...S20$vt.[.?.;._.EYhgR...H!C..r~.r.. K..............1T.R._psS...,G....8l.e........jhN..... pT>s....B......!.....H...a.B.c.5...F.v$....\|F...D..R4.K....{q.h....Q..b..g...Q.i.'.....z...vxAz.61.....n1....,NW..m..A.Q....>@G.<....D$_{i.iopz..s.\v+n&.A......v....nP.].&.;.....NN<....k.x.o\|......>L+......5/....S..P.\|.=.~vX. .:.)`.........}..r...3.-. .....u..".?...LB.WZ.......q."2...._....37...\|p..T.^.%)..G.m.#.!C~..%4.>.E.jy..}.;X...&;......C~..Bh..9.r.............ID.A...M......L..}u.P..P..R....P.......a..x....d....).C..3...j..b,.i.d.8......\|.....x6.\|..iy...y...E..{.1.=VQ..i{.}....@..J+...D

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	690296
Entropy (8bit):	5.369021400255205
Encrypted:	false
SSDEEP:	12288:dk3sWNfk6y6RLKWO0Y0k0h0Jy1nKJg6Nu0BXYD+I9sMc8Mh6v6ecfwe0aSFEPm/T:WR2n2Edbmsm
MD5:	78AAEA0B91BF05493002B40F2441BC59
SHA1:	B78DFD31E36C8B3FEB647079CE70A3DB800791D3
SHA-256:	2BEA4BFDB845E2FDEE34CF138BD40E7A6EB727CE4D1DA92E9E415FB9A24D6870
SHA-512:	85D2FB23129998A178822FAA248D2B30A156B5F02D486C2EF3449A69549B12754D5C65B59492926EC3246E12E20FB4E938DD38D146372652E64308F8BAF2C04C
Malicious:	false
Reputation:	low
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2782
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	7.864431939331979
Encrypted:	false
SSDEEP:	24:XSakXdi6RX+/uUb8DG9CkZCbEneIxNDMVIyQl7AufebMAvzu5XY0bo80JQUSZEJ:Xy8mYuUb8D0CV83LDMVvUAuCuE6Ub
MD5:	B0CFD2E8E8967AD708B94773BE4834A7
SHA1:	7FFBD1C9B53C72FFF013112CA9F8FD769B1572DF
SHA-256:	F441466B88FE286DE8847FF3385E72B7068B65B6E8948C8164FFB4AB1343CC70
SHA-512:	2805BCA742CAAA427DE36567F898A728EC2C992CDAA9AA0DABDD92FEFA6134722DAADC582A9FC72D4B4DC5C9F1724E822A6C33DA88ECE026CC05548BF15F4D98
Malicious:	false
Reputation:	low
Preview:	...........Vmo.6..._!s.".mw].Y%....}..u_.#..sDW&..J.9..;../I..0,R<.=........ia.Z._.rO....d...k+.2.o...83..N..../. ...?......'.vd...{kd.....u.\|%4.E.\|mu......!...{....$.3c.[i#.j&..'...1].....l%&...E.z)y........B.W..a......o...^H..N.iM..oy&.2Q..q..."..^.H...Q..b...6R:r..\:f.e..v!....C...f...RZpW..OhB.%."..mbX~.?G.Hd...'{f<.../...0....f..f.h..MS.R.v2...'.\...H.5w.A..S.X...ReX..s6..:.y..I..7m..aJ...f....(..:.S...hh.+.9.[..]....N.......].......X.{.f.q.T.2.....\|#<.y&..x~.n......0...}msX).CE[...z.V.K...k.3......%..v.d$B{.U.q.Y.2..'..J_.-...k...2,VY..3y].i(..fru..7...&.\..~[.i..W...R.c.C.\|....1m("..\|...?D:l.j..,H.....wHX...]3.od]z.....Y?k.......".SO....}...Q.5\|.r....?}:pt.H.'...:...+.7./,.;8..F$A...p.AIz.o...!...!-.R.2{..Jf..pFWWZn..Xr..((......K...@=....[......%.Qc ....0,W..\2'?.~.$l.k\.....#Jj.Q(9.`..NH...!..a\|....~8..&.k..j......u.9.Vi.,.. ....,.M._(..q<.............N.K\..c.3.u.........0.j.M.=.:46P<D#..f.....C..Q....3._.G+Y:`.6>...s...

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.379664004902596
Encrypted:	false
SSDEEP:	3:Ul/ygn1ZrFIWz7an:UAi1Zlin
MD5:	E28B0610EECFC83EDB5DF4373B7E3AEA
SHA1:	E6FBF0BD786E3585FF5EDE4BA8CE574EC58A02E8
SHA-256:	72011C98E109178D38B70BFC4F548E18FFCA52C411E8797C768BD6967FD7F782
SHA-512:	24218D0AE13A0122D62C2C1C76330635CF07882FEA3CB5985BC2E79613CFDBF6B5DA8A9791FEDE79EE9E78D688C2B10D1FD6EDE6C09B5775987316D12AAB8CA6
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i114!3i79!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=9204
Preview:	RIFF$...WEBPVP8L..../..?..P..U....E...".....

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	201240
Entropy (8bit):	5.3816896220407004
Encrypted:	false
SSDEEP:	6144:86Q9kWUaFl2R6D4gtjvv+iqHRD5Wc3oSyRhRj2Ng7My:iNtjvv+iqHRD5WAoSyzRj2NiMy
MD5:	20D5C4B1BD8FF4A9EF6D20AB75983251
SHA1:	A2D3138E86DE37A2A9C01161E9277D7917939438
SHA-256:	96B227FD0DEC8B3853C8AA559EB63E7AB437B9ECAFA92892B959776E3C45069E
SHA-512:	ED982652F9F7722A54EED39E8E032EDFDDC44ABA70FEC08849903F6B4B942DC25289EF30B90ECF16F38C127ADBDD530DA7B7C2017FFAFB69383DEABBA08D1FCC
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,r={7948:e=>{"use strict";const{AbortController:t,AbortSignal:r}="undefined"!=typeof self?self:"undefined"!=typeof window?window:void 0;e.exports=t,e.exports.AbortSignal=r,e.exports.default=t},1291:(e,t,r)=>{"use strict";const o=r(6150),n=r(6086);class s extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e);let t=(e=[...e].map((e=>e instanceof Error?e:null!==e&&"object"==typeof e?Object.assign(new Error(e.message),e):new Error(e)))).map((e=>"string"==typeof e.stack?n(e.stack).replace(/\s+at .aggregate-error\/index.js:\d+:\d+\)?/g,""):String(e))).join("\n");t="\n"+o(t,4),super(t),this.name="AggregateError",Object.defineProperty(this,"_errors",{value:e})}[Symbol.iterator](){for(const e of this._errors)yield e}}e.exports=s},6086:(e,t,r)=>{"use strict";const o=r(1209),n=/\s+at.(?:$\|\s)(.)$?/,s=/^(?:(?:(?:node\|(?:internal\/[\w/]\|.node_modules\/(?:babel-polyfill\|pirates)\/.*)?\w+)\.js:\d+:\d+)\|native)/,a=voi

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.383594884337988
Encrypted:	false
SSDEEP:	3:qGGAW6yIA6qENKAQpnDTLTrAWRgn:kAYIZYpDHTRg
MD5:	2ECE426E3900FA6EBAD39380AEAA2539
SHA1:	24C4E875361BC77874B005F816D160223DC68B46
SHA-256:	E4CE65C3A33FDF0AD73B34857BFF62AF3A6187509551AFBFECBA345FEA02BF55
SHA-512:	66A11A88F239BC8AD325671B2EADDFE0F88CC1EFDD4FA08E83D2FCA2E615DB4A101B935AD89F274B606F0C6DFF41BE575708268E8FB34F897EC28F7D8024BC65
Malicious:	false
Reputation:	low
Preview:	{. "success": false,. "message": "malformed JSON",. "code": "invalid_request".}

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	63526
Entropy (8bit):	7.987358662015822
Encrypted:	false
SSDEEP:	768:Ew+yNAaxmonEMasSf56cTbmWmGVWpYVghRfMGu4quX5JltukXRSYGLYr3V6sR2/m:GeEMasSf57bBUpBJZu4qMDHIYGLYZa/m
MD5:	71908143F112CC3F4FA57CCF488CC33F
SHA1:	697DBCB329289FB3AAC24D6C8CC7049C83C282C0
SHA-256:	4C7357184C1800D4AC8D073F2C06F221DF513CC2578BBAD1EB9421FB6A23FCAC
SHA-512:	F2D49C67BC8E4E721B0AD8B07BC1A22D380AA71D3DADDB1BE082DD3BC805683C7A78C324A5E921FD12A6402E1C9B3CAE33B2CCC791E177FC288A864F54AF63EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............=..2....iCCPicc..H....T...../IHHh.P.....Uz. U...@B.!!..E....+.b[. .........T.u.`..M.@W.{.{....;w..{3....Tc."Q6..@.0O.......$u....20..l.D.........).o.D..j'..s...u.O.......pr ...w..y..z..tF..2.F.4.0@.f2.P......)............g..".....~T.!;...!.&..>..y....U. [.}.'..>.F\|...#..E.J...(.=..,....l.....Q...XY..eM..1..yaZT4d....\.......C..9. X3....r.....!...."....P.dX{4^..W.E...C....$$n..b.\2.RiVB...M\|.k.gc!?>I.'./H......$+.b..E!?(j.F,.....s...Cc.6.Y.d8/./`E.qd.?>\1...a.c...L.......Q....C.c.....!...!{....&.@n........M./.Dy1..p.L...E.....A .0...40.d.A[O}......l .....4.#..=B...../H< ...(..\|..2.U<.@..7_>".<..."@6.-.......@...90.l.d}?..:b.1..N.%Z.z./.G.?lN...9..7{.SB....:..p{..H.C.L0.t..C..K.>;..zu..q..........].L......j..U:..Z..";.Q.6.l.c.6*.#^d.......F..4..c.A.....?Zb..CX.v...5a.......V.G.......-V.O..#.i>....I.j......@.. O...M....2.y...[.,!.~4.........Z.2.{:..M.{...R....c.=..S....L..e...c...8_..e....U....C.wY........ .... .

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 21:49:20], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	80614
Entropy (8bit):	7.698000163252409
Encrypted:	false
SSDEEP:	1536:7zKGZQYkqqrkBuw9xKGZQYkqqryGyAztI+GeBJi4RZOPCOSrrA:vKtYECKtYEywGeBRRm
MD5:	5655D4E30F3227837C482F5D6E648FD8
SHA1:	26BC949724D70759DC72F294E5709890BE77D590
SHA-256:	B5FD7CA6B683A3AE213C82A7C585EB5CF9504C278B3E03F80913D92E4F4759D5
SHA-512:	B4F9915457224BAADB4D9D8F9D1766310B3162B6246C914557D51591603F45C26D379FECE67CCD41812CA3D54209C9E516FD86A32D0633F62BFDB84D623ED99F
Malicious:	false
Reputation:	low
Preview:	....4.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 21:49:20.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4...............................2023:06:23 17:11:35.2023:06:23 17:11:35.+10:00..+11:00..+11:00....A.@B...T-.@B..................................f7:.....f7:.............................................SAMYANG AF 14mm F2.8........................................(...................

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	108270
Entropy (8bit):	7.958037757658798
Encrypted:	false
SSDEEP:	3072:txfJBo3fJBoS9A8rpJvRAM8gc/raREa6uMojJX5D:jhBo3hBouzAM5UraRh6ro7D
MD5:	25E45FEFADA2FBFB5DF17769644AF96E
SHA1:	5AF99CBF6C140D455153179249E1D7D33F48DAEA
SHA-256:	1651B4C62E04746812BC15FAB00A734887D190351D6B264EC858544100ED26AD
SHA-512:	567073FEDEE48889138225BD3E7798D405858EB6633259706FF803BDF8DB008AF0110F3AF5377849FA07FC1AD68292E997F526267352A8368B2EF4D38F653947
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424895/image/medium-8860f19bb30c46dc1e43ab949b7ea944.jpg
Preview:	....=.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................<......H.......H.........................................................................................................................................................Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?.......1.C!...'..6.V......R6.D.A.>_.C...Y..op..c....r...........8.%d......!iB.w......I.Q.P.sE,.V...`.k.&....L.#...(..2..<HP

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12430)
Category:	dropped
Size (bytes):	289146
Entropy (8bit):	5.47084645578821
Encrypted:	false
SSDEEP:	6144:5VPCQYGPmpcwj/yBNtuHAgli3YhhpR4JXcO:5P+/yBNtq/3O
MD5:	AA24F9E701D73AC2BDF54A3A922D6A8A
SHA1:	1E4C6F81E22A52414F98480097C5EB8CF38AB34F
SHA-256:	7473CC047BE088C76B7242457564FCAAAA08FD6BFF66171F84681308F229BEC6
SHA-512:	58C28DFF42DD3D4BF7FA18FF2259391A03FA5F0CBF1615215FE3CB965E50D87D99F125C8CDEBD469BBF4F860A7ED517FBBBFC9FB2AF2BE09A4A24B630E3DFE79
Malicious:	false
Reputation:	low
Preview:	/1730342486,,JIT Construction: v1017824523,en_GB/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.80594093635111
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccASkr/+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsQ:VKEcoWKo7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	043145BF2702B847D1030711F68A146C
SHA1:	3576DBE1AA271BDAC340AD8143124E8C8AB97F69
SHA-256:	16E78DB134B6BDD67EAECA00702AA02D83F48F7FD3F12B0002433EAE2EDEF444
SHA-512:	039A556539DA6602D71CE0B746169706A2467D556792D1ECC62674B52D5816C18CBB8B2BFBFC05E8797350DD13BA37F278044FC1E18F36BBAAD31082F5A809EB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	108270
Entropy (8bit):	7.958037757658798
Encrypted:	false
SSDEEP:	3072:txfJBo3fJBoS9A8rpJvRAM8gc/raREa6uMojJX5D:jhBo3hBouzAM5UraRh6ro7D
MD5:	25E45FEFADA2FBFB5DF17769644AF96E
SHA1:	5AF99CBF6C140D455153179249E1D7D33F48DAEA
SHA-256:	1651B4C62E04746812BC15FAB00A734887D190351D6B264EC858544100ED26AD
SHA-512:	567073FEDEE48889138225BD3E7798D405858EB6633259706FF803BDF8DB008AF0110F3AF5377849FA07FC1AD68292E997F526267352A8368B2EF4D38F653947
Malicious:	false
Reputation:	low
Preview:	....=.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................<......H.......H.........................................................................................................................................................Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?.......1.C!...'..6.V......R6.D.A.>_.C...Y..op..c....r...........8.%d......!iB.w......I.Q.P.sE,.V...`.k.&....L.#...(..2..<HP

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Mar 29 23:33:31 2019, from Unix, original size modulo 2^32 55079
Category:	downloaded
Size (bytes):	17889
Entropy (8bit):	7.9880447064853515
Encrypted:	false
SSDEEP:	384:Xst1mYcJCJW0MB5AJXLh+nCig7Q/IYPVXJcd/mQoRC+UwGcj74w2hK:XrTt27+Bq+QGC+UwG8oK
MD5:	B568E7B3C9D94DA6A1D4845B18400F7A
SHA1:	E58022B19F4F38C0721C356057BD2311D08C49D6
SHA-256:	8F1FC46D5DDD2FA579F686AC25BCF5D6348B635127DEBC9A6A7B8643D850A60C
SHA-512:	74874E96D0D6C2D4CB3B3C17D4CFF9FE30C5C73E3E3A37ACDA361D5B27913ECA10E3BD7C250FABFA7387E15AEABAEAC064FA1C850BB91C663CA69D5F0200EC37
Malicious:	false
Reputation:	low
URL:	https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js
Preview:	....K..\...kw.H.0.....=.#.A.7."..I.....L.d.y....A"..%....U}S..qf.9.]+1R..........7]....\|........q.9N.."..B.WA.G........'>...zA...A.X7lM.M1.......'}......$ID.S....^..........P.uDQ.zP.H..:1.C..C_..../..................D ..Zl.....8..1.v.G.........E.lY...md#Cd....xP~...Y.Q.c..H.?P..[w.&.o.....]/...0.JSo...w....a.A<r KZ..X.8.B...+.z......G...g.G.U......^,...1 ...b?nL..!.......r...?...Y.f ...xH... .y}.-..z..Js.!.8.V.0..`.S.m..0.:........$...36.F0h...:.O..w...<.......;M.w....:.i.s..&@$o...3x...z.&.:...W.7.On...D3.._..%...v..b.....uM.~...5.5.N..H.As1.>!..`......X3/.D.!Bzj.8.n<r.....G....M..e..!).b@7.@/.kx..v..1.eE?zH..<. D.yBK.... ...>%a...w.u....u.....L..R3o...0.....K...._?........-..4`s.. .....x.......&.8.n......\...g.i.,_s...=i5.^x...f......nb.5.~;..L..a....m%P.c+P...1.T..O;...o.!...D1..5.J..M0L$.m.Y.".v_.sH.....-k.3^..&...9H.2.A>.....X..:....h.-.....x........oN...._..?;...O.........^.Ay..._7......Q.........v.{pxT}.h...P.....G

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356)
Category:	downloaded
Size (bytes):	254580
Entropy (8bit):	5.551588646574633
Encrypted:	false
SSDEEP:	3072:m5wiztGbETrako8y0R5CptDY8/I8+yr/OUYhcDmKD0C8Gp/2hG:uGbg+kocM/GUTx0C8Gp/2E
MD5:	D18BF8F588E1861F7E07EBB1C3424713
SHA1:	D88809A0E86217A05B11D9E313D4FD0281B2C221
SHA-256:	76153B4E2343A6371B253895426CACC367EAC1CA4CD4FC62B760F4D8C51A9BCE
SHA-512:	9A42567BB75F4076D3B155A926E3C27612BBD0937298E63EF281542663410D48C78D9D6467DCB1C00E10F2537F2136F2D4456A22BB8594C08E0B84D8FC3BA41F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-740117353&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-740117353","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-740117353","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__ccd_pre_auto_pii",[46,"a"],[50,"q",[46,"s"],[52,"t",[16,[15,"s"],"userData"]],[52,"u",[30,[18,[2,[15,"t"],"indexOf",[7,"@gmail."]],[27,1]],[18,[2,[15,"t"],"indexOf",[7,"@googlemail."]],[27,1]]]],[36,[0,[0,[0,[0,[0,[0,[16,[15,"s"],"tagName"],":"],[16,[15,"s"],"isVisible"]],":"],[17,[15,"t"],"length"]],":"],[15,"u"]]]],[52,"b",[13,[41,"$0"],[3,"$0",["require","internal.getFlags"]],["$0"]]],[52,"c",["require","internal.setPr

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	8389
Entropy (8bit):	7.7729849799464645
Encrypted:	false
SSDEEP:	192:NRJCDSvy1I5V4kdJ6snTlJfzKnA15Bvsh37VIeQZUJpXIgQ:NODl1I51L6gx1M6UJ+gQ
MD5:	257C0826FA74F817497BD090E5754799
SHA1:	ADD8B78FC3833B00CFE85D36C360E04AF8B9B53F
SHA-256:	0C8F95D50025E659AC28AB53E43A9A436F68EB119E1B3AF7A06158AA90D7127A
SHA-512:	C728A7839C206A1258C23B5DB3574442CAFAAC3075C534554491363F303C85AD34F8F43E189A0CCEA1A0667CBC9503860AAEF7E0957B14AD228DF0AE6FD4113D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br.......

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 62624, version 0.0
Category:	downloaded
Size (bytes):	62624
Entropy (8bit):	7.994406897674202
Encrypted:	true
SSDEEP:	1536:Zart7hBPLm9WmnEm3n6f4q9dlQuR41mZk/VgPbqIgKHiSniljfeQTM2mXs28:ZapVBTmznrKf4q9L76weKUl6QTDX
MD5:	412EA768F9356560C12B323907104979
SHA1:	D4CBDA6DA806EEA0DC943FE84DF75CD87237F975
SHA-256:	CE7C6F97FFAD15205ABD9599A824126F9D55E7FB67D7520B3978344AD9208E0D
SHA-512:	45F9AD9DE62885FB62CAF07B4C9F6BD848ED68FA507C2D6D41B6A8E5AEC4B3387B75D1CA12C03F8DC0A59F64460FE21C3F247CD7088E1B9EAB57DB4419D5A6A0
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311f018f3b29cdac61ce8b1ae9f.woff
Preview:	wOFFOTTO...........4........................CFF .......1..i...GDEF...D.......dz.\|.GPOS...8..*...h.. .GSUB...X...F.......#OS/2.......P...`j.vcmap............/9".head...$...3...6.\|H.hhea...d... ...$....hmtx...X....... %...maxp..............P.name..............post........... ...2..P.....x.c`d```a`8.S~....+.3... .^.....~........230.D.m.. .x....l...w.....j.m..m.m{......m..[.3.N..1_......$;......$~Xo....$.Gd..%.{.G}..}.7+..K..r@{.......8{ m.R.E%.](....#b.I..)o.....?@V)Z.D..]..%]....?.{.u.....5+.'..P.....,...`..H..?..C..;...W...L.c.......=....."......j!G6..\{.L.. ....../.?.o7..q...e.\|....M...(..,g.M.k...0.{.b.~....A.[ 3^..@6{..m.....<.i...r..c..O...{.....s..>.t.9.!/a.....T)4.I,.....T.39EJ.p\|..w.......<...$.z...g..t.Y....v. .C=...\..4..&....%.Dz-...DM..B.....X..F`........J.......N.O.....s/q....]}u..-"..}.q......)....wH...z........k.....B...sv.......,;I.\|$....2..>"5.W.u......80z...sP-...A.C......<.A.^W.n7'u.................h.~Ova__.~#}z.#..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:46:51], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	124915
Entropy (8bit):	7.867628521356617
Encrypted:	false
SSDEEP:	3072:pUDdczEArUDdczEAzKGChndCcR63SgFDvDf:MczEAiczEAWJhdCcASMXf
MD5:	D1AA5F9671DF096DC9FE5B475F54AE6F
SHA1:	42018004542CDABEABCB6268A50988CB4A222008
SHA-256:	922B895D3EFB6AD6320C2696FC8E79317B45D399BFE65AB6C1DD1ADD7270FDDE
SHA-512:	8CB4056C22EA24EF8F88384B4054EDA1386CCF6CB71D5E113E9F2008F1C1C7C5E5B96783B85311BCD13B01CB58B4CAFB62809AFE95EDB85ADA4533F5AADE9D07
Malicious:	false
Reputation:	low
Preview:	....R.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:46:51.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4.......................#.......2023:09:23 12:46:54.2023:09:23 12:46:54.+11:00..+11:00..+11:00..X.y.@B..........&8..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3600, bps=182, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=5397], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	73164
Entropy (8bit):	7.742925900080249
Encrypted:	false
SSDEEP:	1536:KTI9gs+jhAsLTIjozIypOZR7GHa7oMbp5ZRf8Ku8lG1Yp2Tvr:iIKIjEOrS6kMbp5HkEGiavr
MD5:	F3926BB9257547A91FDF3B8D3B167043
SHA1:	9CEA94A9115BE0F5AE1D17A245F0D7BD031220EF
SHA-256:	B4550F44BA616E0F1F716B128E09A3A14D6CDA0DEA23FD93A3EB61011138AECA
SHA-512:	81A0B246ED2EDDC92CAC63F181A46B2A84FB1D4850419F9EFF85B1523CD128FDDBF1CF687A93FCCF389784FD28FF505ED5C984645D7195479958905CCE6AA502
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/1671/portrait_cover_image/w400-64009a9736a3d3d1a3fdfc3824535586.jpg
Preview:	.....hExif..II*...............................................................................................................................(...........1...!.......2...........i.....................Canon.Canon EOS R5....-..'....-..'..Adobe Photoshop 24.3 (Macintosh)..2023:04:17 11:42:24...........`...........h..."...........'.......d...........0231........p...........................................................................................................34..........34..........0100............................................................................................................................................2023:04:01 18:28:48.2023:04:01 18:28:48.8...@B....................................}......_S.......................................&...(...............................2.......H.......H.............Adobe_CM......Adobe.d...................................................................................................................................................

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 65212, version 0.0
Category:	downloaded
Size (bytes):	65212
Entropy (8bit):	7.995291537975246
Encrypted:	true
SSDEEP:	1536:5artjT8+7Th62saV3Ud5TRFiNFBM7JABcQ0O3/Fbs28:5apf8+/h62pATRANFC7JVOP+X
MD5:	F055E310F051B83E753D8090F39C0EF1
SHA1:	6CB0B4A544191E8AA60377A98A8E7E0BB91059E2
SHA-256:	094F652F96999C294DAC753B25309D1CF9463ECBA9407D31C069183E4DFE37B5
SHA-512:	E5F90A65A595ACE80828184C002B27595AB66EABEB401C33904158947C2FB12247D0A8B521061F2838F6DB230243776584CDF84ADF2BAA9C26DB2452883EB1BC
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/GT-Walsheim-Pro-Regular.02a342d8130585953c407995c0f558a6.woff
Preview:	wOFFOTTO...........X........................CFF ...4...A..b..FY^GDEF...x.......dz.\|.GPOS...l..-...n....uGSUB...t...F.......#OS/2.......O...`jb.lcmap............/9".head...$...3...6.wH.hhea....... ...$....hmtx...X...C... .9..maxp..............P.name............6...post... ....... ...2..P.....x.c`d```a`p..X..o......\/kr......e)bn.r...@..e&...x....$M...l....toc.m...w.m.m[..m...~.NdOv.].\|..^FF...Y.z.../.pV.aS..j..^...nh.>O....~G.M......!..'...=.+.v\=.^5..Z.............<.{.d..;....\*.........a-..z....w....+k..n........O.c.....q...zA.[%.c......!.^../.^lqa.A).......j.....5....o.QI?P)[&w......do!^.]F.i_..Q.}C.a....;.......WR...H>.....&u..YK/....O.o)..?..k.r#._.....kN.n.[{\..z.v..h..".R${....T..S.....6]..ho...5.\wt..`...~...A.3.b\|#..Q.......`..a(.M........e..i.vj.........~....S..=.J...u.puMd.<.--."...[...;..2..N....L.$.BS.$Me.M.....]......^T~c..v.]7._j..ul}cw.%.p)X.i......NI.z\|y#.Rgv...{v...^j..:\U....z.&...V.2..4....2...$.db..`...s..+^.1.y..5go..R.R)j...v.V]

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:36:12], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	141172
Entropy (8bit):	7.8626854151134795
Encrypted:	false
SSDEEP:	3072:DS8/YXAcS8/YXAuAHAsarkg7Al3M3BLOzVdiWIn:DYXAmYXAFAX3A3M3dORdiDn
MD5:	8DC2FE1DE8694126C0A4BD60250711C9
SHA1:	8D22F56AE86180D2AD5D86F1A5261912C89BAC29
SHA-256:	630A9B7349E64FBE8004A0D51003410D46285D94700E9A0F206C875C414F6AFF
SHA-512:	7CC05E853635081F6A0DEEFC3627941C24FC03F1752A6CB08AC7DD4770AA162C095F54C7140CEE64558669432CAB260A4ECAB80C57F65AFE2536A82C4D37CF45
Malicious:	false
Reputation:	low
Preview:	....S.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:36:12.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4................... ...........2023:09:22 15:55:58.2023:09:22 15:55:58.+11:00..+11:00..+11:00..P'..@B...........A..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52589), with NEL line terminators
Category:	downloaded
Size (bytes):	178085
Entropy (8bit):	5.412344152100599
Encrypted:	false
SSDEEP:	1536:4QMXLyx6RYxiRSbgL4O+2bLoIiOLSQ910f6HxpXQnaRbDfp9g0oOV92TShtRUVs6:4SIlRSbgzZAK+sJMbz6y9GiZSKpge
MD5:	D486CE47BA01B791B3F47D76C2F600AE
SHA1:	25D26E1D1F5888E2414851E72660A85B82B820C8
SHA-256:	409A584C40ABAEDCF855D5BCBC1DBDC6A1AD04B45517AD359F883E2B46FE2039
SHA-512:	26408A30AEA8417D66ADAF166CB1ABFE1204E1E5F3AE2E9F7D19EDF7E7AFBEE88AC9FCC4E2B08079AFDAF71EA89E1A0997F8DE6F09267064E684FC947A9D0B16
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/clustering-gql.worker.03501d17d6d5ce0028f9.worker.js
Preview:	!function(){var t={9662:function(t,r,e){var n=e(7854),o=e(614),i=e(6330),a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},9483:function(t,r,e){var n=e(7854),o=e(4411),i=e(6330),a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a constructor")}},6077:function(t,r,e){var n=e(7854),o=e(614),i=n.String,a=n.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1223:function(t,r,e){var n=e(5112),o=e(30),i=e(3070),a=n("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},1530:function(t,r,e){"use strict";var n=e(8710).charAt;t.exports=function(t,r,e){return r+(e?n(t,r).length:1)}},5787:function(t,r,e){var n=e(7854),o=e(7976),i=n.TypeError;t.exports=function(t,r){if(o(r,t))return t;throw i("Incorrect invocation")}},9670:function(t,r,e){var n=e(7854),o=e(111),i=n.String,a=n.TypeError;t.exports=function(

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	dropped
Size (bytes):	3093
Entropy (8bit):	5.5925409090724
Encrypted:	false
SSDEEP:	48:IX+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwWynDuExjGx:IX+5AQHAray48f5JMYHIqWYDu9
MD5:	700162D44BEC8910BC18BAD17FB71EF8
SHA1:	A2BD47D15382CD6F1AE26BC495E272E0CCA62657
SHA-256:	E4E12101DCE28E11EA09E33F464FDCD06F841B97970E299F7B31EEE4D4462130
SHA-512:	78F69A11C226F7CFC176697F1AB9E28ED83E725AFA14146333CC5EBB895A2820FCBE471032DA50AACB0CB72955A4EC718FDD3F5110B4252BE704FE4580A86457
Malicious:	false
Reputation:	low
Preview:	/1730342179,,JIT Construction: v1017824523,en_GB/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.4 (Macintosh), datetime=2023:07:18 15:31:46], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	92258
Entropy (8bit):	7.9043497471621
Encrypted:	false
SSDEEP:	1536:yGrTOsUmcPra4GrTOsUmcPrpGwO2UR+5Uo8qSFP+rAKOFU6JcPXQL:ymTOshcP1mTOshcPtC2UR/HVMRO7g8
MD5:	F462BD66251393D7F07ACFC43A33266D
SHA1:	30ABED72AC1F0A60DC3462358D13A8CFECFC9430
SHA-256:	C54BF918808B54CD4239C7F21ACB347D7BEC51146F39AD7EDB9BC391F2CCE5DB
SHA-512:	C86410E419ABF608E915D8A84F2FC6798064FDE9BDE4065A2F68C8A3B18C22C14C7CD067084E2312B8DF8F93FD0D07CF86145B7E5CB2FE12AEDE8F4BAC352A73
Malicious:	false
Reputation:	low
Preview:	....?.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 12.4 (Macintosh)..2023:07:18 15:31:46.+........................."...........'...........0...........2...................0231................................$...........,...........4...........<...........D...........L...........T...........\...............................................d...........1...........1...........0100....................l.......................l...........t...................................................................................\|...............................................................2...........4................... ...........2023:06:23 15:31:56.2023:06:23 15:31:56.+10:00..+11:00..+11:00..P'..@B....".@B..Z...............................f7:.....f7:.............................................ZEISS Batis 2/25........................................

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	112513
Entropy (8bit):	7.873287154315107
Encrypted:	false
SSDEEP:	1536:Bw4GEGaqE2auy18vw8qL3SERCHxTFqAg0hmXGFDz3zD7SpJzhA0YoYce2JRyvG8D:VRGaqE2XI8G/RkvZmXi2JgdmyuSxb
MD5:	5BA140C128A26DAE5D3834334B788ABA
SHA1:	352972558244595868ADC0F5E439EAE3348657FF
SHA-256:	45D0764521875CAD8D83882220B9A9EFB8B5ADD4829430EB25460EF9FF1F7C51
SHA-512:	99B682AADDDB7C88B7BD20F5D7EC2B6C2F003369E9750F97CABFE3C95400949138BED48638D9E4E11F43C54B9BEE7D3D2A3A49D3F3AA85B99A6067FEED45887F
Malicious:	false
Reputation:	low
Preview:	.....\|Exif..II*...................................................................(...........1...........;...........i...........%.......F...x...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......d...0...........2.......d...........0230....................................................................................................................31..........31..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...............-.......2023:09:16 08:44:02.2023:09:16 08:44:02..=..@B..A.......................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................V...........p.......WGS-84........................................(.......................................H.......H.............

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	7.793061141892656
Encrypted:	false
SSDEEP:	24:wn3CpGLWuPNHZphHkdcYZWMTqV2I3/IZbxFMSXl2Hmlfio/D:wSCxnGTUUbxFzYHmlf1D
MD5:	491DA35B61CDDB6F2943D1F5FE8C93E1
SHA1:	75C8CD857413DE3BA83206D631AA35E53FB48EF4
SHA-256:	F0CC9D915862C4B07704B00C0A9F15C2AFB0F4C1E7D4575CA96B96533878D607
SHA-512:	1DAF7AC3D430E2E10F7B49ECD74A7D6620CC7CA07D86876B4F31C939052E0B85A696AADEB8E052746C33D6D8C24E570519891C813289E6775021466A08DDB645
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i116!3i79!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=43868
Preview:	RIFF>...WEBPVP8L1.../..?.O.....#..H...CQ#).Q..q.....D.....u.................@.Z.....J.&.q...I.NAmN).........v.!..[...+.9W...v.3..w.%.....4....{...]....~....lOm7.!.Ha0..H..5..T.qV..@.'....@k7.X5.#.z.tG..R...TG.]...H.Z.....1..Hv..I..O.^.....'....YC.G.3k..j..qo..........v..9.k:#...........9..{R..."..j...V......@.k......JUS.......J^c.%.Q.T...^..#.)X4..P.@.guB..@ ..y...%....v\|Vc......a...ODD&...`V..Kr.>q....0P..<%[P.Zud..S9&5.#-gcKEGhV^.Mj..N..n. 0[3.}N..;9y....+.z:6!T.......H..2.Z?..L....`..E.Rk..x$.?.P.p%..."..j"O.4.C...,..Ge...!E........~,.B......^..a.;...#..L...0{=...y..iR.R(...y..................g.z...h..OD6.....b..:!}..8..ya.s.b.M.p.f.?.rQ........[...\..$...........l....m.r....}/.me.yF^6...y......4.6eM...\Dr.z`...".V.;Z.'./....w3...U.o..Y...,2.....x".`_.k..+=p[....../.......Z..\|....tV.:M=D.6^Uu.r..2Uts.!PY.i...M.>'.{.3.....?i..L.Y.q,P.TU.[8...%.U.Y........V...."c.......(.G.......3..C..W..e......*....1.T.@.j.f..q.z gU`.....{v+.I..

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.379664004902596
Encrypted:	false
SSDEEP:	3:Ul/ygn1ZrFIWz7an:UAi1Zlin
MD5:	E28B0610EECFC83EDB5DF4373B7E3AEA
SHA1:	E6FBF0BD786E3585FF5EDE4BA8CE574EC58A02E8
SHA-256:	72011C98E109178D38B70BFC4F548E18FFCA52C411E8797C768BD6967FD7F782
SHA-512:	24218D0AE13A0122D62C2C1C76330635CF07882FEA3CB5985BC2E79613CFDBF6B5DA8A9791FEDE79EE9E78D688C2B10D1FD6EDE6C09B5775987316D12AAB8CA6
Malicious:	false
Reputation:	low
Preview:	RIFF$...WEBPVP8L..../..?..P..U....E...".....

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7982), with no line terminators
Category:	dropped
Size (bytes):	7982
Entropy (8bit):	5.06199732596822
Encrypted:	false
SSDEEP:	96:70n7TK4AGbw5kYxFrQoHE6kB6vQZgT9B8gmJmW8qdGXZm5n8TsmwJ9mpC:70n7p2FrFE6KZOq9UBqEE2NJk
MD5:	73FF05BF7EF520B50549BB6C6D2EE0A9
SHA1:	74212C690F2714CD3E63D42E721FB8FE0AF0840B
SHA-256:	6BA71CBDCEE6199EE698384F8150810EDF71AC8921252C7655E3E63E552A8CAA
SHA-512:	99ED302B6576E12B4693ADFD4015B9BC68C0F00BE41086F829D310E1DB9B1101EC966436618DF29D74CEBBDBA8A2048C830DA2F005CC4EFEA9D9B9BF66B4A488
Malicious:	false
Reputation:	low
Preview:	{"integrations":{"Amplitude":{"apiKey":"f34c08f320c77e44f8a5f4b29ab545ba","batchEvents":false,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"trackAllPages":false,"trackAllPagesV2":false,"trackCategorizedPages":true,"trackNamedPages":true,"trackReferrer":true,"trackRevenuePerProduct":false,"trackSessionEvents":false,"trackUtmProperties":true,"useLogRevenueV2":true,"versionSettings":{"version":"3.3.3","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus":"bundled"},"Hotjar":{"hjPlaceholderPolyfill":true,"hjid":"769445","versionSettings":{"version":"1.4.0","componentTypes":["browser"]},"type":"browser","bundlingStatus":"bundled"},"Intercom":{"activator":"#IntercomDefaultWidget","appId":"ahlg24mu","collectContext":false,"mobileApiKey":"","richLinkProperties":[],"versionSettings":{"version":"3.1.0","componentTypes":["browser","ios","android","server"]},"type":"browser","bundlingStatus

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	dropped
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 70124, version 0.0
Category:	downloaded
Size (bytes):	70124
Entropy (8bit):	7.995301436195271
Encrypted:	true
SSDEEP:	1536:PdxartuUJ5BwjmZTFvw9wj4gThtt+F9fOCa3v1YLL6yaOhpD9xDs28:PXaprJ5wcVOwjrVtmfbOA6GxQX
MD5:	A58A658AEAB908ECD662D696FF465789
SHA1:	9B1C87C936FBBAC4B1F19DCAEAFCD2D5D741B998
SHA-256:	9397C5DAC77797459B020D1A409F341C3AE868F0B43568FDC9E8D1F8ADD8208F
SHA-512:	06B678AE52E3C7293D5B31EFACEEC42F31B8D373F394B616E1D0C415ED431D038D895FB01C01F530CE09A569E1058A79718B6EC356043EB36564FF4777735B7B
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/webpack-assets/GT-Walsheim-Pro-Light-Oblique.7fd9c584681c485d02b3d6c4574dfdb1.woff
Preview:	wOFFOTTO..........>.........................CFF ...........+h...GDEF...........dz.\|.GPOS......,...m.b..~GSUB.......F.......#OS/2...\|...R...`i..>cmap............/9".head...$...4...6..H/hhea...X...#...$...3hmtx...X....... .`.^maxp..............P.name................post........... ...2..P.....x.c`d```a`8.i./...+.3... .^........d)ena`b`.b ..U2.'x....td.....3..1.c'..F..M.c..X.m.m.k+....du.)Y.[...>}..h..+'...2.@.h.R.=..p..J./WV..ZslBY...../".c>.b.cE.c>m....RS......c....'..X.:B..w....`.;....;.>...>......CC.\...s..B>.X..PB..!o..<.....:.\..q./.w1H..!cG....MVq.3..A.UF..}...H;j@[.......je..Ufz.c...Le..6?..B...u....mW.#.......$!.....2....i...B..\|..F.6.Wb..w....q......>...u...O.....Z.j-.#..r...i.........a.{(....{7..R5....m.W....;.^8..`.l.]f.q.\l&i..Ze....+.~-.....p.9O.a7....K.%.0.]...[....V.Y+M..My...:....y....^....L....M..m......h.R.#.Q.....o5.3.N{.:l..".Y>......C..0t.<8.]0...Mp..V...KD..v?un...J....5v.Z.f#g...;]...V.+.B..\|.9#..4.....6..:`.-S....7..JU..;.oi..h.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	130318
Entropy (8bit):	7.97101192349246
Encrypted:	false
SSDEEP:	3072:y2d8rfW2d8rfGHF5YvEjMy0EfjyoM7J8jyy9EvF07:/d8Xd8CF5YcjVjNSJ8jtcF07
MD5:	4BC742518107F658EB8948CB46510305
SHA1:	BAF4B734EBBD5B5175CE4602569BA003BA616AC1
SHA-256:	77E65EE5320A4BC96D114B3B9F5177595813320AA7C659FB44A509220C14ED90
SHA-512:	E6A4308C68284E50FF1DA33DA5F99ACE7FA68100EFCCBB09B3724841D2B40B3C5751A19784F047AAB9533FAF32950128DF155F33475D60BB7149DEB5CC0E0D24
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424914/image/medium-4c9af69f3934191a1a0a5d57acbd6058.jpg
Preview:	....J.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100....................l.........................................................(................................I......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........*:JZjz....................?..\qO....9.#Jx9...IZ...nX....5..%M[...W.K..f..}=.+2....?.r.1..n.....O...7.0pD..L.E9/..G..w..Er....5)...9.g..IS..D.~..

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32033)
Category:	downloaded
Size (bytes):	69015
Entropy (8bit):	4.938059212094187
Encrypted:	false
SSDEEP:	768:aR2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq76IPxxQ2PZxJIPxxV9:Pg73zhq0GvbJ3ZKm9prd
MD5:	23114C67A22710F3FBCE2C83D40F1BE2
SHA1:	2F12F1EAE52B2D0F94F188A97B32E0CB2E784F91
SHA-256:	88ED83298805C38E86C5A6E986BB108FD44547D328F5991F8B5E2BEDE35F0C4F
SHA-512:	2A56448759B393CBDF885FC1DE8785E5A4D4BFCED98CC642E820BFC9BFF10AD040B8093B8DD0FC6E0AD6121E717E1812B8401CA1F936A9116DBEE0F94E15A00A
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/application-f529098319cbda4e1be1ecbe02bb2e4d0d8692cd437d91302e0b9ae42f8ca4af.js
Preview:	/! modernizr 3.6.0 (Custom Build) \| MIT . * https://modernizr.com/download/?-inputtypes !*/.!function(e,t,n){function o(e,t){return typeof e===t}function i(){var e,t,n,i,a,l,u;for(var c in s)if(s.hasOwnProperty(c)){if(e=[],t=s[c],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(i=o(t.fn,"function")?t.fn():t.fn,a=0;a<e.length;a++)l=e[a],u=l.split("."),1===u.length?Modernizr[u[0]]=i:(!Modernizr[u[0]]\|\|Modernizr[u[0]]instanceof Boolean\|\|(Modernizr[u[0]]=new Boolean(Modernizr[u[0]])),Modernizr[u[0]][u[1]]=i),r.push((i?"":"no-")+u.join("-"))}}function a(){return"function"!=typeof t.createElement?t.createElement(arguments[0]):c?t.createElementNS.call(t,"http://www.w3.org/2000/svg",arguments[0]):t.createElement.apply(t,arguments)}var s=[],l={_version:"3.6.0",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=th

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=5000], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	83429
Entropy (8bit):	7.68635903757558
Encrypted:	false
SSDEEP:	1536:Pzd5+4OLzdPGD2vBbUAtPofkvIzyZ9cmr9BIJaMrZ4Z0m+L:PzdxQzdPQ2vSA2cP9lr9B+HOT8
MD5:	7E3E6357044C022C4EA42CC2A39B44E4
SHA1:	92AB68DCF9B0DFDE57E797235DB7355E813E14BD
SHA-256:	A3F12D6B2FF2953F102ED1BD26C291DBE8A19F37EA8A97D3926F710794101BED
SHA-512:	53B925E11E3DBE0BBB56D4C29C9BB9249427BA0B423E4BA64B52BD4F1AC30B185A527E09F7EBBA9FBDA74EC60A750961402E40292B5EFB7B5731103E8DE85931
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/1835/promo_image/medium-152db9bbfdc4a8467e52313edf187bf0.jpg
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 25.2 (20231010.m.2357 03d1051) (Macintosh).2023:10:16 16:17:07.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................@...........2023:09:22 14:16:01.2023:09:22 14:16:01.+11:00..+11:00..+11:00....~.@B...........!..............................f7:.....f7:.............................................ZEISS

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 16:34:14], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	82838
Entropy (8bit):	7.616947674178863
Encrypted:	false
SSDEEP:	1536:WDlJAp32GWyLABDlJAp329G1A+qC4fT2ahOQRGk6s+iqwI9f8P:Wop32Bop3292AJ2aj4k6yqwIp8P
MD5:	766FE3B659E1E438B98C7E435C079B53
SHA1:	9CF32582CA584528A0E1231AA7CE4EDDE9C81185
SHA-256:	1A0E2EE01D1C18EFF44478B87D04CFA13B5AA178B75AC9830E106FF4709AC2D9
SHA-512:	7B4E2CF6AAD59490F6FECD2FDCCA8E5C860937AD00DA8C09F52E76A8587EE00C7EA5BC4051E783C5C78E27BB695370D441539590E8C911B0A32DA62C90F62CE3
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/424733/image/medium-081d69be84a684417dc947c9034532fe.jpg
Preview:	....+.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 16:34:14...........2...........:..."...........'.......@...........0231........B...........V...........j...........r...........z...........................................................43..........43..........0100....................l.......................................................................................................................2023:04:02 06:50:06.2023:04:02 06:50:06.H.o.@B...T-.@B............................}......_S...........................................(................................(......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	82985
Entropy (8bit):	7.8184477824829735
Encrypted:	false
SSDEEP:	1536:SkPTlGk/qv0JZJNtGbOsJAARbWTXgcG70YFIlOO8EbuSM:lP5hqvUZJ29dRCS0YzOA
MD5:	9EF37E814EAA1E6FA53F954C88A08204
SHA1:	C595F3E1FFA0932DE1711A235AE1C9C837E3A1AA
SHA-256:	4AC4A9E60696310D1DDA6D1AB9A10AFB98D65CA55F8E9511015EA3B09F08097F
SHA-512:	F01EECAB8F0DEA5AB000DC2F8280D3CF7B899E76AA2581C27260CD40AF0B54712EE5BABC56B211FEBE8FB89A8305C8AC237343AF08E2CB8AB74BECEDAE8F60E1
Malicious:	false
Reputation:	low
Preview:	.....`Exif..II*...................................................................(...........1...........;...........i...........%.......F...x...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......d...0...........2.......d...........0230....................................................................................................................58..........58..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...............-.......2023:09:16 08:25:56.2023:09:16 08:25:56..=..@B..A.......................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................V...........p.......WGS-84........................................(.......................................H.......H.............

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 16:34:14], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	82838
Entropy (8bit):	7.616947674178863
Encrypted:	false
SSDEEP:	1536:WDlJAp32GWyLABDlJAp329G1A+qC4fT2ahOQRGk6s+iqwI9f8P:Wop32Bop3292AJ2aj4k6yqwIp8P
MD5:	766FE3B659E1E438B98C7E435C079B53
SHA1:	9CF32582CA584528A0E1231AA7CE4EDDE9C81185
SHA-256:	1A0E2EE01D1C18EFF44478B87D04CFA13B5AA178B75AC9830E106FF4709AC2D9
SHA-512:	7B4E2CF6AAD59490F6FECD2FDCCA8E5C860937AD00DA8C09F52E76A8587EE00C7EA5BC4051E783C5C78E27BB695370D441539590E8C911B0A32DA62C90F62CE3
Malicious:	false
Reputation:	low
Preview:	....+.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 16:34:14...........2...........:..."...........'.......@...........0231........B...........V...........j...........r...........z...........................................................43..........43..........0100....................l.......................................................................................................................2023:04:02 06:50:06.2023:04:02 06:50:06.H.o.@B...T-.@B............................}......_S...........................................(................................(......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11056
Entropy (8bit):	7.937311134581586
Encrypted:	false
SSDEEP:	192:HtYuP61xKKDvQR+70+61A8kx/sr2lqEFk9166HUBXb0VjN7xmL:NYuP61xhDv1h6vmQGBkxcL
MD5:	4FF8F1EC4CD04BAEF797C0A3D5924A74
SHA1:	419BADF8AAEA65496345EE56D22A784BBF93B0E5
SHA-256:	E96001674B18E1BBF8E1F64B54781258395052E6575241063740C2957ADBC58A
SHA-512:	1EC81AC1CEF759282090004EB2E50C36BA9035BBF754773B6E41B404253B34FAB31939666689664237208701CEE3848585BE37AB5E78E28D0AF91CE424592F2A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i114!3i76!4i256!2m3!1e0!2sm!3i711462345!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=31237
Preview:	RIFF(+..WEBPVP8L.+../..?...(.$E...._....3....m+..wH.....rww..H...w.d..%.w..+..?1?.....F...$$....F....{..h.Z...........=.&<.#3t...A.(..0\|...[[........w.8.yk...0...z..,.e9D. .s.+.Y...m;.m.".T.`.....M.n.v......z.p..%G...(.........6/w.}Kh.o..p..c..l..f....':M...P.2......z6.........p'@{m.<....X......P.in.......D..]...6/.v...k..\..W.3......@..e4.\|..5...Wy.P..0...../....-........U....W..9..."...h.I.o.c@.vC(...a..s..z...(.r.....$....../.....y.(...Fj..F.Q...e..D.d..../.f...@..G.!Iy...9...4..."-(.E.Y.d..tK......gu........K.%bC..u...jb.1 .H]..M...)........?..)e.....2.i..8h#QU...&.D....zt..G...S.'e.4FCI@..........4r.....}......}..._Z........M. ...zm...@.C.5AiS...Z..<.....l........<...V..V3@...J,..xp....`c.Jk..4..t.%gx...J....?......._....2..^."pzz..[Q.........].u+/.dG........@.T.2..U....4..,.".p.p....n....%rXQfE...&Yi.....TT.n.6.M...n.....pK."._@O......j..&TS.m...y.p.....w9.d`B6A....-..9..ZOM`.m_\|....."].....t.....jB.1...m.....j'0l_\|.W.1"iZ*o..............A.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	42221
Entropy (8bit):	5.553445191433403
Encrypted:	false
SSDEEP:	768:V/hSTOgTQpBUHNieLZD4EFRPRYHBCu4utyiVVl:V/kTlT0
MD5:	D7BAF05C6E14C13A23F448AC65FF9D1F
SHA1:	DBE0994634F05F9E1AD254193AC747A9840FB18C
SHA-256:	8F52BE836A7F2E7003CA45F889E310551763B925DFBE105C3A1E31D18D132958
SHA-512:	9B047545BCE75A7BAB3FF933A6E6F01678039A51E50EFBA97FA5ECA793306003B686C05900C9B95491637F3C63B9D565A8485B5F455A194EF89AEB5F87B9E158
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700\|Google+Sans_old:400,500,700\|Google+Sans+Text_old:400,500,700&lang=en"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:zXiCnSYERtiY:zyuSzLL
MD5:	35B6A619A362BA45D0D0D0BCFD44ED1A
SHA1:	1861757776BB14A52ADCE55038467F8786032091
SHA-256:	DD52D749D44D6F445D2305ABDC069E4DE9C32152EACB9AED9927D5F3374B8A53
SHA-512:	7347BC80CA995A9FD6406D15217C7B8DDF3660480F29789D7E754807085A49278C9C610BEC800AF13B83D20CD51490D61A09AF2170E0A877740C0DB1003AC9ED
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmihBukKdU9phIFDSbzfSsSBQ0WyP4H?alt=proto
Preview:	ChIKBw0m830rGgAKBw0WyP4HGgA=

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	112513
Entropy (8bit):	7.873287154315107
Encrypted:	false
SSDEEP:	1536:Bw4GEGaqE2auy18vw8qL3SERCHxTFqAg0hmXGFDz3zD7SpJzhA0YoYce2JRyvG8D:VRGaqE2XI8G/RkvZmXi2JgdmyuSxb
MD5:	5BA140C128A26DAE5D3834334B788ABA
SHA1:	352972558244595868ADC0F5E439EAE3348657FF
SHA-256:	45D0764521875CAD8D83882220B9A9EFB8B5ADD4829430EB25460EF9FF1F7C51
SHA-512:	99B682AADDDB7C88B7BD20F5D7EC2B6C2F003369E9750F97CABFE3C95400949138BED48638D9E4E11F43C54B9BEE7D3D2A3A49D3F3AA85B99A6067FEED45887F
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/444969/image/medium-47f021e8ea123ad4af4c30aa744250c1.jpg
Preview:	.....\|Exif..II*...................................................................(...........1...........;...........i...........%.......F...x...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'.......d...0...........2.......d...........0230....................................................................................................................31..........31..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...............-.......2023:09:16 08:44:02.2023:09:16 08:44:02..=..@B..A.......................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................V...........p.......WGS-84........................................(.......................................H.......H.............

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12536
Entropy (8bit):	7.9818200437284075
Encrypted:	false
SSDEEP:	192:Jhyqvj0Hrr8505bFim1wJa7caH8aMw5iNHABbterDPetfnZGKvfx4UV2djnusjnj:JhyqQw05YU9caLtBbtMmzvfnV2dFpZY6
MD5:	10D1CDE48F909AF88DEA66A7A7D61BE9
SHA1:	79F3FB231729D0DA4D0DA4B78AE1CA617306A4F3
SHA-256:	379451A3B73A1673C5D37B0587E476253A78A05EDFCF842FF59B89BC9B7596AD
SHA-512:	C04927749D2D04788555C1944D5C8CD472816E69EBA26F4AF68EF4492B335692C2BEB072D0B66332C917FF6EEBB83BA693283C805DF3EF020FBB0496C3C293BE
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i114!3i78!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=102551
Preview:	RIFF.0..WEBPVP8L.0../..?.'.:.d%.wO........m.l#.V....."...K ..wy.6..'....C..B..@....D.k@..........?p.(.E.@...........H1.%..W....0].3..0.........9._....0.R..S)C.....y..ziq..a...1....u...}...r.....<vE..i.)u.(.....m..D....Q..HDE.....,Kku......2..s&.......;.$+j.g.c...q..].zJ..A...Z....s.o..w.XWu=...\)...e......J.......G.&.z..P3J.D..pQ...2.s..u..A...I.s....q.<..j.mo\|z.r..&.\.CT2.(...I.E b.=....M....pz...].n.n...s."...T.J}...;.b:.s7.!.h...J<d..).j's.)..... .-...i.n.(..Z.%../...........6.d...o...a......2gJd....Z.k2x.\|..vyw....2.x0...$i...e...4.&..`N..E..^0..(...T..*.+Z.1Q4.P-E...@YL.....t".............`vVG..k..:.S(&.._9<.rT..Uq.uj..w.u......m.(..N...C].)...._....>'.:k.......a.f8...8..........R...}..C.qW.A.Vg2..-.e.....5.\>......^....z]GB..T...;.?T.Tq.+....v.!.4a...}.a......@.UF@.-..P....aPr.........&%0wC......y.Cv.\|.7...~W....\|e...y.C.`..Bc$.....U.kl..`..h.....R..U.....dff0).....-.;..3...U.............H.....'...;.$..G....2.T...w

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	82206
Entropy (8bit):	7.798886257362462
Encrypted:	false
SSDEEP:	1536:4mwPWGxNZ3cwHgcuNzlcp9g3Z0nylgs6gNVeGpEI:zpPzulcn6gNEGqI
MD5:	D8B33B9C805C674A007BC4F0E1731204
SHA1:	C41DFCC223A9F23FB1D085233994B4A36CB8196C
SHA-256:	B3D2227D1ADFD61516A90E5E256DF1AA3DD93C31DDF8D83E2646931FBA938DED
SHA-512:	B0DDC9C754064BB7FD938E9FC9CEF99FA38AA5513E91B26D748050B75101015D9553B0653180693EDC8020C9433C2D1EF8064E1E866DF8E960A27EC6C27F5C9D
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/445058/image/medium-302f6974394cfb49e3cbf4f6da5820b3.jpg
Preview:	.....ZExif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................37..........37..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:...........}...........2023:09:16 17:58:46.2023:09:16 17:58:46..Jj.@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........12..........A...........3...........D.......

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18593)
Category:	dropped
Size (bytes):	18731
Entropy (8bit):	5.230888467989251
Encrypted:	false
SSDEEP:	384:t4kEaDwiwt8q9JEI4lxdmuXMZuQYgfx/pJlbwBh6aI5giQX1f26FZU1p/:yVrB9JEzlfXQY6bSlZw
MD5:	423395FB538FB5756905E6C3B25D673E
SHA1:	A891AE431AC74206B23B67DDD3E99F65ABAAC61D
SHA-256:	B3AD91D1FD87E45871BDBEBFF87175A57AD2004C1578109406BA99BBB33407DF
SHA-512:	840CB6E6EE257058115DA02F9D892E9BD8A2A6F57B704AC8EE79C5D03DCF1384446079578E3205367FAA5B76A5FC169B5263825C9D518EC6806D806D51BDFA34
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 279.6c6cafc8f2f34e06731c.js.LICENSE.txt /.(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[279],{43549:function(e,n,t){"use strict";var r=t(67294),i=t(33434),a=t(74865),o=t.n(a),s=(0,i.vJ)(["#nprogress{pointer-events:none;}#nprogress .bar{background:",";position:absolute;z-index:1;top:0;left:0;width:100%;height:2px;}.nprogress-custom-parent{position:relative;}.nprogress-custom-parent #nprogress .bar{position:absolute;}"],(function(e){return e.theme.brand.jungle}));n.Z=function(e){var n=e.loading;return(0,r.useEffect)((function(){o().configure({parent:".js-global-loader-container",showSpinner:!1,speed:300}),n?o().start():o().done()}),[n]),r.createElement(s,null)}},57918:function(e,n,t){"use strict";t.d(n,{Z:function(){return w}});var r=t(67294),i=t(33434),a=function(e){var n=e.emoji,t=e.ariaLabel;return r.createElement("span",{role:"img","aria-label":t},n)},o=i.ZP.div.withConfig({displayName:"WarningCard__IconographyWrapper",compon

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	293430
Entropy (8bit):	5.083604069256311
Encrypted:	false
SSDEEP:	6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC
MD5:	FB2D334DABF4902825DF4FE6C2298B4B
SHA1:	433836DA7E015F2EB3FC386817DE88B78248F6EF
SHA-256:	430F36F9B5F21AAE8CC9DCA6A81C4D3D84DA5175EAEDCF2FDC2C226302CB3575
SHA-512:	8CAC69EC91C437AA5E126CE683A6BB5C904E44D4C1D084C3D8F8BEE85524735E8F09A340257D9A859D5E8E7D69D6E637ECFC728AB9FFD0E30D65B2136C48378F
Malicious:	false
Reputation:	low
URL:	https://www.riparide.com/assets/jquery-3158ee616193dde0b605a15cb9ca832f9de674111b7cf4393353432ab8fa272d.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	195325
Entropy (8bit):	5.634628134309697
Encrypted:	false
SSDEEP:	3072:M/9VO6UDDp+DvE49MymfhYIr/l+W10Wjtijya62EaOGgX2HlbtQBJ25PgAYO9m0E:Y9VLUD4M49MDfhYG/ld10WUua62EaPg7
MD5:	F54C9060740C6FA2FAE1FA614D66AF32
SHA1:	ABF34C2F549FCCFD616C1C136A4F5DFF23033DAD
SHA-256:	BFD7735BA4BBCCDAFB1FD3C00D9182D5ED058E194A1C33A15C096091B5A2A630
SHA-512:	B4E38E4730CB1C2D4BB222F9DD5D2BA80F829DCC51A6A1500C8313E1486356E73CE4D5C60E54B57946802CBD5C2246CA4B5F77B13873A81C24937EF962A6A4B2
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zwa,$wa,bxa,dxa,QB,exa,fxa,hxa,SB,UB,ixa,VB,WB,jxa,ZB,lxa,cC,eC,fC,gC,hC,iC,kC,lC,mxa,mC,nxa,pC,rC,sC,tC,pxa,qxa,uC,rxa,xC,AC,BC,sxa,EC,vxa,FC,HC,IC,xxa,yxa,zxa,Bxa,OC,Dxa,PC,Fxa,QC,Hxa,Gxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,UC,cya,WC,dya,eya,fya,gya,hya,iya,jya,kya,lya,mya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,XC,Pya,Qya,Rya,Sya,Tya,Uya,Wya,ZC,$C,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,fza,gza,aD,hza,bD,iza,jza,kza,lza,mza,.nza,oza,cD,pza,dD,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Kza,Lza,Mza,Oza,fD,Pza,Qza,Rza,Sza,Tza,Uza,Yza,Zza,aAa,dAa,eAa,fAa,qD,gAa,rD,hAa,sD,iAa,jAa,BD,CD,lAa,ED,FD,GD,nAa,oAa,pAa,JD,KD,MD,ND,qAa,OD,QD,rAa,tAa,uAa,wAa,AAa,BAa,WD,FAa,JAa,KAa,LAa,ZD,MAa,OAa,PAa,QAa,RAa,bE,TAa,YAa,jE,aBa,$Aa,kE,bBa,mE,dBa,eBa,fBa,hBa,iBa,KE,kBa,LE,lBa,mBa,nBa,oBa,NE,q

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	195325
Entropy (8bit):	5.634628134309697
Encrypted:	false
SSDEEP:	3072:M/9VO6UDDp+DvE49MymfhYIr/l+W10Wjtijya62EaOGgX2HlbtQBJ25PgAYO9m0E:Y9VLUD4M49MDfhYG/ld10WUua62EaPg7
MD5:	F54C9060740C6FA2FAE1FA614D66AF32
SHA1:	ABF34C2F549FCCFD616C1C136A4F5DFF23033DAD
SHA-256:	BFD7735BA4BBCCDAFB1FD3C00D9182D5ED058E194A1C33A15C096091B5A2A630
SHA-512:	B4E38E4730CB1C2D4BB222F9DD5D2BA80F829DCC51A6A1500C8313E1486356E73CE4D5C60E54B57946802CBD5C2246CA4B5F77B13873A81C24937EF962A6A4B2
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zwa,$wa,bxa,dxa,QB,exa,fxa,hxa,SB,UB,ixa,VB,WB,jxa,ZB,lxa,cC,eC,fC,gC,hC,iC,kC,lC,mxa,mC,nxa,pC,rC,sC,tC,pxa,qxa,uC,rxa,xC,AC,BC,sxa,EC,vxa,FC,HC,IC,xxa,yxa,zxa,Bxa,OC,Dxa,PC,Fxa,QC,Hxa,Gxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,UC,cya,WC,dya,eya,fya,gya,hya,iya,jya,kya,lya,mya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,XC,Pya,Qya,Rya,Sya,Tya,Uya,Wya,ZC,$C,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,fza,gza,aD,hza,bD,iza,jza,kza,lza,mza,.nza,oza,cD,pza,dD,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Kza,Lza,Mza,Oza,fD,Pza,Qza,Rza,Sza,Tza,Uza,Yza,Zza,aAa,dAa,eAa,fAa,qD,gAa,rD,hAa,sD,iAa,jAa,BD,CD,lAa,ED,FD,GD,nAa,oAa,pAa,JD,KD,MD,ND,qAa,OD,QD,rAa,tAa,uAa,wAa,AAa,BAa,WD,FAa,JAa,KAa,LAa,ZD,MAa,OAa,PAa,QAa,RAa,bE,TAa,YAa,jE,aBa,$Aa,kE,bBa,mE,dBa,eBa,fBa,hBa,iBa,KE,kBa,LE,lBa,mBa,nBa,oBa,NE,q

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.56835352946378
Encrypted:	false
SSDEEP:	3:zXiCnSYERtiugC2VDqS22AS21:zyuSzL9gjVDqSfASQ
MD5:	A7A2FED7100356D9B4FC121B598ABF4A
SHA1:	4326D6769CB848A18CC36E4D76FE7D4467E1F3B9
SHA-256:	E92979195DDD25B3148F4213F45B8048C9F91C2595CA42DA289E0BEAEAB8780F
SHA-512:	8C56C5F445DD109278BEFF9F946F123DF3E2F4B65BE576B4F8598B399BCB1BDC3D16871D3D77875EFD31222FF2BCB5C104F8FA2E8BA3AD49B7D798C3C1C1AD67
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmihBukKdU9phIFDSbzfSsSBQ0WyP4HEhcJNmnzFPGC8OoSBQ09H1M8EgUNPR9TPA==?alt=proto
Preview:	ChIKBw0m830rGgAKBw0WyP4HGgAKEgoHDT0fUzwaAAoHDT0fUzwaAA==

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.5925409090724
Encrypted:	false
SSDEEP:	48:IX+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwWynDuExjGx:IX+5AQHAray48f5JMYHIqWYDu9
MD5:	700162D44BEC8910BC18BAD17FB71EF8
SHA1:	A2BD47D15382CD6F1AE26BC495E272E0CCA62657
SHA-256:	E4E12101DCE28E11EA09E33F464FDCD06F841B97970E299F7B31EEE4D4462130
SHA-512:	78F69A11C226F7CFC176697F1AB9E28ED83E725AFA14146333CC5EBB895A2820FCBE471032DA50AACB0CB72955A4EC718FDD3F5110B4252BE704FE4580A86457
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_GB/sdk.js
Preview:	/1730342179,,JIT Construction: v1017824523,en_GB/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=3500], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	78980
Entropy (8bit):	7.8425011102235365
Encrypted:	false
SSDEEP:	1536:5O8XtlHnHGs1WbZs2sigAzXVDgO+5NjhYu+luik14+9jmzz2iP3:jn31WFlsilDgO+5NjhYu8X1oj3iP3
MD5:	01A343B3DB5B746D3E9AF9061E7BE720
SHA1:	06877C256B1484B18FE83F1C89B7977DE40B0C9E
SHA-256:	4DD82AE73539474E3924FDD585CA1976ABB8B054EC9255F1FCE68B842BA92D92
SHA-512:	46F27A9A09A050E53CFA22866F6DE99390EA08A426C4843842F6ED51A43C5EE26D46FCF92B217A8A916E1A0B612DB4A6FEB8C5A1B2B3853D88A83B7BB051D827
Malicious:	false
Reputation:	low
Preview:	.....eExif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 24.7 (20230712.m.2239 0f0768a) (Macintosh).2023:07:19 12:10:40.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................d...........2023:06:23 07:12:57.2023:06:23 07:12:57.+10:00..+11:00..+11:00...`e.@B..........Z'..............................f7:.....f7:.............................................SAMYAN

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12192
Entropy (8bit):	7.975728993642575
Encrypted:	false
SSDEEP:	192:pKeneoBp9NaxuDhRXhbUY4WXcqeVPYnzTRdc+eCfGEE9fsbKgeVjpRgr6ltopajw:7RBfXhYJYfeVPYJ3eCf7W7gojMbEzQ
MD5:	9B9BD56A8F539CC93C3202C9471B9F8F
SHA1:	775F6B85DE71283742CCC7007BA32333A5C1BB0E
SHA-256:	9A0C5B83830E4737E9350D2F611F1264E7F9CD319E0B6FDCBE2162F2BF8A30EA
SHA-512:	FFF918010EC270B8E17FDCCF3FBDE82C973D3CE132B2FC37A33586BADC2C5FCBE191CA4E1B1E9762D97C3C67773BD30233BC1A7EC6610E622F8416CBC862BF33
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i7!2i114!3i77!4i256!2m3!1e0!2sm!3i711462489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjJ8cy5lOmx8cC52Om9mZg!4e0!5m1!1e3!23i47083502&key=AIzaSyAfvb_hz8M6pcxYel77aFwLRz4L1A9WHig&token=64827
Preview:	RIFF./..WEBPVP8L./../..?./..m%..0...HM)g..]...#IR...@J.O.....8.l%...Q.....'....w..._.......q.w.g...,......-t...QN....I... ...k.7pK.e.<W.).9:mk....M1.~8.....p1.%LF....N..9-"i......(....?..^.`..4..E..5.5.Z+.\.t.Y.{....7YU.K2...HO.m...../D.E.H....i)..q`....O..........C.m.nt0%&&C}........F...{..1.....e.NDD3.s...8..........a...=s9......;i.T.t.4I..A"h.U.g.....ND.7........H.I..W...N....a.g.....%.{.B(.......8...G......Q........<[...}7<=...r.r?..7.C.d...r.h.n...u...........8.......s.;....[:...vM......C....2.+);..d.O..Za..{:....-.......l.\|A.Dn!.\|.....K%...1....M.......g..2.m.D'@......s.G..%.V..U.'....4X.[V.........M$...a.m%.[.#.H^.80t.....D.e.eSb b.F..d...}'e.0Z"i...\.Y...i...<T..(.E.p....(0..[.......'..^.AZP.7.$S\Y.U.IY.o.I..^.w....,Z,..%B1g.G."....-F..I....>.1.].+X.....(..}.MT.....u.JRB...ALNw.....[{.Z......)x.2........z.x.KiTby@.3..(.....[..Y..<b..M.[.q........$...%...~.[.. ......y2.-s.Y...pa....U..l1.....~PJ<86.Y....81F....q.Y....M..8.j...h.}2.=...g.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=2333, bps=194, PhotometricIntepretation=RGB, width=3500], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	61992
Entropy (8bit):	7.6699153422287125
Encrypted:	false
SSDEEP:	1536:9B+bw6gBBoFVAyVTvJSYjiuU6l65lvqAnajSaX:DHBKVdVM76g5lyAna2aX
MD5:	74577F4F32FE666F4E99C0FFC26327D8
SHA1:	184A6F9A77BACB3BE4B0F47D63FE82985501E1BF
SHA-256:	B75DCCB9BBA27217995178B2E7CCCC1C96C795224D1604DFEE9CE3663E7F8ACE
SHA-512:	A841E897B62C542B32EE8FD993179139FB47B881A44DE622D824823D25F3B812CB9A5EB53F9844D65044B15A8CA38DF953456A441DC3D5554DB8E4B065B0F3B2
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/1745/portrait_cover_image/w400-36e85c99dd0d52cc3380593ffa379c79.jpg
Preview:	.....wExif..II*...............................................................DJI.............................................................(...........1...<.......2...........i.......0...%...........Z.........FC3582....-..'....-..'..Adobe Photoshop 25.3 (20231118.m.2405 d7bf9d7) (Macintosh).2023:12:16 10:50:40.&........................."...........'.......d...0...................0231...................."...........6...........>...........F...........N...........V...........^...............................................f...........1...........1...........0100............................................................................................n...........................................................................1.......v...2...........4...................@...........2023:06:23 17:30:44.2023:06:23 17:30:44.+10:00..+00:00....~.@B...\..@B..............d...@.......d...d...53HFK5R0M301CM..@.......@...........d.......d...6.7 mm f/1.7........................S.................

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1738)
Category:	dropped
Size (bytes):	55620
Entropy (8bit):	5.454703903758312
Encrypted:	false
SSDEEP:	1536:KumfXEy7uUB3MpE2ryZiOfyKjQPntcC3r9hp7rwyMcSc1INksR7JzhI38frawB:KbXEy7rMpVryZ5fyKeJ3r9X7rwyAc1I5
MD5:	DDCDE5548407AEDE3DB92109F726F6EF
SHA1:	25DAEE97AF2B79D105E7B6B867062803FC51C826
SHA-256:	7BED3A8F2C7F58EC5705446B1FF3949E5CF8D4555DF7894904FECA8407F56DA3
SHA-512:	448BD22D95B68334474591925A1EBA135FB8945F02C1EDB5ED4E009B62D2310668BD7C2E164142CA2F88258C0E5D68EA0B2146F60A0ECD3FF6FA120E273EEE4F
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('poly', function(_){var BQ=function(a,b){return b?_.ts(b,a.map.get("projection")):null},CQ=function(a,b){return b?_.im(b,a.map.get("projection"),!1):null},DQ=function(a){for(a=a.toString(16);a.length<2;)a="0"+a;return a},TZa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)},UZa=function(a){const b=a.length;!b\|\|a[0]==a[b-2]&&a[1]==a[b-1]\|\|(a.push(a[0]),a.push(a[1]))},VZa=function(a,b){for(let d=0,e=a.length;d<e;d+=2){var c=new _.fk(a[d],a[d+1],!0);c=_.ts(c,b);.a[d]=c.Eg;a[d+1]=c.Fg}},EQ=function(a,b,c){const d=a.path;a=a.Zm;const e=[],f=a?[]:null,g=d[0]==d[d.length-2]&&d[1]==d[d.length-1];for(let h=0,k=d.length-2;h<k;h+=2){const m=d[h],p=d[h+1],t=d[h+2],u=d[h+3];let w,x;a&&(w=a[h/2],x=a[h/2+1]);let z,B;switch(b){case 0:z=m>=c;B=t>=c;break;case 1:z=m<=c;B=t<=c;break;case 2:z=p>=c;B=u>=c;break;case 3:z=p<=c,B=u<=c}!h&&z&&(e.push(m,p),a&&f.push(w));if(z!=B){let D;switch(b){case 0:case 1:D=(c-m)/(t-m);e.push

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:03 19:00:41], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	198087
Entropy (8bit):	7.921222290157694
Encrypted:	false
SSDEEP:	3072:YnqHXxthV8Y7c19DsO15UHA07uEaKzuthXxHVVLqecypRNBRihe0P/NR4Nlh0NCz:BBt0CcV150qEPzyBHVNqhuVAA0PFMU+
MD5:	56354B7CA45D2A172E883D57294CCF2F
SHA1:	CCEA2CA1D4BC4F3BB56EF547C363C58B02CA3590
SHA-256:	222FD2A23448D71F5467922AF6FBFB33DF1EF1EB8B001701FA015B23CFC923D2
SHA-512:	D0E6A30407D187B1B24325E6A9F6CABD42EBB24D7D132812EC4C858261B6B695B3AC98ACE93547197371DD3048242AC23A2EBED70E9B64C1EBF67F4D020EF6EE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190322..<..080658..>..20190322..?..080658.8BIM.%..........G.me}.E ..W.....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:03 19:00:41...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................07..........07..................................................................................................1...........2...........4...........5...................d...........2019:03:22 08:06:58.2019:03:22 08:06:58..`e.@B...T-.@B..........................................365012000017..........F.......................EF24-70mm f/2.8L II USM.3545006846.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.0 (Macintosh), datetime=2023:10:14 02:36:12], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	141172
Entropy (8bit):	7.8626854151134795
Encrypted:	false
SSDEEP:	3072:DS8/YXAcS8/YXAuAHAsarkg7Al3M3BLOzVdiWIn:DYXAmYXAFAX3A3M3dORdiDn
MD5:	8DC2FE1DE8694126C0A4BD60250711C9
SHA1:	8D22F56AE86180D2AD5D86F1A5261912C89BAC29
SHA-256:	630A9B7349E64FBE8004A0D51003410D46285D94700E9A0F206C875C414F6AFF
SHA-512:	7CC05E853635081F6A0DEEFC3627941C24FC03F1752A6CB08AC7DD4770AA162C095F54C7140CEE64558669432CAB260A4ECAB80C57F65AFE2536A82C4D37CF45
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/photo/449709/image/medium-35ce0d93467184e669bf19894bb867d7.jpg
Preview:	....S.Exif..II*...............z...................................................(...........1...3.......2...........i...............SONY..ILCE-7RM3.,.......,.......Adobe Photoshop Lightroom Classic 13.0 (Macintosh)..2023:10:14 02:36:12.)........................."...........'...........0...........2...................0231....................................................................$...........,...........4...........<...........D...............................................L...........0100....................l.......................T...........\...................................................................................d...............................................................2.......l...4................... ...........2023:09:22 15:55:58.2023:09:22 15:55:58.+11:00..+11:00..+11:00..P'..@B...........A..............................f7:.....f7:.............................................ZEISS Batis 2/25........................................(.......................

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x180, components 3
Category:	downloaded
Size (bytes):	25675
Entropy (8bit):	7.957115103494195
Encrypted:	false
SSDEEP:	768:j3CTrnAM2RtTxu5g8WA3oribOhT4DKqndU/:jyY5AS8WAYr9evndU/
MD5:	FA5767092A8FBDD836A67C1983A6A202
SHA1:	BA024472F912A0CA9BF55BEB71EF54F4559269EC
SHA-256:	DCA7374669DE923E59393AB73DF98B0F47E6107A0D3C0E8C26C2FEB0474036E7
SHA-512:	51F814E4B4A7021BCAD834729107E8A2D88D86B71367801C43FADDA7136C1D3660D1DB62A699DA28C037C996E77FE20508CB4F65BC8331CF1B80F03866C3B0FC
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/user/7212/avatar/thumb_lg-a1831e2a921bc5f041be78084fdddd93.jpg
Preview:	......JFIF.............HPhotoshop 3.0.8BIM..........Z...%G........8BIM.%............x/4b4.Xw.....Exif..II*.................http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="64C0E24530A5A57CC89A2A01BCCD84F3" xmpMM:DocumentID="xmp.did:648FFCFE655E11E9BDB8A76B5DB05616" xmpMM:InstanceID="xmp.iid:648FFCFD655E11E9BDB8A76B5DB05616" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 7.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3f124dca-23d2-4549-8023-ae27d3fabbc6" stRef:documentID="xmp.did:3f124dca-23d2-4549-8023-ae27d3fabbc6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6098
Entropy (8bit):	7.920569924194017
Encrypted:	false
SSDEEP:	96:OXr1YwfDwiNR9q/xnPkjzaAQFZtwB0DAW+Ug2VhMECdnbKaM6P/gUjocN4rB7XTS:RkN6PK2AQfiBukUg23MEaVM6wUUcN4rM
MD5:	6FAAA582FDF281F87092F670B16158AA
SHA1:	E14096CDBDD99D2A1097F810FA0EB5BE6F28537E
SHA-256:	8871123C9A1A0124A05580E86BEFC476CBB05EA8E963295263C5CE576FA9F57F
SHA-512:	507B8FD3DF8A7A5B785DF4DFA82AEAEB90B41708BD5492C9BADB7AECFFC1BB096692F658B9E676232E4623C4B0338D5D1C0EE07AFAC606E8AFBB13B9C3AA898B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.'.&..4\..(HE...s..l#.V...V....."w.q$[.n..@..p.H@..}.?...w..@......x...m.o.<...^..Z?`...,c..k..YK......\.....z6...7.....R3.),.bY'...+$.o...m......<..[......\..^s....\..6.....T...${%..J..H'I.2.^I.}.Z....V<.'>F....s"..x.\|.N..A%ldD..$..Y..`...${6C%~Nd.Ha...J....^.d/I.M..5.d.-IJ....0...x..............1Mr/%{J..]7.-I...x...y..s1...6..\|~1.....d.......D.......@.....<..'.8.<....\..4i....k..-...RH.4.hi@X..h....B...$q..N5{{j.N3.c..1.Xm..(.......4ip..].O....h.H.U.}C.......E..@.8..g........5..x(.. ...=..s..i....kD..lk..^Q....z.%..>......7.lZ...I.o....j...24...u.z.%.K.w..K.>..D._..9..."8....k..d/.$.......<...<.....O....9R{D5..`D{..hz-.dC...`.4iZ.0v".<...<..t.x..D..\..}.M...+I..PW.=PW...iI..F....B.$........k..e..T...W..P...M..7....s.=N...:.Y..=...Z....IV.....T@...V..B_......x.o.G.ui..]c.......5U...~ !5)+.u..PF..@=.....S<x%o....rK...X&.h.....dCrhzJM....@..J.@.....Z..'..bz..O..-)6Ht.0.a....^...@=T.@...*...{Y.....,N....S<B..

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Apple, model=iPhone 13 Pro, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:04 17:31:59], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	135197
Entropy (8bit):	7.874091675022356
Encrypted:	false
SSDEEP:	3072:VOhpOhUpj2/EIESyBpsttH8Nd7wRQSEmvh3d:UhQh+Sapst98NtIQSEGd
MD5:	B78FFA730DBDA1A4A2DA6838C5396D5E
SHA1:	2F5955D48AB3A809D15863F27B655EB71D1669D0
SHA-256:	B1CFEA9AAE7C4E1E2281C168B486AA6653C47A9E26EA5BB07EBFB681506BD475
SHA-512:	867DA8073CCC03DC2651347D0DBCBBC14515FC346BA50643F672891DDE027E020AAEBA430AC947E86B6FA296A4890334E5F8FEBA88EC7EF66F4F0826E8619C74
Malicious:	false
Reputation:	low
Preview:	....G.Exif..II*...............z...................................................(...........1...5.......2...........i...............Apple.iPhone 13 Pro.,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:04 17:31:59...........&..............."...........'....... ...........0232........6...........J...........^...........f...........n...........v...................................~.......................500.........500.........0100....................l...............................................................................................2023:04:02 16:00:51.2023:04:02 16:00:51....@B......@B..Ru..o...............d.........2.......................................(................................D......H.......H.................................................................................................................................................... ....Adobe.d.......................................................................................

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS-1D X, xresolution=132, yresolution=140, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 7.5 (Macintosh), datetime=2019:04:04 09:20:01], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	148174
Entropy (8bit):	7.874866262777435
Encrypted:	false
SSDEEP:	3072:7bW1O21MLkw7FnZfFCM8fBBWpjL7mRgbP1vL8we6:O1j1iJxZfFCMkBBWpvQqPptX
MD5:	3318FF2F3059B5DEE0D11942E2A7D4A9
SHA1:	FFB02E28EC5A770F6553576479BA2F688B6BF0A1
SHA-256:	96C6201A881E7D3BDA4511E5996870DD7EF849805C13D9D5737525342661575D
SHA-512:	5DA2C2AD99892A3B4CE9CCBE90C0FDD2264D50F594327868EB05751CD5EA24952110E74FA39B70F9E5F61C4F99BC426F2CB5FDBA3487097B3ED1AF506A7DD2D1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.........,.......,......8BIM.......?..Z...%G.........7..20190321..<..073735..>..20190321..?..073735.8BIM.%.......!.j!....p.oW=Cl....Exif..II*...............n...........t...........................(...........1...2.......2...........i...............Canon.Canon EOS-1D X..,.......,.......Adobe Photoshop Lightroom Classic 7.5 (Macintosh).2019:04:04 09:20:01...........H...........P..."...........'...........0...........2...................0230........X...........l...............................................................................................45..........45..................................................................................................1...........2...........4...........5............... ...............2019:03:21 07:37:35.2019:03:21 07:37:35..e..@B..................................................365012000017..........#.......................EF16-35mm f/2.8L II USM.000085027e.....XICC_PROFILE......HLino....mntrRGB XYZ

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Capture One 21 Windows], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	48999
Entropy (8bit):	7.611413078104807
Encrypted:	false
SSDEEP:	768:px5prS9Yy6pAqLBOd+hwhYXNWujAC4MF82U/f4w4+29zaKxRdZ+hlj4MZuKh:px5g9GZe+hq8WuMC4hR/Jl2taEDYlj4m
MD5:	BFFBDBA92EB27CDE0122CBE79052E3D3
SHA1:	3AD51C85388D0870ADB6F8D24F347AD6D8D363E3
SHA-256:	8C6AA963E20582A5278F3CC2BCFF0894FCBAD4B3840439F1204E002E9F7A44BF
SHA-512:	6D3A5C6881E2652F4E71E7558F27683B2F4ABA7ABADB97E0F3F8169EEE4539F4BAC7C3D1A76C8F0C9A49B94EAA819899098DA1A626ED1B5224F5E31F906E94B5
Malicious:	false
Reputation:	low
Preview:	.....:Exif..II*...................................................................(...........1...........;...........i...........%.......F...`...Canon.Canon EOS 5D Mark IV..H.......H.......Capture One 21 Windows..ADAM O'SULLIVAN.#........................."...........'...........0...........2...................0230....................................................................................................................17..........17..........0100....................l...........................................................................................................................1...........2...........4......."...5.......:.......................2023:09:16 17:56:12.2023:09:16 17:56:12....@B..........................(.........+.....@s0.....025021000623..(.......(.......................Canon EF 40mm f/2.8 STM.2361100084........................S.......................E...................................$...........,...........9...........A...........3...........D.......

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10106)
Category:	dropped
Size (bytes):	273535
Entropy (8bit):	5.409294334917848
Encrypted:	false
SSDEEP:	6144:Y8S7cwziGx4WNgYCsGsRtcVFwE8AGknurzbprox/JMtMPtshK:Y8S7cwziGxmYAVFwE8ADnurzbprox/Jz
MD5:	C80C822A0297DD817361DB1ABE7EEDBE
SHA1:	11D77914252B4A43A0B344B1079B8B7E71B1EF09
SHA-256:	87969313EC0E62CA6DD87F362F5D80BE5D5850DF5CC92E40AEA16D405A80B9B0
SHA-512:	18C05753143D5770273BE0A19BFCCE79A822E363743165C7A2789185AED54678D4C289DA86B7A12857DD65ACA403783299A060CE84E9C4876C47414A8B5A3290
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Nia,Mia,Pia,Via,bja,cja,fja,Er,gja,Fr,hja,Gr,ija,Hr,Kr,Mr,kja,mja,lja,oja,pja,rja,us,tja,vja,wja,Fs,Aja,lt,Jja,Lja,Kja,Pja,Qja,Tja,Uja,Vja,Qt,Wt,$ja,Xt,$t,aka,au,bka,du,hka,pu,lka,qu,mka,nka,pka,rka,qka,tka,ska,oka,uka,vka,vu,wka,cla,gla,ila,kla,yla,Xla,$la,dma,ema,mma,nma,oma,pma,tma,rma,mx,nx,vma,wma,xma,yma,Ama,fw,gw,Bma,hla,ew,hw,Sia,Tia,lla,Uia,Zia,aja,Gma,Hma,Ima,Jma,Kma,ux,Wv,Nma,Oma,Pma,Rma,Ela,Wla,Pla,xja,zs;.Nia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Qg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Mia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Mia(f,a,d+1));e&&b.push(e);return b};Mia=function(a,b,c){a instanceof _.hh&&(a=a.Eg(b,+c));return Array.isArray(a)?Nia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.kc?_.rc(a):a};_.Nq=function(a){return!!a.handled};._.Oia=function(

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6697
Category:	downloaded
Size (bytes):	2667
Entropy (8bit):	7.916269174487254
Encrypted:	false
SSDEEP:	48:XWMBiQszIvhzrs7TooRT3ePhx1JkxCLQ+pJ8D++Cca/hcvSXwzFC0GBSfTlb0qSZ:mbxz2FrGoopCJiCPJ87pvSXwEJBslAqc
MD5:	F12EEEBC65F88502799DAF943D9E7C4C
SHA1:	35A4BA518F3417B78B5CFF56C1874F7593A11B61
SHA-256:	9B2BEC97C311E3478AA6E927D876B5958A99DCBC15184C232CE16F8C2716682A
SHA-512:	14CD84637C346638644DA6EDA14C71E1C1C48A01BE33B1574CD0AC95F969DFA328188EE274EB9570097C22B4997BAFC148C31D8C27B8B2B84F75887D081872B5
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/ahlg24mu
Preview:	...........Y.s.:..+.w'.........R..R`.s..nF..D.H...47...O.#v....2..:O...'...x......'....i...+...>}H.Ti.L.L.t0%I..(...-..d{$a.!I).J%i...J.....2.x....1...Q.....d.#..W......$R<,....V.c.....\..^..\|^ZkI.w..8.a..>...DMc.c<U$..S...%..._i5J..k..s.........19>;>99.N.u.E.Q...f...q.....sm..Sj.b.=}2\U.6IS.3.}O...j...+.3.....t.R"..`J...T.`o....sO..g#...h........-.;2K;..[yw.F.`..i..p%U3.-Qd..d.3X.k..z}.3R.......e.d.=K...Be.gi.f.Dp.b...CD+.#.gV..?.T..J$T.k.8[1:.C..6.n.M2.l<Qs.....VL`wB..U....H.)..o%).\......V.Pl.B....w..J]..%".p..5GB...G..5.VA.\|K.(.Y.#...t..c.Vt..IES..:..)_"..t...5:......Jat..].e.a...S.!W+.F8..NH^.Q.z......Me~.9.E...v.....OFD.o..;..X..e.9r..DiK./d.%.6.../..f.u~\|.r.r{.^4.X.7....L7..b..F... ..JR..V.....E..?5.l..[....d?_._..n.w9%..%..{...m...v\.)[_?........n..h.z].5.z...G}c.}.tO...0XNH..D..g...^eS........k..?f:;.tl6.9S.KI1I.#q.i......."$q..G..QSH};.0...~..+.i.5...R.T..p..l_(..l6+K...,U..!.o."...Y...3YJD".M.&?Dv)z.S...DK.E.4.........E..[.9.{...

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 400x500, components 3
Category:	downloaded
Size (bytes):	109837
Entropy (8bit):	7.968619605687691
Encrypted:	false
SSDEEP:	1536:/7z+esCwo9MU7z+esCwo9MmoLYm7nV04x07YLXuAIQ2X/o/Gex9jCdC+bpe8bohh:/BsCVBsCZeYm47YjuEN/GeNX+bbe54Wb
MD5:	C7BB13F0395FD0C4D699AA21ADB4162B
SHA1:	97EBD82089389D30D85080AEA41BDD8F15AF5C0A
SHA-256:	5603CC7938B861E36BF27061B82B9C2073AE4FE67221F73B312A980CB8FFF718
SHA-512:	FDEF3B0180C6BCFBFE59EC55F99D5DC31F561F6FEE4CA032B8AF34B1136F847D6F50B2B783F3E50CEEDE7C84081EB544F84AC61364AC43D10282BF9C41AD9332
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/story/1673/portrait_cover_image/w400-47b8ac704aef88559c8a27c5e34956b8.jpeg
Preview:	....P.Exif..II...........................J...........R...(...........i.......Z.......H.......H.................0231........0100..............................................................................(................................O......H.......H.........................................................................................................................................................Adobe.d......................................................................................................s.......!.1AQ..a"q..2.....B#.R..3.b.$r..%C4S...cs.5D'...6.Tdt....&.......EF..V.U(........eu........fv........7GWgw........8HXhx........)9IYiy........:JZjz........................m......!.1A.Q.a".q..2.......#B.Rbr.3$4C...S%.c...s.5.D..T......&6E.'dtU7..().........eu........FVfv........GWgw........8HXhx........9IYiy........:JZjz....................?...Z..........{..Gv.{.....f-F...cW..D...ER.9..WwWduT.....,sQ.6.$.Y....V......I8,..Q.%x".D..W...0g....G..f.O..k.i..:...m a

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh), datetime=2023:04:03 14:19:04], baseline, precision 8, 620x467, components 3
Category:	downloaded
Size (bytes):	101444
Entropy (8bit):	7.782421430539202
Encrypted:	false
SSDEEP:	1536:K00OlXdLeycydAZ500OlXdRGP/KjHTvh6A5E106WE2jljIN1dCiOSNurZFhbqW:KclXdc5clXdRis16A500D5jIrwiOSQr
MD5:	84DFFA5BB07F753D012C099720A6C22E
SHA1:	1B71A95A6100A5E6F5E104D04F8E3E8BA8C8270F
SHA-256:	5C16D685BA0297B4AE2542460D5F7BC2013D01BF8EF125E9F7806DFE30F6FFCD
SHA-512:	97CCE25E3499E0BB90A273A4AA8D002C2D83C12492E7D218D159A6BAF23696ED09FEA8CCA5D4832DEC8764A1F6BB190EF959824A44090E967813EC7756A8DE2D
Malicious:	false
Reputation:	low
URL:	https://assets.riparide.com/component/1689/promo_image/medium-45ebcebe51f9faa2cfe7e20d6e87319a.jpg
Preview:	....6.Exif..II*...............z...................................................(...........1...5.......2...........i...............Canon.Canon EOS R5..,.......,.......Adobe Photoshop Lightroom Classic 11.4.1 (Macintosh)..2023:04:03 14:19:04...........2...........:..."...........'...................0231........B...........V...........j...........r...........z...........................................................77..........77..........0100....................l.......................................................................................................................2023:04:01 17:10:11.2023:04:01 17:10:11..=..@B...T-.@B............................}......_S...........................................(................................3......H.......H.................................................................................................................................................... ....Adobe.d...................................................................

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3335, bps=182, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7RM3, orientation=upper-left, width=5000], baseline, precision 8, 620x467, components 3
Category:	dropped
Size (bytes):	83429
Entropy (8bit):	7.68635903757558
Encrypted:	false
SSDEEP:	1536:Pzd5+4OLzdPGD2vBbUAtPofkvIzyZ9cmr9BIJaMrZ4Z0m+L:PzdxQzdPQ2vSA2cP9lr9B+HOT8
MD5:	7E3E6357044C022C4EA42CC2A39B44E4
SHA1:	92AB68DCF9B0DFDE57E797235DB7355E813E14BD
SHA-256:	A3F12D6B2FF2953F102ED1BD26C291DBE8A19F37EA8A97D3926F710794101BED
SHA-512:	53B925E11E3DBE0BBB56D4C29C9BB9249427BA0B423E4BA64B52BD4F1AC30B185A527E09F7EBBA9FBDA74EC60A750961402E40292B5EFB7B5731103E8DE85931
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............................................................................................................................(...........1...<.......2...........i.......,.............SONY..ILCE-7RM3...-..'....-..'..Adobe Photoshop 25.2 (20231010.m.2357 03d1051) (Macintosh).2023:10:16 16:17:07.).....................&..."...........'...........0...........2...................0231....................B...........V...........^...........f...........n...........v...........~...................................................................................0100....................l.......................................................................................................................................................................................2...........4...................@...........2023:09:22 14:16:01.2023:09:22 14:16:01.+11:00..+11:00..+11:00....~.@B...........!..............................f7:.....f7:.............................................ZEISS

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105589
Entropy (8bit):	5.174631609043928
Encrypted:	false
SSDEEP:	768:MLMeCBCBk7C/MFRo43esRdLyWQL9XJYOLBOiDYdveR2CjRBKF2FTm7L/PTDFlIs4:0CBNW/E1D82vnCjRBKFgTmbRFnOoh2
MD5:	456DE29AF8A76C3FF3483E96C6514932
SHA1:	EAD44CFD9CCC7AC3E9BA5A3B9CC4942BABE4FA47
SHA-256:	9B003584645B081801A82ADD0DCAA6EBBEE4A5D1326CD8A6EAF04502A947022F
SHA-512:	F9995E4026B6F309BE98EFB649B5252B0CB510D105BD1CD9590FC325D0885A615BEBAD18F376522FB11994E90201B062F358DC9F20BA0B4E1A480F2346FECC4B
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics.js/v1/jYfhScQuNyTsDkItrVJy345jDYThvpkz/analytics.min.js
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 71723
Category:	downloaded
Size (bytes):	21911
Entropy (8bit):	7.990284604228861
Encrypted:	true
SSDEEP:	384:eGzePcKhqp8ppchvs0oqCDAJXULtUlxWlkl5HKQ5Ds+XLowwEYDVcDBC0EFYvncy:eGzekKop0cvs2CDWOulHvHKQ5AYOVlDA
MD5:	C467A63B2E7C3A99BE423ACE649014D8
SHA1:	91A3CB3EBF4F3996512A740FC202E1803828594F
SHA-256:	D070E8B363B2CB1BC55B94F1612A1AF673155DF31773E992007F8952E3661EE5
SHA-512:	956B41FC42B9C3C4E161AF37270D3EAEA9E5936B4A99685727235BF9A46BF05ACAE5A64A4EB9A305EBF1ED5F752DF8FB9912626765DEBF1EB82839DF2124CA92
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz
Preview:	...........i{.8.0...........dFo.N'=.N..>.E.%.b".j...X..~....E.2..<.L."A.P...B-.......5.Xx....a...xs..E....K.0pw.Z..N}....`...[...e..N.......,rn.e.+q.........^yQ..I=......vz.O.QPi....3.\&..j...I..[.Q..i..,../y.....l.W.E.S....d..^.A2..V..S/....f..p....@.e.K>..0...u.&.d....X.i.x.f?...q.z<.G.n.C(..Z..U...lo:.e=....b...s....'..I.Qx]..u...~..0.-.X...Q......q8Z.y.8=...m.....a.i@.\|.].j."Gv8..".]w.%..1....f..3.....1....O.KfY.n.F....Y....r.@......3....4..,..?.x....K7a>.0.....?..~}...=;k..g.....4....$..O...u.6..<Jn.#o6.C.8.p...a..O..,a#............0..WY.....&....~..].5l._...\|w..C..K...[h,..z.y...#6...E.[,x0V.6B.n.....w....t...$.J.j.#=g.........6..%..?<k._.2.......;kx...`.LX.k..\|..".f5..G."\M.....w....m!l..E.U.+M.m.{;....A.Yg....1O.Z..H.,...6$J....".xT8C.Q8+.3...(\.Di.f.P.......>.....a..4a....u/.'c..L.A.Pe.I...%x..pA...............P..3.i.dAG.8.].H..#..:.....'.0L\.aY;a."..g70L..r ....0...h4.............a.D...m>.b..D..6...Yu.at.h7....*W<

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11056
Entropy (8bit):	7.937311134581586
Encrypted:	false
SSDEEP:	192:HtYuP61xKKDvQR+70+61A8kx/sr2lqEFk9166HUBXb0VjN7xmL:NYuP61xhDv1h6vmQGBkxcL
MD5:	4FF8F1EC4CD04BAEF797C0A3D5924A74
SHA1:	419BADF8AAEA65496345EE56D22A784BBF93B0E5
SHA-256:	E96001674B18E1BBF8E1F64B54781258395052E6575241063740C2957ADBC58A
SHA-512:	1EC81AC1CEF759282090004EB2E50C36BA9035BBF754773B6E41B404253B34FAB31939666689664237208701CEE3848585BE37AB5E78E28D0AF91CE424592F2A
Malicious:	false
Reputation:	low
Preview:	RIFF(+..WEBPVP8L.+../..?...(.$E...._....3....m+..wH.....rww..H...w.d..%.w..+..?1?.....F...$$....F....{..h.Z...........=.&<.#3t...A.(..0\|...[[........w.8.yk...0...z..,.e9D. .s.+.Y...m;.m.".T.`.....M.n.v......z.p..%G...(.........6/w.}Kh.o..p..c..l..f....':M...P.2......z6.........p'@{m.<....X......P.in.......D..]...6/.v...k..\..W.3......@..e4.\|..5...Wy.P..0...../....-........U....W..9..."...h.I.o.c@.vC(...a..s..z...(.r.....$....../.....y.(...Fj..F.Q...e..D.d..../.f...@..G.!Iy...9...4..."-(.E.Y.d..tK......gu........K.%bC..u...jb.1 .H]..M...)........?..)e.....2.i..8h#QU...&.D....zt..G...S.'e.4FCI@..........4r.....}......}..._Z........M. ...zm...@.C.5AiS...Z..<.....l........<...V..V3@...J,..xp....`c.Jk..4..t.%gx...J....?......._....2..^."pzz..[Q.........].u+/.dG........@.T.2..U....4..,.".p.p....n....%rXQfE...&Yi.....TT.n.6.M...n.....pK."._@O......j..&TS.m...y.p.....w9.d`B6A....-..9..ZOM`.m_\|....."].....t.....jB.1...m.....j'0l_\|.W.1"iZ*o..............A.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	77669
Entropy (8bit):	5.32432603787047
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QJnYTZ02LKVsdmpyKcicxd:RIT7OXVs9ZVKBtYj8wKcHxd
MD5:	3472ECC98D7324376468C5DE19A2C1DF
SHA1:	3117F8637634DCEF00E679D07E0C64C1EA68D499
SHA-256:	9D54A2D2E35E076B0911EF26CBEAC23911BACC14F38017BF8B78947A2B6C687F
SHA-512:	C334E34372D0BC252E3F28F6495827BB1E5C7FB6DE09BCEC4D050AE0895BBF3679A41559BB0E58F0C1DD1A658BCC7F15849BCE42D17AFE6D5EF076BE298E0E61
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.383594884337988
Encrypted:	false
SSDEEP:	3:qGGAW6yIA6qENKAQpnDTLTrAWRgn:kAYIZYpDHTRg
MD5:	2ECE426E3900FA6EBAD39380AEAA2539
SHA1:	24C4E875361BC77874B005F816D160223DC68B46
SHA-256:	E4CE65C3A33FDF0AD73B34857BFF62AF3A6187509551AFBFECBA345FEA02BF55
SHA-512:	66A11A88F239BC8AD325671B2EADDFE0F88CC1EFDD4FA08E83D2FCA2E615DB4A101B935AD89F274B606F0C6DFF41BE575708268E8FB34F897EC28F7D8024BC65
Malicious:	false
Reputation:	low
Preview:	{. "success": false,. "message": "malformed JSON",. "code": "invalid_request".}

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	5.4357451956521
Encrypted:	false
SSDEEP:	6:U+4OUr940FFpFM+56ZRWHTizlpdUDUfPtxVk1mq:UJO6940FFMO6ZRoT6pSunqwq
MD5:	A61BAD8B26EF8914546AED6B68CCF7A3
SHA1:	AA77241CCEDDDBCBFB19BA28E07DE8280E1F1CBF
SHA-256:	9E06028665131F0A17F015003AC578BA216CE432EB0A6B787A7A1153F4A9721B
SHA-512:	D6A76313258E5B0DF752E6E7F3D98478C6D09619F8A444B2A8B0771385D04028A42091E01301EAA1A47D86F4BD9A3E2698A13D709D95D63937F607C944CB5622
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans+Text_old:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
Preview:	/. See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8ebc9802c116&v=v22) format('woff2');.}.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	16744
Entropy (8bit):	7.981745724606971
Encrypted:	false
SSDEEP:	384:77w1W5F5iewNXVB8UCPtRZ3fyxL43L/5Sm2/mZhNn:7c85F5gEa5kLxSLefNn
MD5:	5A253D0B7124F01DC80C1E18FC069B08
SHA1:	7BDB2C82EB82F624B6BC56B28A86C6E971903813
SHA-256:	7236924D8B71717F4118D59D51373610EB0785DCD3EB74E41F43162D2C77135E
SHA-512:	D5C97AF240F53E20E7420A1EBC8C95CE181C170B2BBCB7CE2154F6FDBD0FECD6849D5B4550A896A0DDBB800929F253593624ED48460483362C800C540936DA63
Malicious:	false
Reputation:	low
Preview:	RIFF`A..WEBPVP8LSA../..?.....$I.w.L.z,CG.n.5....]......!..@J.....$.6.s.m........`.qSd......w..bW...l...:....EYpQG ."'...G(........)...R......hR,...\...+Lw.;...tx.W......?.....O....A!.....y....1'd.oT..G......>...4.f.nO..l.^...Z..IEY..{.:.}zj>.......Y.>...aT.'.o..Il..."" ..JB. ...\|.E.M-dZ.Ze.u..........>_gD..H..E. ...1.~.a..j-R -..H=...x.z.i.\[D..cfr?...4.][..'j._=...H?T..XC..?.<.8...b..B.s?...kQq#.....u?.5I.1I...:=y8.l..&.<p..G..#..T#.........".S.q:I...[,r!...........R.H....vE8.?b.Wm..@.ql..\/......y/...4...,...........YBM.C..E.P.RO.wG.PDV....7.~.Lm...C.G..bC.2...w..i.3Z.l..Q!.x..8R......i.....Yt.n..\.r.V...p..."...(...h......uX...-.S&..EG5..........Y.I..!M.\..H..EE....O z...(p...3.....<Z..v!v....)]x.\.......62.3>...B..1....-..l.O.@.D..f..Eb....7..X.......HF....?...<...<.4i)._`...h.s.c...7.B`.H)....12F=.>..N..M\.ES...7..Z.b..B...wuQ.......ai.....?..G.Ng....]^.$.......`.^A..GQ...G.r.........QN...I...y.-...........o~...z/.K..'.\|

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 03:41:19.349714041 CET	192.168.2.4	1.1.1.1	0x6762	Standard query (0)	www.riparide.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.351495028 CET	192.168.2.4	1.1.1.1	0xc519	Standard query (0)	www.riparide.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:19.365657091 CET	192.168.2.4	1.1.1.1	0x7f6	Standard query (0)	www.riparide.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.365789890 CET	192.168.2.4	1.1.1.1	0x3744	Standard query (0)	www.riparide.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:20.609235048 CET	192.168.2.4	1.1.1.1	0x3f2c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:20.609791994 CET	192.168.2.4	1.1.1.1	0x86c8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:21.816615105 CET	192.168.2.4	1.1.1.1	0x38ab	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:21.819453955 CET	192.168.2.4	1.1.1.1	0x897d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:22.175291061 CET	192.168.2.4	1.1.1.1	0x12ed	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:22.175858021 CET	192.168.2.4	1.1.1.1	0x5e96	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:23.602930069 CET	192.168.2.4	1.1.1.1	0x224f	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.603899002 CET	192.168.2.4	1.1.1.1	0xb87f	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:23.676181078 CET	192.168.2.4	1.1.1.1	0x3277	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.676422119 CET	192.168.2.4	1.1.1.1	0x951f	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:23.678287983 CET	192.168.2.4	1.1.1.1	0x52e3	Standard query (0)	cdn.rollbar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.678572893 CET	192.168.2.4	1.1.1.1	0x598c	Standard query (0)	cdn.rollbar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:23.680682898 CET	192.168.2.4	1.1.1.1	0x2bd8	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.680824995 CET	192.168.2.4	1.1.1.1	0xca5b	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:23.786768913 CET	192.168.2.4	1.1.1.1	0xd649	Standard query (0)	www.riparide.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.786959887 CET	192.168.2.4	1.1.1.1	0x7855	Standard query (0)	www.riparide.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:25.580125093 CET	192.168.2.4	1.1.1.1	0x1692	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.580257893 CET	192.168.2.4	1.1.1.1	0xfd6a	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:25.822439909 CET	192.168.2.4	1.1.1.1	0xd71c	Standard query (0)	cdn.rollbar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.822861910 CET	192.168.2.4	1.1.1.1	0x1e2a	Standard query (0)	cdn.rollbar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:26.208014011 CET	192.168.2.4	1.1.1.1	0x10c4	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:26.208400011 CET	192.168.2.4	1.1.1.1	0xe431	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:26.511372089 CET	192.168.2.4	1.1.1.1	0x6a88	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:26.511372089 CET	192.168.2.4	1.1.1.1	0x3527	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:28.003459930 CET	192.168.2.4	1.1.1.1	0x4934	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:28.003846884 CET	192.168.2.4	1.1.1.1	0x64fd	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:29.339987993 CET	192.168.2.4	1.1.1.1	0x8c59	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:29.341808081 CET	192.168.2.4	1.1.1.1	0x4a25	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:29.343358994 CET	192.168.2.4	1.1.1.1	0xd6bb	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:29.343998909 CET	192.168.2.4	1.1.1.1	0xa5b	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:30.517052889 CET	192.168.2.4	1.1.1.1	0x7c05	Standard query (0)	assets.riparide.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:30.517340899 CET	192.168.2.4	1.1.1.1	0x906d	Standard query (0)	assets.riparide.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:31.262317896 CET	192.168.2.4	1.1.1.1	0x1548	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.262732029 CET	192.168.2.4	1.1.1.1	0xf2f6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:31.337327957 CET	192.168.2.4	1.1.1.1	0xb4ea	Standard query (0)	assets.riparide.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.345658064 CET	192.168.2.4	1.1.1.1	0xbf04	Standard query (0)	assets.riparide.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:34.112936974 CET	192.168.2.4	1.1.1.1	0x5142	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:34.113106012 CET	192.168.2.4	1.1.1.1	0x42ae	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:35.876650095 CET	192.168.2.4	1.1.1.1	0x2ec5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:35.876876116 CET	192.168.2.4	1.1.1.1	0xeee3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:38.792273998 CET	192.168.2.4	1.1.1.1	0x2047	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:38.792429924 CET	192.168.2.4	1.1.1.1	0xdc0d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:39.050426960 CET	192.168.2.4	1.1.1.1	0xc305	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.050571918 CET	192.168.2.4	1.1.1.1	0x834e	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:39.773858070 CET	192.168.2.4	1.1.1.1	0x812b	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.774056911 CET	192.168.2.4	1.1.1.1	0x2f27	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:39.775583982 CET	192.168.2.4	1.1.1.1	0xf4db	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.775899887 CET	192.168.2.4	1.1.1.1	0xea7	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:39.776863098 CET	192.168.2.4	1.1.1.1	0x7d6e	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.777004957 CET	192.168.2.4	1.1.1.1	0x49b6	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:39.917448044 CET	192.168.2.4	1.1.1.1	0xbdcc	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.917854071 CET	192.168.2.4	1.1.1.1	0xe603	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:42.315599918 CET	192.168.2.4	1.1.1.1	0x426e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.316135883 CET	192.168.2.4	1.1.1.1	0x7898	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:42.346872091 CET	192.168.2.4	1.1.1.1	0x133d	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.347383022 CET	192.168.2.4	1.1.1.1	0x8299	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:42.480869055 CET	192.168.2.4	1.1.1.1	0xea1a	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.481334925 CET	192.168.2.4	1.1.1.1	0x93b5	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:42.760322094 CET	192.168.2.4	1.1.1.1	0xf42e	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.760562897 CET	192.168.2.4	1.1.1.1	0xf688	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:43.448704004 CET	192.168.2.4	1.1.1.1	0x5c46	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.449031115 CET	192.168.2.4	1.1.1.1	0x4070	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:43.461520910 CET	192.168.2.4	1.1.1.1	0x90ca	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.461791992 CET	192.168.2.4	1.1.1.1	0x48f7	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:43.462320089 CET	192.168.2.4	1.1.1.1	0x4f5a	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.463216066 CET	192.168.2.4	1.1.1.1	0xf0bb	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:43.463216066 CET	192.168.2.4	1.1.1.1	0x370c	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.463964939 CET	192.168.2.4	1.1.1.1	0xc9dc	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:44.068830967 CET	192.168.2.4	1.1.1.1	0x9504	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.069366932 CET	192.168.2.4	1.1.1.1	0xa268	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:44.120017052 CET	192.168.2.4	1.1.1.1	0x8698	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.120558977 CET	192.168.2.4	1.1.1.1	0x4ead	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 03:41:44.924700022 CET	192.168.2.4	1.1.1.1	0x9f31	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.924959898 CET	192.168.2.4	1.1.1.1	0xd60a	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Oct 31, 2024 03:41:45.069721937 CET	192.168.2.4	1.1.1.1	0xe4ae	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.069875002 CET	192.168.2.4	1.1.1.1	0x8144	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:45.753866911 CET	192.168.2.4	1.1.1.1	0x2248	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.754138947 CET	192.168.2.4	1.1.1.1	0x8f2	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:46.223737955 CET	192.168.2.4	1.1.1.1	0xec9a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.223737955 CET	192.168.2.4	1.1.1.1	0x3184	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:46.882445097 CET	192.168.2.4	1.1.1.1	0x7b13	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.882591963 CET	192.168.2.4	1.1.1.1	0xe18a	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:47.335552931 CET	192.168.2.4	1.1.1.1	0x7456	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.335726976 CET	192.168.2.4	1.1.1.1	0x529b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:47.766916990 CET	192.168.2.4	1.1.1.1	0x2dad	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.766916990 CET	192.168.2.4	1.1.1.1	0x1562	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Oct 31, 2024 03:41:47.815418005 CET	192.168.2.4	1.1.1.1	0x7163	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.815418005 CET	192.168.2.4	1.1.1.1	0x1c3e	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:47.992492914 CET	192.168.2.4	1.1.1.1	0x3643	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.992849112 CET	192.168.2.4	1.1.1.1	0x7d83	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Oct 31, 2024 03:41:48.331511974 CET	192.168.2.4	1.1.1.1	0xab0	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.331660986 CET	192.168.2.4	1.1.1.1	0xaac3	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:49.500946045 CET	192.168.2.4	1.1.1.1	0xc97c	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.500946045 CET	192.168.2.4	1.1.1.1	0x9773	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Oct 31, 2024 03:41:50.769886017 CET	192.168.2.4	1.1.1.1	0x7a11	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:50.772372961 CET	192.168.2.4	1.1.1.1	0x3156	Standard query (0)	stripe.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 03:41:19.362565041 CET	1.1.1.1	192.168.2.4	0xc519	No error (0)	www.riparide.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:19.379383087 CET	1.1.1.1	192.168.2.4	0x3744	No error (0)	www.riparide.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:19.381867886 CET	1.1.1.1	192.168.2.4	0x6762	No error (0)	www.riparide.com		104.26.4.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.381867886 CET	1.1.1.1	192.168.2.4	0x6762	No error (0)	www.riparide.com		104.26.5.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.381867886 CET	1.1.1.1	192.168.2.4	0x6762	No error (0)	www.riparide.com		172.67.75.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.398673058 CET	1.1.1.1	192.168.2.4	0x7f6	No error (0)	www.riparide.com		104.26.4.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.398673058 CET	1.1.1.1	192.168.2.4	0x7f6	No error (0)	www.riparide.com		104.26.5.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:19.398673058 CET	1.1.1.1	192.168.2.4	0x7f6	No error (0)	www.riparide.com		172.67.75.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:20.615835905 CET	1.1.1.1	192.168.2.4	0x3f2c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:20.615835905 CET	1.1.1.1	192.168.2.4	0x3f2c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:20.616219044 CET	1.1.1.1	192.168.2.4	0x86c8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:21.823257923 CET	1.1.1.1	192.168.2.4	0x38ab	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:21.825913906 CET	1.1.1.1	192.168.2.4	0x897d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:22.344221115 CET	1.1.1.1	192.168.2.4	0x12ed	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:22.344221115 CET	1.1.1.1	192.168.2.4	0x12ed	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:22.344466925 CET	1.1.1.1	192.168.2.4	0x5e96	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:23.609870911 CET	1.1.1.1	192.168.2.4	0x224f	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.609870911 CET	1.1.1.1	192.168.2.4	0x224f	No error (0)	dexeqbeb7giwr.cloudfront.net		18.66.122.50	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.609870911 CET	1.1.1.1	192.168.2.4	0x224f	No error (0)	dexeqbeb7giwr.cloudfront.net		18.66.122.97	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.609870911 CET	1.1.1.1	192.168.2.4	0x224f	No error (0)	dexeqbeb7giwr.cloudfront.net		18.66.122.63	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.609870911 CET	1.1.1.1	192.168.2.4	0x224f	No error (0)	dexeqbeb7giwr.cloudfront.net		18.66.122.113	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.610760927 CET	1.1.1.1	192.168.2.4	0xb87f	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.682761908 CET	1.1.1.1	192.168.2.4	0x3277	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.682761908 CET	1.1.1.1	192.168.2.4	0x3277	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.682833910 CET	1.1.1.1	192.168.2.4	0x951f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.682833910 CET	1.1.1.1	192.168.2.4	0x951f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:23.682833910 CET	1.1.1.1	192.168.2.4	0x951f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:23.685302019 CET	1.1.1.1	192.168.2.4	0x598c	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.687558889 CET	1.1.1.1	192.168.2.4	0x2bd8	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.687558889 CET	1.1.1.1	192.168.2.4	0x2bd8	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.689033985 CET	1.1.1.1	192.168.2.4	0xca5b	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.690424919 CET	1.1.1.1	192.168.2.4	0x52e3	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:23.690424919 CET	1.1.1.1	192.168.2.4	0x52e3	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.40	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.690424919 CET	1.1.1.1	192.168.2.4	0x52e3	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.53	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.690424919 CET	1.1.1.1	192.168.2.4	0x52e3	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.22	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.690424919 CET	1.1.1.1	192.168.2.4	0x52e3	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.48	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.799287081 CET	1.1.1.1	192.168.2.4	0xd649	No error (0)	www.riparide.com		104.26.5.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.799287081 CET	1.1.1.1	192.168.2.4	0xd649	No error (0)	www.riparide.com		172.67.75.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.799287081 CET	1.1.1.1	192.168.2.4	0xd649	No error (0)	www.riparide.com		104.26.4.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:23.806471109 CET	1.1.1.1	192.168.2.4	0x7855	No error (0)	www.riparide.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:25.587007046 CET	1.1.1.1	192.168.2.4	0x1692	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:25.587007046 CET	1.1.1.1	192.168.2.4	0x1692	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.587055922 CET	1.1.1.1	192.168.2.4	0xfd6a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:25.587055922 CET	1.1.1.1	192.168.2.4	0xfd6a	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:25.587055922 CET	1.1.1.1	192.168.2.4	0xfd6a	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:25.831737995 CET	1.1.1.1	192.168.2.4	0x1e2a	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:25.833888054 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:25.833888054 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.40	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.833888054 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.53	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.833888054 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.48	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:25.833888054 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	d1ftdm4q83us3q.cloudfront.net		13.33.187.22	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:26.214756966 CET	1.1.1.1	192.168.2.4	0x10c4	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:26.214756966 CET	1.1.1.1	192.168.2.4	0x10c4	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:26.216871023 CET	1.1.1.1	192.168.2.4	0xe431	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:26.517992973 CET	1.1.1.1	192.168.2.4	0x6a88	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:26.518203020 CET	1.1.1.1	192.168.2.4	0x3527	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:28.010379076 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:28.010379076 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:28.010379076 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:28.010379076 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:28.010379076 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:28.010941982 CET	1.1.1.1	192.168.2.4	0x64fd	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:29.346777916 CET	1.1.1.1	192.168.2.4	0x8c59	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:29.348613024 CET	1.1.1.1	192.168.2.4	0x4a25	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:29.350948095 CET	1.1.1.1	192.168.2.4	0xd6bb	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:30.527635098 CET	1.1.1.1	192.168.2.4	0x906d	No error (0)	assets.riparide.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:30.529495001 CET	1.1.1.1	192.168.2.4	0x7c05	No error (0)	assets.riparide.com		172.67.75.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:30.529495001 CET	1.1.1.1	192.168.2.4	0x7c05	No error (0)	assets.riparide.com		104.26.4.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:30.529495001 CET	1.1.1.1	192.168.2.4	0x7c05	No error (0)	assets.riparide.com		104.26.5.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.269062996 CET	1.1.1.1	192.168.2.4	0x1548	No error (0)	googleads.g.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.269155025 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 03:41:31.371412992 CET	1.1.1.1	192.168.2.4	0xb4ea	No error (0)	assets.riparide.com		104.26.4.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.371412992 CET	1.1.1.1	192.168.2.4	0xb4ea	No error (0)	assets.riparide.com		104.26.5.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.371412992 CET	1.1.1.1	192.168.2.4	0xb4ea	No error (0)	assets.riparide.com		172.67.75.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:31.371594906 CET	1.1.1.1	192.168.2.4	0xbf04	No error (0)	assets.riparide.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:33.550798893 CET	1.1.1.1	192.168.2.4	0xb521	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:33.550798893 CET	1.1.1.1	192.168.2.4	0xb521	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:34.119684935 CET	1.1.1.1	192.168.2.4	0x42ae	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:34.119826078 CET	1.1.1.1	192.168.2.4	0x5142	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:34.197252035 CET	1.1.1.1	192.168.2.4	0x6b79	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:34.197252035 CET	1.1.1.1	192.168.2.4	0x6b79	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:35.883208036 CET	1.1.1.1	192.168.2.4	0x2ec5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:38.798783064 CET	1.1.1.1	192.168.2.4	0x2047	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:38.798928022 CET	1.1.1.1	192.168.2.4	0xdc0d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 03:41:39.057101011 CET	1.1.1.1	192.168.2.4	0xc305	No error (0)	api.segment.io		54.69.251.6	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.057101011 CET	1.1.1.1	192.168.2.4	0xc305	No error (0)	api.segment.io		35.166.226.67	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.057101011 CET	1.1.1.1	192.168.2.4	0xc305	No error (0)	api.segment.io		35.160.151.220	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780370951 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780370951 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780370951 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780370951 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780370951 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.780674934 CET	1.1.1.1	192.168.2.4	0x2f27	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:39.782349110 CET	1.1.1.1	192.168.2.4	0xf4db	No error (0)	cdn.amplitude.com		18.245.86.101	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.782349110 CET	1.1.1.1	192.168.2.4	0xf4db	No error (0)	cdn.amplitude.com		18.245.86.111	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.782349110 CET	1.1.1.1	192.168.2.4	0xf4db	No error (0)	cdn.amplitude.com		18.245.86.69	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.782349110 CET	1.1.1.1	192.168.2.4	0xf4db	No error (0)	cdn.amplitude.com		18.245.86.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.787065029 CET	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	widget.intercom.io		13.224.189.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.787065029 CET	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	widget.intercom.io		13.224.189.74	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.787065029 CET	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	widget.intercom.io		13.224.189.18	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:39.787065029 CET	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	widget.intercom.io		13.224.189.49	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:40.083966017 CET	1.1.1.1	192.168.2.4	0xbdcc	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:40.083966017 CET	1.1.1.1	192.168.2.4	0xbdcc	No error (0)	dexeqbeb7giwr.cloudfront.net		18.239.18.100	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:40.083966017 CET	1.1.1.1	192.168.2.4	0xbdcc	No error (0)	dexeqbeb7giwr.cloudfront.net		18.239.18.60	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:40.083966017 CET	1.1.1.1	192.168.2.4	0xbdcc	No error (0)	dexeqbeb7giwr.cloudfront.net		18.239.18.104	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:40.083966017 CET	1.1.1.1	192.168.2.4	0xbdcc	No error (0)	dexeqbeb7giwr.cloudfront.net		18.239.18.109	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:40.093591928 CET	1.1.1.1	192.168.2.4	0xe603	No error (0)	js.stripe.com	dexeqbeb7giwr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566926956 CET	1.1.1.1	192.168.2.4	0x426e	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566926956 CET	1.1.1.1	192.168.2.4	0x426e	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566926956 CET	1.1.1.1	192.168.2.4	0x426e	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566926956 CET	1.1.1.1	192.168.2.4	0x426e	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566936970 CET	1.1.1.1	192.168.2.4	0x133d	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566936970 CET	1.1.1.1	192.168.2.4	0x133d	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566936970 CET	1.1.1.1	192.168.2.4	0x133d	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566936970 CET	1.1.1.1	192.168.2.4	0x133d	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		44.241.94.217	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		52.10.177.56	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		52.43.11.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		44.239.28.98	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		52.39.189.193	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		34.211.210.132	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		100.20.171.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.566946983 CET	1.1.1.1	192.168.2.4	0xea1a	No error (0)	api.amplitude.com		54.187.215.77	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.769501925 CET	1.1.1.1	192.168.2.4	0xf42e	No error (0)	js.intercomcdn.com		18.245.46.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.769501925 CET	1.1.1.1	192.168.2.4	0xf42e	No error (0)	js.intercomcdn.com		18.245.46.55	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.769501925 CET	1.1.1.1	192.168.2.4	0xf42e	No error (0)	js.intercomcdn.com		18.245.46.20	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:42.769501925 CET	1.1.1.1	192.168.2.4	0xf42e	No error (0)	js.intercomcdn.com		18.245.46.19	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.456319094 CET	1.1.1.1	192.168.2.4	0x5c46	No error (0)	api.segment.io		34.223.74.168	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.456319094 CET	1.1.1.1	192.168.2.4	0x5c46	No error (0)	api.segment.io		44.234.198.184	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.456319094 CET	1.1.1.1	192.168.2.4	0x5c46	No error (0)	api.segment.io		35.81.90.104	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.468549967 CET	1.1.1.1	192.168.2.4	0x90ca	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:43.468549967 CET	1.1.1.1	192.168.2.4	0x90ca	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.468549967 CET	1.1.1.1	192.168.2.4	0x90ca	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.468549967 CET	1.1.1.1	192.168.2.4	0x90ca	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.468549967 CET	1.1.1.1	192.168.2.4	0x90ca	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.469055891 CET	1.1.1.1	192.168.2.4	0x48f7	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:43.469605923 CET	1.1.1.1	192.168.2.4	0x4f5a	No error (0)	cdn.amplitude.com		18.245.86.101	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.469605923 CET	1.1.1.1	192.168.2.4	0x4f5a	No error (0)	cdn.amplitude.com		18.245.86.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.469605923 CET	1.1.1.1	192.168.2.4	0x4f5a	No error (0)	cdn.amplitude.com		18.245.86.111	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.469605923 CET	1.1.1.1	192.168.2.4	0x4f5a	No error (0)	cdn.amplitude.com		18.245.86.69	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.470248938 CET	1.1.1.1	192.168.2.4	0x370c	No error (0)	widget.intercom.io		13.224.189.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.470248938 CET	1.1.1.1	192.168.2.4	0x370c	No error (0)	widget.intercom.io		13.224.189.74	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.470248938 CET	1.1.1.1	192.168.2.4	0x370c	No error (0)	widget.intercom.io		13.224.189.18	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:43.470248938 CET	1.1.1.1	192.168.2.4	0x370c	No error (0)	widget.intercom.io		13.224.189.49	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		54.203.164.212	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		52.39.58.143	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		52.39.189.193	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		35.155.173.66	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		52.32.130.129	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		100.20.171.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		35.163.226.119	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.076116085 CET	1.1.1.1	192.168.2.4	0x9504	No error (0)	api.amplitude.com		44.237.0.11	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.126595974 CET	1.1.1.1	192.168.2.4	0x8698	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.126595974 CET	1.1.1.1	192.168.2.4	0x8698	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.126595974 CET	1.1.1.1	192.168.2.4	0x8698	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.126595974 CET	1.1.1.1	192.168.2.4	0x8698	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	prod-m-tree.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.173.205.62	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.173.205.12	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.173.205.118	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931227922 CET	1.1.1.1	192.168.2.4	0x9f31	No error (0)	d1tcqh4bio8cty.cloudfront.net		18.173.205.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931958914 CET	1.1.1.1	192.168.2.4	0xd60a	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:44.931958914 CET	1.1.1.1	192.168.2.4	0xd60a	No error (0)	prod-m-tree.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:45.076292038 CET	1.1.1.1	192.168.2.4	0xe4ae	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.076292038 CET	1.1.1.1	192.168.2.4	0xe4ae	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.076292038 CET	1.1.1.1	192.168.2.4	0xe4ae	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.076292038 CET	1.1.1.1	192.168.2.4	0xe4ae	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.760901928 CET	1.1.1.1	192.168.2.4	0x2248	No error (0)	js.intercomcdn.com		18.245.46.19	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.760901928 CET	1.1.1.1	192.168.2.4	0x2248	No error (0)	js.intercomcdn.com		18.245.46.20	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.760901928 CET	1.1.1.1	192.168.2.4	0x2248	No error (0)	js.intercomcdn.com		18.245.46.55	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:45.760901928 CET	1.1.1.1	192.168.2.4	0x2248	No error (0)	js.intercomcdn.com		18.245.46.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.234555960 CET	1.1.1.1	192.168.2.4	0x3184	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:46.234568119 CET	1.1.1.1	192.168.2.4	0xec9a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:46.234568119 CET	1.1.1.1	192.168.2.4	0xec9a	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		54.175.0.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		3.229.223.57	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		18.214.43.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		44.193.22.131	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		23.21.76.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		54.88.129.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		52.45.139.96	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:46.889754057 CET	1.1.1.1	192.168.2.4	0x7b13	No error (0)	api-iam.intercom.io		18.214.122.145	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.342222929 CET	1.1.1.1	192.168.2.4	0x7456	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.342222929 CET	1.1.1.1	192.168.2.4	0x7456	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.342235088 CET	1.1.1.1	192.168.2.4	0x529b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.777364016 CET	1.1.1.1	192.168.2.4	0x1562	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.777364016 CET	1.1.1.1	192.168.2.4	0x1562	No error (0)	prod-m-tree.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	m.stripe.network	prod-m-tree.stripe.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	prod-m-tree.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.818846941 CET	1.1.1.1	192.168.2.4	0x2dad	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		44.193.22.131	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		18.214.43.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		54.88.129.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		3.229.223.57	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		23.21.76.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		18.214.122.145	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		52.45.139.96	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.824157953 CET	1.1.1.1	192.168.2.4	0x7163	No error (0)	api-iam.intercom.io		54.175.0.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.999160051 CET	1.1.1.1	192.168.2.4	0x3643	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:47.999160051 CET	1.1.1.1	192.168.2.4	0x3643	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		35.160.110.246	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		34.208.73.204	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		44.227.192.116	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		44.229.74.208	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		52.13.192.254	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		35.83.190.63	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		52.89.219.222	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:48.367127895 CET	1.1.1.1	192.168.2.4	0xab0	No error (0)	m.stripe.com		52.27.127.60	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		44.229.74.208	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		35.83.190.63	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		34.208.73.204	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		52.34.149.67	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		52.13.192.254	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		44.227.192.116	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		52.27.127.60	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.507595062 CET	1.1.1.1	192.168.2.4	0xc97c	No error (0)	m.stripe.com		35.160.110.246	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:49.789573908 CET	1.1.1.1	192.168.2.4	0x92da	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:41:49.789573908 CET	1.1.1.1	192.168.2.4	0x92da	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:50.777215004 CET	1.1.1.1	192.168.2.4	0x7a11	No error (0)	stripe.com		34.252.74.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:50.777215004 CET	1.1.1.1	192.168.2.4	0x7a11	No error (0)	stripe.com		52.215.231.162	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:41:50.777215004 CET	1.1.1.1	192.168.2.4	0x7a11	No error (0)	stripe.com		54.76.53.164	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:42:10.269093990 CET	1.1.1.1	192.168.2.4	0xccdc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:42:10.269093990 CET	1.1.1.1	192.168.2.4	0xccdc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:42:13.262506962 CET	1.1.1.1	192.168.2.4	0xb4bf	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:42:13.262506962 CET	1.1.1.1	192.168.2.4	0xb4bf	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:42:30.739301920 CET	1.1.1.1	192.168.2.4	0x4cb4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:42:30.739301920 CET	1.1.1.1	192.168.2.4	0x4cb4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:20 UTC	692	OUT	GET /adventures/28758-marom-waterfalls HTTP/1.1 Host: www.riparide.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:20 UTC	852	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342480&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=WocvAE7cVXGO7VPMwmt2%2B%2FfwutIYksopF9YhyWe3g9Y%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342480&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=WocvAE7cVXGO7VPMwmt2%2B%2FfwutIYksopF9YhyWe3g9Y%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:20 UTC	1810	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:20 UTC	381	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 73 65 73 73 69 6f 6e 5f 69 64 3d 62 36 65 36 38 65 34 36 63 64 35 36 63 64 37 64 65 32 36 36 36 62 39 32 30 64 37 37 37 34 35 33 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 39 30 30 31 38 30 36 33 2d 63 64 62 35 2d 34 32 66 36 2d 39 33 38 38 2d 30 37 34 31 36 61 65 61 36 36 33 66 0d 0a 58 2d 52 75 6e 74 69 6d 65 3a 20 30 2e 30 37 36 34 38 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: Set-Cookie: _session_id=b6e68e46cd56cd7de2666b920d777453; path=/; secure; HttpOnly; SameSite=LaxCache-Control: max-age=0, private, must-revalidateX-Request-Id: 90018063-cdb5-42f6-9388-07416aea663fX-Runtime: 0.076488Strict-Transport-Security: max-a
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 31 32 62 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 53 68 Data Ascii: 12bc<!DOCTYPE html><html><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><meta content="Sh
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 65 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 75 72 69 6e 67 20 6f 75 72 20 73 74 61 79 2c 20 77 65 20 74 6f 6f 6b 20 61 20 33 30 20 6d 69 6e 75 74 65 20 64 72 69 76 65 20 74 6f 20 74 68 65 73 65 20 73 65 63 6c 75 64 65 64 20 77 61 74 65 72 66 61 6c 6c 73 2e 20 57 65 20 66 6f 6c 6c 6f 77 65 64 20 74 68 65 20 73 65 63 72 65 74 20 70 61 74 68 20 6e 65 61 72 20 4d 61 72 6f 6d 20 63 72 65 65 6b 20 6c 65 61 64 69 6e 67 20 75 73 20 74 6f 20 74 68 65 73 65 20 62 65 61 75 74 69 66 75 6c 20 72 6f 63 6b 20 70 6f 6f 6c 73 20 61 6e 64 20 77 61 74 65 72 66 61 6c 6c 73 2e 20 57 65 20 68 61 64 20 69 74 20 61 6c 6c 20 74 6f 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f Data Ascii: e" property="og:type" /><meta content="During our stay, we took a 30 minute drive to these secluded waterfalls. We followed the secret path near Marom creek leading us to these beautiful rock pools and waterfalls. We had it all to..." name="description" /
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 75 6e 6b 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 Data Ascii: unk/html5.js"></script><![endif]--><script defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, capt
2024-10-31 02:41:20 UTC	697	IN	Data Raw: 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 6f 2e 64 28 6e 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6f 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6f 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 65 29 7d 2c 6f 2e 70 3d Data Ascii: for(var t in r)o.d(n,t,function(e){return r[e]}.bind(null,t));return n},o.n=function(r){var e=r&&r.__esModule?function(){return r.default}:function(){return r};return o.d(e,"a",e),e},o.o=function(r,e){return Object.prototype.hasOwnProperty.call(r,e)},o.p=
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 31 37 32 61 0d 0a 66 69 67 2c 6c 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6f 28 32 29 2c 74 3d 6f 28 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 72 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 5b 52 6f 6c 6c 62 61 72 5d 3a 20 49 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 22 2c 72 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 7d 7d 76 61 72 20 6c 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 65 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 72 2c 74 68 69 73 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f Data Ascii: 172afig,l)},function(r,e,o){"use strict";var n=o(2),t=o(3);function a(r){return function(){try{return r.apply(this,arguments)}catch(r){try{console.error("[Rollbar]: Internal error",r)}catch(r){}}}}var l=0;function i(r,e){this.options=r,this._rollbarOldO
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 61 70 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 74 72 79 7b 76 61 72 20 6e 3b 69 66 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 7b 7d 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 72 2e 5f 69 73 57 72 61 70 29 72 65 74 75 72 6e 20 72 3b 69 66 28 21 72 2e 5f 72 6f 6c 6c 62 61 72 5f 77 72 61 70 70 65 64 26 26 28 72 2e 5f 72 6f 6c 6c 62 61 72 5f 77 72 61 70 70 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c Data Ascii: ap=function(r,e,o){try{var n;if(n="function"==typeof e?e:function(){return e\|\|{}},"function"!=typeof r)return r;if(r._isWrap)return r;if(!r._rollbar_wrapped&&(r._rollbar_wrapped=function(){o&&"function"==typeof o&&o.apply(this,arguments);try{return r.appl
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 61 29 29 26 26 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6c 2e 63 61 70 74 75 72 65 4c 6f 61 64 2e 62 69 6e 64 28 6c 29 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6c 2e 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2e 62 69 6e 64 28 6c 29 29 29 2c 72 5b 6f 5d 3d 6c 2c 6c 7d 29 29 28 29 7d 7d 2c 52 6f 6c 6c 62 61 72 3a 63 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 65 2c 6f 2c 6e 29 7b 72 2e 5f 72 6f 6c 6c 62 61 72 57 72 61 70 70 65 64 45 72 72 6f 72 26 26 28 6e 5b 34 5d Data Ascii: a))&&r.addEventListener&&(r.addEventListener("load",l.captureLoad.bind(l)),r.addEventListener("DOMContentLoaded",l.captureDomContentLoaded.bind(l))),r[o]=l,l}))()}},Rollbar:c}},function(r,e,o){"use strict";function n(r,e,o,n){r._rollbarWrappedError&&(n[4]
2024-10-31 02:41:20 UTC	1369	IN	Data Raw: 2c 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 3d 6e 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 6e 29 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 26 26 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 6e 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 41 64 64 26 26 6e 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 3b 29 6e 3d 6e 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 41 64 64 3b 76 61 Data Ascii: ,r._rollbarURH=n,r.addEventListener("unhandledrejection",n)}}}},function(r,e,o){"use strict";function n(r,e,o){if(e.hasOwnProperty&&e.hasOwnProperty("addEventListener")){for(var n=e.addEventListener;n._rollbarOldAdd&&n.belongsToShim;)n=n._rollbarOldAdd;va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	805	OUT	GET /assets/application-c3a9a0b098bce4bc114461119e1b77e76053f87e2d05409ee1f3a82fbce299fa.css HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:21 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729728202&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=lborbY%2BTkxmEpEvD6BotpzgumnZCEjnHyopXsulOQvg%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729728202&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=lborbY%2BTkxmEpEvD6BotpzgumnZCEjnHyopXsulOQvg%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Tue, 22 Oct 2024 23:44:43 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 614279 Server: cloudflare CF-RAY: 8db0491bffdf4760-DFW
2024-10-31 02:41:21 UTC	464	IN	Data Raw: 37 63 31 37 0d 0a ef bb bf 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 54 20 57 61 6c 73 68 65 69 6d 20 50 72 6f 27 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 e2 98 ba 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4c 69 67 68 74 2d 33 39 66 63 65 31 39 30 32 66 61 37 33 30 62 66 35 36 61 35 33 63 36 34 38 62 65 63 38 31 38 35 62 39 30 36 39 30 35 31 36 62 30 36 38 31 31 62 62 32 33 36 30 63 36 32 64 31 38 35 62 35 34 38 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4c 69 67 68 74 2d 30 31 35 66 33 36 34 62 35 65 61 30 65 64 62 39 65 61 36 33 61 62 Data Ascii: 7c17@font-face{font-family:'GT Walsheim Pro';src:local(""),url(/assets/fonts/GT-Walsheim-Pro-Light-39fce1902fa730bf56a53c648bec8185b90690516b06811bb2360c62d185b548.woff) format("woff"),url(/assets/fonts/GT-Walsheim-Pro-Light-015f364b5ea0edb9ea63ab
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 6f 2d 4c 69 67 68 74 2d 4f 62 6c 69 71 75 65 2d 30 62 35 66 32 33 35 64 35 62 36 39 37 38 36 35 30 34 32 32 35 31 38 39 31 39 63 31 33 32 62 38 37 38 32 32 64 66 36 66 36 31 64 33 65 37 63 65 64 37 61 62 38 34 66 37 34 39 32 38 62 34 38 66 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4c 69 67 68 74 2d 4f 62 6c 69 71 75 65 2d 37 35 36 39 65 36 66 63 62 39 33 35 31 37 34 34 61 36 65 63 32 31 65 33 30 33 63 62 32 63 61 64 39 30 33 64 64 30 38 66 35 36 64 66 30 61 31 66 35 66 32 64 34 36 36 39 30 31 39 32 64 65 66 30 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b Data Ascii: o-Light-Oblique-0b5f235d5b6978650422518919c132b87822df6f61d3e7ced7ab84f74928b48f.woff) format("woff"),url(/assets/fonts/GT-Walsheim-Pro-Light-Oblique-7569e6fcb9351744a6ec21e303cb2cad903dd08f56df0a1f5f2d46690192def0.ttf) format("truetype");font-weight:300;
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 54 20 57 61 6c 73 68 65 69 6d 20 50 72 6f 27 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 e2 98 ba 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 4f 62 6c 69 71 75 65 2d 32 33 63 61 33 39 65 37 36 61 35 66 64 36 35 39 36 34 61 61 64 30 30 65 35 61 65 34 61 64 39 34 37 39 63 61 36 64 39 63 34 61 37 65 66 65 30 38 33 66 37 61 37 66 66 31 35 36 64 38 37 30 63 32 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 Data Ascii: t-weight:500;font-style:normal;font-display:swap}@font-face{font-family:'GT Walsheim Pro';src:local(""),url(/assets/fonts/GT-Walsheim-Pro-Medium-Oblique-23ca39e76a5fd65964aad00e5ae4ad9479ca6d9c4a7efe083f7a7ff156d870c2.woff) format("woff"),url(/assets/f
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 72 69 70 61 72 69 64 65 5f 69 63 6f 6e 73 2d 30 63 36 64 35 30 66 36 33 35 32 35 31 37 39 65 62 35 32 33 66 63 39 64 38 37 30 65 32 37 63 64 31 34 35 32 32 63 39 35 34 39 66 62 32 61 62 31 66 38 64 31 31 37 66 32 33 63 62 36 33 63 38 37 2e 77 6f 66 66 32 3f 62 35 35 62 64 34 37 31 34 35 33 33 34 31 39 33 61 30 62 31 35 66 65 62 32 38 64 39 36 66 38 38 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 72 69 70 61 72 69 64 65 5f 69 63 6f 6e 73 2d 33 38 31 30 30 32 34 38 39 34 65 61 34 34 65 31 63 36 30 62 36 34 39 31 32 62 63 34 65 31 62 38 64 35 61 30 39 65 33 36 31 62 33 30 66 63 Data Ascii: ("embedded-opentype"),url(/assets/fonts/riparide_icons-0c6d50f63525179eb523fc9d870e27cd14522c9549fb2ab1f8d117f23cb63c87.woff2?b55bd47145334193a0b15feb28d96f88) format("woff2"),url(/assets/fonts/riparide_icons-3810024894ea44e1c60b64912bc4e1b8d5a09e361b30fc
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 31 30 38 22 7d 2e 69 63 6f 6e 2d 61 73 6b 2d 71 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 39 22 7d 2e 69 63 6f 6e 2d 61 74 74 61 63 68 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 61 22 7d 2e 69 63 6f 6e 2d 61 75 64 69 6f 2d 69 6e 70 75 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 62 22 7d 2e 69 63 6f 6e 2d 62 61 6b 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 63 22 7d 2e 69 63 6f 6e 2d 62 61 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 64 22 7d 2e 69 63 6f 6e 2d 62 61 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 65 22 7d 2e 69 63 6f 6e 2d 62 61 74 68 72 6f 6f Data Ascii: ntent:"\f108"}.icon-ask-question:before{content:"\f109"}.icon-attachment:before{content:"\f10a"}.icon-audio-inputs:before{content:"\f10b"}.icon-bakery:before{content:"\f10c"}.icon-barn:before{content:"\f10d"}.icon-bath:before{content:"\f10e"}.icon-bathroo
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 22 5c 66 31 32 62 22 7d 2e 69 63 6f 6e 2d 63 61 6d 70 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 63 22 7d 2e 69 63 6f 6e 2d 63 61 6e 6f 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 64 22 7d 2e 69 63 6f 6e 2d 63 61 72 2d 61 69 72 2d 63 6f 6e 64 69 74 69 6f 6e 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 65 22 7d 2e 69 63 6f 6e 2d 63 61 72 2d 68 65 61 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 66 22 7d 2e 69 63 6f 6e 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 30 22 7d 2e 69 63 6f 6e 2d 63 61 72 61 76 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 31 22 7d 2e 69 63 6f 6e 2d 63 61 72 65 74 2d 64 6f Data Ascii: "\f12b"}.icon-camping:before{content:"\f12c"}.icon-canoe:before{content:"\f12d"}.icon-car-air-conditioning:before{content:"\f12e"}.icon-car-heating:before{content:"\f12f"}.icon-car:before{content:"\f130"}.icon-caravan:before{content:"\f131"}.icon-caret-do
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 65 22 7d 2e 69 63 6f 6e 2d 64 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 66 22 7d 2e 69 63 6f 6e 2d 64 6f 77 6e 6c 6f 61 64 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 30 22 7d 2e 69 63 6f 6e 2d 64 76 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 69 63 6f 6e 2d 65 63 6f 2d 68 6f 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 32 22 7d 2e 69 63 6f 6e 2d 65 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 33 22 7d 2e 69 63 6f 6e 2d 65 71 75 69 70 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 34 22 7d 2e 69 63 6f 6e 2d 65 76 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: e"}.icon-dive:before{content:"\f14f"}.icon-download-arrow:before{content:"\f150"}.icon-dvd:before{content:"\f151"}.icon-eco-house:before{content:"\f152"}.icon-edit:before{content:"\f153"}.icon-equipment:before{content:"\f154"}.icon-event:before{content:"\
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 31 37 33 22 7d 2e 69 63 6f 6e 2d 68 6f 72 73 65 2d 72 69 64 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 34 22 7d 2e 69 63 6f 6e 2d 68 6f 74 2d 74 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 35 22 7d 2e 69 63 6f 6e 2d 68 6f 74 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 36 22 7d 2e 69 63 6f 6e 2d 68 6f 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 37 22 7d 2e 69 63 6f 6e 2d 68 6f 75 73 65 62 6f 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 38 22 7d 2e 69 63 6f 6e 2d 68 75 6d 61 6e 2d 63 6f 6e 6e 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 39 22 7d 2e 69 63 6f 6e 2d 69 Data Ascii: ntent:"\f173"}.icon-horse-riding:before{content:"\f174"}.icon-hot-tub:before{content:"\f175"}.icon-hotel:before{content:"\f176"}.icon-house:before{content:"\f177"}.icon-houseboat:before{content:"\f178"}.icon-human-connection:before{content:"\f179"}.icon-i
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 36 22 7d 2e 69 63 6f 6e 2d 6c 6f 67 6f 2d 66 69 6e 61 6e 63 69 61 6c 2d 72 65 76 69 65 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 37 22 7d 2e 69 63 6f 6e 2d 6c 6f 67 6f 2d 6d 6f 6e 73 74 65 72 2d 63 68 69 6c 64 72 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 38 22 7d 2e 69 63 6f 6e 2d 6c 6f 67 6f 2d 70 65 64 65 73 74 72 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 39 22 7d 2e 69 63 6f 6e 2d 6c 6f 67 6f 2d 74 69 6d 65 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 61 22 7d 2e 69 63 6f 6e 2d 6c 6f 67 6f 2d 75 72 62 61 6e 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: eet:before{content:"\f196"}.icon-logo-financial-review:before{content:"\f197"}.icon-logo-monster-children:before{content:"\f198"}.icon-logo-pedestrian:before{content:"\f199"}.icon-logo-time-out:before{content:"\f19a"}.icon-logo-urban-list:before{content:"
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 37 22 7d 2e 69 63 6f 6e 2d 70 65 61 63 65 66 75 6c 6e 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 38 22 7d 2e 69 63 6f 6e 2d 70 65 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 39 22 7d 2e 69 63 6f 6e 2d 70 69 7a 7a 61 2d 6f 76 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 61 22 7d 2e 69 63 6f 6e 2d 70 6c 61 63 65 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 62 22 7d 2e 69 63 6f 6e 2d 70 6c 61 79 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 63 22 7d 2e 69 63 6f 6e 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 64 22 Data Ascii: content:"\f1b7"}.icon-peacefulness:before{content:"\f1b8"}.icon-pets:before{content:"\f1b9"}.icon-pizza-oven:before{content:"\f1ba"}.icon-place-marker:before{content:"\f1bb"}.icon-play-circle:before{content:"\f1bc"}.icon-plus-circle:before{content:"\f1bd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	839	OUT	GET /assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:21 UTC	914	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: application/font-woff Content-Length: 65212 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1726800245&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=sizHg25KJrmuJShN5NeYOb%2FWntPg%2Flc4sFkI3XZivgs%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1726800245&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=sizHg25KJrmuJShN5NeYOb%2FWntPg%2Flc4sFkI3XZivgs%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 2147 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0491c18c42d33-DFW
2024-10-31 02:41:21 UTC	455	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 fe bc 00 0c 00 00 00 02 08 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 34 00 00 b5 41 00 01 62 ce e6 46 59 5e 47 44 45 46 00 00 c4 78 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 c5 6c 00 00 2d 05 00 00 6e 0a 8d ea ef 75 47 53 55 42 00 00 f2 74 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 bc 00 00 00 4f 00 00 00 60 6a 62 81 6c 63 6d 61 70 00 00 0a 04 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 77 48 0a 68 68 65 61 00 00 07 9c 00 00 00 20 00 00 00 24 05 f7 06 9e 68 6d 74 78 00 00 01 58 00 00 06 43 00 00 0f 20 11 39 96 80 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 08 0c 00 00 01 Data Ascii: wOFFOTTOXCFF 4AbFY^GDEFxdz\|GPOSl-nuGSUBtF.#OS/2O`jblcmap/9"head$36wHhhea $hmtxXC 9maxpPname
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: c5 2b d1 76 5c 3d a1 5e 35 e1 f6 5a 0a 13 b2 ec 8d ca c2 15 d4 14 fa cb bf 0c 0b 3c cf 7b 8a 64 a7 b5 3b e2 f5 0a e2 5c 2a f0 b9 81 f9 fc fe 1e e4 c5 f9 17 61 2d c7 d3 7a da a1 1e f6 ea 77 e5 df 10 e7 a0 2b 6b f4 be 6e 10 b4 15 d6 dc 07 c4 c4 4f e9 63 fd 15 b8 0e db b8 71 8a 95 e4 7a 41 ae 5b 25 ae 63 91 0d f2 d0 f5 1f 21 ea 5e c4 f5 2f c2 5e 6c 71 61 f5 41 29 d4 c6 08 f5 ac f5 ca 6a f6 f2 a4 ce d3 f7 35 a4 1f 97 bf 6f bf 51 49 3f 50 29 5b 26 77 1c 8e a6 e7 c8 b3 eb a8 64 6f 21 5e 03 5d 46 b5 69 5f e5 9d df 51 9d 7d 43 8d 61 8a fa ab b5 3b e6 15 c9 ae ad a3 11 af 57 52 fb 17 f8 48 3e bf 7f 80 ca f1 26 75 08 ea 59 4b 2f d4 e9 fb e5 4f c1 6f 29 97 88 3f b2 cf 6b 88 72 23 e5 5f 12 f7 c4 f5 e6 6b 4e eb 6e b0 5b 7b 5c b6 1b 7a ac 76 0d ce 68 9f c7 22 e8 52 24 Data Ascii: +v\=^5Z<{d;\*a-zw+knOcqzA[%c!^/^lqaA)j5oQI?P)[&wdo!^]Fi_Q}Ca;WRH>&uYK/Oo)?kr#_kNn[{\zvh"R$
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 8e 52 18 67 ba e2 b9 cb b8 bf e3 f3 ee ff 7f e6 e3 15 5e 9e fa 73 3f e7 f9 db 26 ee 9a e2 0d 12 b7 4f dc b6 c0 f5 3d fe 6b cf ec b6 6f e9 60 98 c5 1f 3f cc 7a 88 95 f5 ad ff 7f 97 7a ed f1 b2 50 45 99 fb 5b bc d7 45 6c 59 77 b2 07 69 29 31 fb 8f 94 a5 3f de 52 2a 97 88 af 81 df c3 65 e1 21 89 6b c3 cf e1 2e 70 27 36 ff 8f e4 5e 1d 7a 61 af ed d4 ca 9f 00 2b e7 aa db 00 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 d2 f6 f7 df 7f 17 96 22 a0 08 0a 60 3e 01 00 90 ef 06 9d 78 01 63 60 66 d2 66 9c c0 c0 ca c0 c1 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 45 80 7c a0 14 0c 30 b1 33 20 81 50 ef 70 3f 06 07 06 de df 4c 4c 7f ff 8b 32 4c 64 6e 61 f8 aa c0 c0 30 1d 24 c7 78 96 69 0f 90 52 60 60 06 00 f0 77 0c af 00 78 01 2c c6 25 62 c2 71 00 c7 d1 cf 4f e6 ee 2e 75 ae 6d Data Ascii: Rg^s?&O=ko`?zzPE[ElYwi)1?R*e!k.p'6^za+xc`d``n"`>xc`ffE\|03 Pp?LL2Ldna0$xiR``wx,%bqO.um
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 66 6a b2 29 6e 4a 28 bf 19 ac 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e 32 84 6f f4 Data Ascii: fj)nJ(5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~2o
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 03 97 e1 16 3c 84 17 f0 1e be 41 28 fc c5 c8 c8 18 13 13 60 72 4c 87 59 b1 08 56 c6 46 d8 12 3b 60 77 ec 87 43 71 0c 4e c6 59 b8 10 57 e0 7a dc 86 7b f1 08 9e c6 4b 78 13 1f e0 73 7c 87 5f 31 04 ff 50 24 22 8a 41 f1 29 19 a5 a5 2c 94 9b 0a 51 49 aa 40 d5 a9 1e 35 a5 36 d4 99 7a d1 40 1a 41 e3 69 1a cd a5 25 b4 9a 36 d1 4e 3a 40 c7 e9 1c 5d a5 3b f4 98 5e d1 47 0a a0 1f 1c 8e a3 b2 72 6c 4e c4 29 39 03 67 e7 7c 5c 94 cb 70 65 ae c5 0d b9 05 b7 e7 6e dc 97 87 f0 68 9e c4 33 79 01 2f e7 75 bc 95 f7 f0 61 3e c5 17 f9 06 df e7 67 fc 96 bf 70 30 ff 96 88 82 12 5d e2 49 52 49 23 99 25 97 14 94 12 52 5e aa 49 5d 69 22 ad a5 97 8c 94 19 b2 5c b6 c9 51 b9 22 8f e5 93 fc 52 d4 f8 9a 4e f3 6a 19 ad ad cd b5 b3 f6 d7 d1 3a 5d 17 eb 7a dd ad 87 f4 a4 5e d0 eb 7a 4f 9f Data Ascii: <A(`rLYVF;`wCqNYWz{Kxs\|_1P$"A),QI@56z@Ai%6N:@];^GrlN)9g\|\penh3y/ua>gp0]IRI#%R^I]i"\Q"RNj:]z^zO
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 7f a7 ec e7 8f 95 3d 7c ab 70 8f 19 17 47 28 b2 5b 64 38 1e 64 10 0d 32 8b 74 d6 d8 fb 3f 40 09 ac 81 04 6c 80 2d b0 03 2a e0 35 f0 06 a8 81 5b a0 01 5a 60 0f fc 0b 74 40 0f 0c c0 08 dc 01 f7 c0 03 f0 08 3c 01 f3 93 2e a6 13 36 53 36 33 36 73 98 09 9b ab db 96 05 1b ac e2 1f d5 f4 8d 05 c9 09 05 50 74 47 73 a0 f0 21 50 94 f2 d9 82 42 b9 fd 47 72 37 22 ba e7 35 fc df 3e 87 a8 2a 1a 3a c6 ff f4 a9 10 b6 5a d8 78 71 f0 fd cf 13 10 f1 20 d9 72 54 46 41 43 45 c7 30 f0 a9 8d 89 e5 6c 60 a2 20 bb f2 aa 8a 8e 86 e5 ca c1 e7 41 af b3 a2 65 a8 f1 20 a3 62 a2 63 c3 ce 19 f0 20 a3 fe 47 79 b2 ea 98 d8 30 be 02 1e 64 54 74 4c cb aa 32 be 83 3a 2a 22 a1 a0 61 60 e1 fd 9f 37 e0 41 46 45 c7 c4 81 a7 3d 01 0f 32 3a 2a 0e 8c 7f 41 6d f5 a0 22 63 a3 ff 47 89 0f 02 9c 75 74 Data Ascii: =\|pG([d8d2t?@l-5[Z`t@<.6S636sPtGs!PBGr7"5>:Zxq rTFACE0l` Ae bc Gy0dTtL2:"a`7AFE=2:Am"cGut
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 6d 3b d9 c4 f8 66 75 b1 d1 54 11 92 12 34 63 3a b4 48 06 66 40 1b 66 4a bb 66 4b 27 e6 06 e9 c2 42 e9 d6 62 e8 c5 12 a9 c0 b2 30 7d 58 03 fd 5a 0b 83 58 17 27 0b 9b 02 0c 61 2b 0c 63 1b 8c 48 0e 8c 61 bb 64 63 27 8c 63 57 90 09 ec d3 41 1c c0 a1 00 d5 30 89 a3 30 15 70 2c e8 1c 4e e9 2c ce c0 7f 9f 87 ff 9f 05 99 c7 25 48 4e b0 80 cb b0 28 79 b8 02 cb b8 2a 2b ba 2e 6b b8 19 64 1d 77 65 43 f7 61 0b 0f a2 6c e3 05 ec 48 3e ec e1 15 5e e2 b5 de e1 2d de 87 29 c0 c7 20 fb f8 0a 07 f8 06 87 52 04 c7 f8 2e 99 90 0b 85 f8 09 27 f8 25 c8 29 fe d0 df f8 0b ff 04 68 80 b3 7f 1c cd 03 b0 06 64 16 00 d0 f3 dd 7b df ef f7 b2 6d db b6 6d db b6 ed 1a 66 db 76 e3 34 6c 90 6d db b5 bb 99 7b c6 3c a2 f1 6e 44 64 74 45 47 f4 c4 40 f4 f9 40 0c f9 50 8c 8b 11 1f 89 09 2e a1 Data Ascii: m;fuT4c:Hf@fJfK'Bb0}XZX'a+cHadc'cWA00p,N,%HN(y*+.kdweCalH>^-) R.'%)hd{mmfv4lm{<nDdtEG@@P.
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 2e 82 7f 11 da 21 4c 41 78 1d e1 63 08 df 43 f8 23 19 aa 64 5c 24 d3 90 cc 13 b2 dc c8 6a 24 5b 85 ec 5a b2 9f 23 c7 81 9c 76 72 a5 c9 ad 26 4f 9a 3c 17 f2 ba 39 a3 c6 99 3a ce 3c 4f be 3d f9 ad 9c 95 e4 6c 21 e7 6e e6 9c 21 e7 ca 39 f7 0d e7 6f e7 7c 0d 17 a4 b9 f0 28 17 73 28 f0 a5 f0 5e 0a 4b 28 7c 80 c2 8f 28 b2 a7 68 96 a2 a7 29 56 a4 b8 88 e2 5e 4a ee a0 24 8d 92 c7 29 95 a1 d4 87 d2 59 ca 6e a1 cc 9c b2 3a ca 5e a3 ec 07 ca 73 28 3f a1 42 9b 8a 22 2a 3e a4 b2 9c ca df a9 b2 a7 aa 9a aa 9f a9 8e a5 fa 41 aa 3f a7 26 98 9a 0b d4 0c 50 f3 05 b5 4e d4 86 53 db 42 ed 29 b5 ef 53 fb 33 75 9a d4 c5 51 37 4b dd 7d d4 7d 44 fd 1d d4 bb 53 bf 45 fd 7b 34 84 d0 50 46 43 1f 0d cf d2 28 45 63 2d 8d 97 69 7c 81 a6 1b 68 b2 a6 49 48 d3 3f 34 ab d0 1c 45 f3 20 cd Data Ascii: .!LAxcC#d\$j$[Z#vr&O<9:<O=l!n!9o\|(s(^K(\|(h)V^J$)Yn:^s(?B"*>A?&PNSB)S3uQ7K}}DSE{4PFC(Ec-i\|hIH?4E
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: c3 27 c2 37 1c df 9f f8 bb e3 bf 48 c0 46 60 0c 81 5f 09 36 23 38 86 e0 39 82 9f 12 fc 93 50 94 d0 40 42 0b 08 dd 25 f4 07 61 33 e1 2a 84 fb 13 fe 94 f0 bf 44 ac 44 52 44 3a 13 d9 45 e4 16 51 0d d1 3c d1 56 44 67 10 3d 4c f4 73 62 8d 89 f5 22 36 9b d8 06 62 6f 11 b7 13 2f 4d 7c 04 f1 f5 c4 2f 13 ff 95 84 8d 44 4d 12 a7 48 bc 46 b2 17 c9 a5 24 2f 91 fc 91 94 93 54 15 52 03 48 ad 20 75 9d d4 7f 14 36 a0 d8 26 8a a0 a8 0b 69 2f e9 1c e9 86 a4 bb 93 9e 44 7a 39 e9 63 a4 5f 27 fd 0d 19 09 19 2f 99 2c 99 c6 64 fa 93 99 42 66 0b 99 8f c9 bc 20 6b 27 5b 9c 6c 27 b2 93 c8 6e 22 7b 9f 9c 8c 5c 6d 72 9d c8 ad 24 77 8f bc 85 7c 5d f2 2b 1e 4e 18 bb f5 d6 8e 63 db ff dc fe b0 ca 97 0f 0b b7 18 0f 6d 7b 7b dd b9 f5 93 be 78 d8 fb 8b 97 2f 8f f7 ec f9 b2 40 ef 4e bc 2c Data Ascii: '7HF`_6#89P@B%a3*DDRD:EQ<VDg=Lsb"6bo/M\|/DMHF$/TRH u6&i/Dz9c_'/,dBf k'[l'n"{\mr$w\|]+Ncm{{x/@N,
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 36 1a 3a 47 3e 87 26 60 ae 22 85 24 94 ab 12 c5 27 cb 51 2c 5e 13 ed 39 1d 85 7c 31 e1 4d 69 44 e7 42 fd 49 a3 64 7a 52 4f 8e 5d ce 83 af 54 5a 01 4c b9 d2 b4 93 76 b4 72 b9 57 96 78 2b c3 28 a4 a0 7f 01 ec 2d b0 28 40 15 f2 08 22 90 bf c2 a3 0c a8 f9 7c c2 d5 f6 41 02 31 08 a3 d8 74 b3 a3 4e a1 89 aa 6b 67 4e 65 3c 8a b3 36 e3 0b 68 30 ee f0 80 f0 c4 b8 7d 4f 52 ad 6d cc f0 67 2e 3c 54 9f 4c b1 8f b2 67 07 cd 18 a6 ea 63 ed d0 b1 d9 f0 2b 2f a5 35 d6 f2 59 07 e8 c8 2b ed 02 dc c5 0f 79 86 30 0b d9 3c cb b8 40 fc 00 4e 79 da 2d 66 e0 44 2b 93 75 eb f5 5a 01 e0 9a 82 54 c4 df ee 75 1e 98 0a e2 4c 13 ad 13 43 14 43 47 36 6b 3e f4 12 28 78 d1 c9 44 3b 93 21 a6 af cd a0 2d af 5c a7 5b 3e 1b c4 cb 0a 58 69 9c 4f c3 0a d4 7b cd 69 32 54 7b 9e 0c 11 cf e3 5b a5 Data Ascii: 6:G>&`"$'Q,^9\|1MiDBIdzRO]TZLvrWx+(-(@"\|A1tNkgNe<6h0}ORmg.<TLgc+/5Y+y0<@Ny-fD+uZTuLCCG6k>(xD;!-\[>XiO{i2T{[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	838	OUT	GET /assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311f018f3b29cdac61ce8b1ae9f.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:21 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: application/font-woff Content-Length: 62624 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729132585&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=RbqFUuMp1gRbF5BPlHU3utHO0c0n4BF5ixLEuSxhptE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729132585&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=RbqFUuMp1gRbF5BPlHU3utHO0c0n4BF5ixLEuSxhptE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 2147 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0491c2b343461-DFW
2024-10-31 02:41:21 UTC	463	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 f4 a0 00 0c 00 00 00 02 0a 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 10 00 00 ae 31 00 01 69 cd 88 db c8 a9 47 44 45 46 00 00 bd 44 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 be 38 00 00 2a 1d 00 00 68 d0 a9 0a 20 ae 47 53 55 42 00 00 e8 58 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 84 00 00 00 50 00 00 00 60 6a c9 82 76 63 6d 61 70 00 00 09 e0 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 7c 48 18 68 68 65 61 00 00 07 64 00 00 00 20 00 00 00 24 05 fc 06 ac 68 6d 74 78 00 00 01 58 00 00 06 09 00 00 0f 20 25 10 89 0e 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 07 d4 00 00 02 Data Ascii: wOFFOTTO4CFF 1iGDEFDdz\|GPOS8*h GSUBXF.#OS/2P`jvcmap/9"head$36\|Hhhead $hmtxX %maxpPname
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 5d 28 83 de b0 88 ff 23 62 1f 49 ec b6 e0 29 6f 8a f1 cc 13 c6 3f 40 56 29 5a ce 44 d7 92 89 5d db 97 82 25 5d df 9b 82 9f ae 3f 0c 7b a9 75 fb 89 c1 0a c8 35 2b 83 27 b1 bd 50 e9 d7 d8 be 1a f0 a0 2c b4 e7 18 60 1d cf 48 b9 ee 3f 13 cd 43 1a e7 3b 9b 89 cb 57 02 97 b7 4c c8 63 1a b3 f8 91 d7 b7 82 e6 3d 8c cd 7f 18 ce 22 c5 8e b2 01 a6 bd d5 6a 21 47 36 98 a3 5c 7b b7 4c cb 8b d2 20 8b c1 f3 de 0a ca 2f c9 b4 3f 8a 6f 37 b4 bb 71 f8 99 e3 65 da 7c cf da 12 af 4d c6 cc a3 cc b9 28 11 f3 2c 67 d9 4d fd 6b ac 1f bf 30 9c 7b ad 62 eb 99 ac 7e 0d fe 0c bb 41 ce 5b 20 33 5e b7 d4 40 36 7b a9 82 6d e4 c5 e0 d7 f0 3c e5 69 ec e3 ac b3 81 72 d4 b5 ad 63 bf bf 4f ee d9 ed 7b 9d b9 c6 da 09 73 95 b5 3e f1 74 ef 39 d6 86 21 2f 61 fc eb d3 eb e6 54 29 34 c7 49 2c ad Data Ascii: ](#bI)o?@V)ZD]%]?{u5+'P,`H?C;WLc="j!G6\{L /?o7qe\|M(,gMk0{b~A[ 3^@6{m<ircO{s>t9!/aT)4I,
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 65 51 e6 fd a6 ef 3a 85 3b 72 ba b9 55 7a 1d 9d 6f a5 2c b2 7c 84 48 d0 83 bd 0f fe 0e bd 70 be e3 60 78 0e ce 82 cb 45 96 9e c5 77 5f 28 82 55 26 57 06 5f 01 22 c3 96 5b 00 00 00 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 32 ed ef 97 ff 4e 2c 8d 40 11 14 c0 7c 02 00 92 8c 06 b0 78 01 63 60 66 32 60 fc c2 c0 ca c0 c1 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 c5 19 80 80 8d 01 06 98 d8 19 90 40 a8 77 b8 1f 83 03 03 ef 6f 26 a6 bf ff 45 19 26 32 b7 30 7c 55 60 60 98 0e 92 63 bc c4 b4 07 48 29 30 30 03 00 17 17 0d 21 78 01 4c ca 25 54 03 60 00 45 e1 fb 0b ee ee 90 70 0a d2 70 4f f4 44 42 7a c0 b7 7e 26 7d da 7b 5d af b3 32 89 eb 61 fd 2c 6d 03 1e d2 be 27 c0 b4 59 c1 00 00 3b 20 1b 86 d8 91 2d 9d 9c ca 8e 25 ae 65 cf 24 8f 72 07 07 04 e5 4e c6 c9 c8 dd f4 91 93 Data Ascii: eQ:;rUzo,\|Hp`xEw_(U&W_"[xc`d``n2N,@\|xc`f2`@wo&E&20\|U``cH)00!xL%T`EppODBz~&}{]2a,m'Y; -%e$rN
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e 32 84 6f f4 e7 23 c3 f8 c1 60 be 32 94 ef 8c e4 37 63 05 e3 98 20 c3 24 e5 66 a2 72 51 93 35 b4 e7 21 3d 78 45 1f de a9 80 0a a9 a8 4a a8 98 4a Data Ascii: HI5hAZjD?01UldX=0d\6#nj*>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~2o#`27c $frQ5!=xEJJ
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: b8 1e b7 e1 5e 3c 82 a7 f1 12 de c4 07 f8 1c df e1 57 0c c1 3f 14 89 88 62 50 7c 4a 46 69 29 0b e5 a6 42 54 92 2a 50 75 aa 47 4d a9 0d 75 a6 5e 34 90 46 d0 78 9a 46 73 69 09 ad a6 4d b4 93 0e d0 71 3a 47 57 e9 0e 3d a6 57 f4 91 02 e8 07 87 e3 a8 ac 1c 9b 13 71 4a ce c0 d9 39 1f 17 e5 32 5c 99 6b 71 43 6e c1 ed b9 1b f7 e5 21 3c 9a 27 f1 4c 5e c0 cb 79 1d 6f e5 3d 7c 98 4f f1 45 be c1 f7 f9 19 bf e5 2f 1c cc bf 25 a2 a0 44 97 78 92 54 d2 48 66 c9 25 05 a5 84 94 97 6a 52 57 9a 48 6b e9 25 23 65 86 2c 97 6d 72 54 ae c8 63 f9 24 bf 14 35 be a6 d3 bc 5a 46 6b 6b 73 ed ac fd 75 b4 4e d7 c5 ba 5e 77 eb 21 3d a9 17 f4 ba de d3 a7 fa 46 3f 6b 88 fe b1 48 c6 16 cb 92 58 5a cb 66 f9 ac 84 55 b2 da d6 d2 3a 58 77 eb 67 43 6d 8c 4d b6 59 b6 d0 56 d8 7a db 6d c7 ec a2 Data Ascii: ^<W?bP\|JFi)BT*PuGMu^4FxFsiMq:GW=WqJ92\kqCn!<'L^yo=\|OE/%DxTHf%jRWHk%#e,mrTc$5ZFkksuN^w!=F?kHXZfU:XwgCmMYVzm
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 77 40 0d 34 c0 35 d0 02 7b e0 5f a0 03 7a 60 00 46 e0 06 b8 05 ee 80 7b e0 01 98 9f 74 56 4c d8 14 6c 4a 36 53 98 c9 f4 1f d5 f4 8d 2c 36 0e 05 01 f0 46 5b 24 3c 42 80 20 37 d7 15 14 ca dd 3f 92 41 7f 1b 75 0d 5e cd 44 e4 a6 1f 1e 13 b2 db 29 15 54 34 f4 4d 1b 12 8e 4b 9a b8 b0 70 e3 d9 84 03 27 02 a2 95 5b ca a8 48 28 68 e8 0a 8f 74 61 60 ba 75 0c 64 24 bc 8c 2d a9 a1 42 3d dc 78 3c 86 4d 41 7d c1 58 0f 48 28 68 18 b8 60 73 1c 08 48 d8 bd 1c 5e 52 c3 c0 05 f5 79 20 20 a1 a0 61 18 2b d2 05 f5 eb c0 89 88 8c 8a 8e 89 b5 59 07 02 12 0a 1a 06 ae cd 7d 48 b7 14 90 50 d0 30 70 41 e1 39 10 90 50 d0 b0 0b f9 3c 10 60 a5 bd 60 ec 4c ff 7d ff f5 f5 fb fc ff 8b 38 3f c5 f0 f9 1a 0f 9c 08 88 9b 8c fe 72 4b c8 6e a7 54 50 d1 d0 37 6d 4a 43 e1 92 26 2e 2c dc 78 36 e9 Data Ascii: w@45{_z`F{tVLlJ6S,6F[$<B 7?Au^D)T4MKp'[H(hta`ud$-B=x<MA}XH(h`sH^Ry a+Y}HP0pA9P<``L}8?rKnTP7mJC&.,x6
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 38 7b 6b 29 fb b5 2c ab b4 62 dc 01 ad e3 60 ad e7 b0 36 0c da ac 4d cc d1 96 11 47 b4 9d a3 da c1 b1 cc e3 84 76 66 ae 76 73 52 7b 46 9d d2 81 09 6b 39 ad e3 9c 19 e9 c4 d0 79 5d e4 82 2e e5 a2 ae 30 75 d2 25 5d e5 72 16 e8 1a 57 75 3d d7 ea 66 6e e8 f6 a8 9b ba 9f 5b f5 90 3b 7a 34 70 57 af b8 97 85 3c d0 1b bd d6 3b bd d5 fb b1 be ea 8b be b1 48 df f5 53 3f f4 8b 87 fa cd 23 fd e1 71 96 f0 54 7f 33 9b f9 2c d6 3f 9e e9 3f 41 f0 0c 68 89 15 05 00 70 ee 39 f7 f9 2d be d7 8a 6d db b6 6d db b6 6d db ee d2 6f 15 db b6 9d 26 e6 cc af e9 03 e5 cf a6 bb f9 50 14 3e 8a 88 b6 4f 45 8f cf 44 bf f8 5c 8c e7 3a 5a 9c 9a 2e e4 1c ce 2c ce e5 7c ce e6 3c 2e 60 1c d3 98 ca 04 4e 62 3c c1 9e cc e2 14 d6 a2 cd 41 9c c0 71 c5 21 c5 44 76 e3 08 2e e2 58 3a c5 aa ac 4e 8f Data Ascii: 8{k),b`6MGvfvsR{Fk9y].0u%]rWu=fn[;z4pW<;HS?#qT3,??Ahp9-mmmo&P>OED\:Z.,\|<.`Nb<Aq!Dv.X:N
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: b2 8c aa 09 54 39 50 d5 4d b5 1e d5 35 54 5f a5 c6 95 1a 05 b5 13 a9 2d a2 f6 01 75 c6 d4 d5 52 f7 03 f5 50 2f a0 fe 47 1a 94 34 5a d2 34 91 a6 53 34 eb d3 5c 44 b3 86 e6 4f 68 09 a7 a5 89 96 3b b4 1a d1 ea 47 eb 39 da e6 d3 d6 4d db fb b4 3d a7 3d 91 f6 b3 b4 ff 4e 87 3f 1d fd 74 1c a6 d3 81 4e 25 9d f7 e9 8a a5 eb 22 dd 42 ba 7f a0 c7 95 9e 16 7a fe a2 37 89 de d7 e8 fd 9b be 64 fa 5a e9 1b a5 ef 1f 64 e1 c8 b2 91 ad 44 76 03 d9 4f c8 9e 20 b7 45 2e 42 be 0b f9 4d e4 3f a3 98 89 22 1c c5 49 14 df a2 4c 41 d9 81 72 00 e5 7b a8 74 51 a9 50 1d 45 f5 05 ea d9 a8 c3 50 d7 a2 59 88 c6 0b 4d 0d 9a 63 68 be 65 a9 11 4b a5 2c 7d 9d 65 d3 58 26 61 d9 1e 96 3b b3 5c cd f2 5b ac 08 66 c5 6b ac ac 66 e5 0b 56 9d 66 75 10 ab 6f b1 a6 8e b5 16 ac fd 98 75 16 ac 93 b3 Data Ascii: T9PM5T_-uRP/G4Z4S4\DOh;G9M==N?tN%"Bz7dZdDvO E.BM?"ILAr{tQPEPYMcheK,}eX&a;\[fkfVfuou
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 12 7e 4c c4 4b 24 41 a4 1e 91 c9 44 ae 12 f9 83 68 36 d1 86 44 87 12 5d 47 f4 0a d1 07 c4 7a 13 9b 40 6c 23 b1 63 c4 fe 22 1e 21 de 94 f8 3c e2 87 89 7f 42 fc 35 89 42 12 ed 49 5c 27 f1 33 25 a3 29 d9 42 c9 07 94 3c a2 34 9f d2 c6 94 8e a6 74 23 a5 ef 53 fa 9a b2 96 94 6f a7 c2 40 45 1f 94 4c 94 32 94 16 28 fd 50 66 a0 ac 41 39 85 f2 05 ca 3f a8 56 d4 3c 54 05 b5 2d ea 08 d4 39 a8 bb 51 7f 41 33 a2 65 a0 55 41 eb 8f 36 13 6d 3b da c7 e8 36 f4 86 e8 3d d0 57 a3 7f 40 e5 2c 2a f7 a4 f2 fe a7 97 c6 6f bf b1 eb c4 ce fb 3b 9f d6 fa f5 69 64 5b e0 c8 8e cf 37 5c d8 38 e5 97 a7 03 ff ef ee 0f e0 62 da ba c7 71 b8 31 9d 73 ba 30 97 8e d3 75 67 ae 73 00 82 00 02 10 2e 08 b8 05 40 aa 2a 55 81 a4 42 14 e0 12 f7 02 00 49 45 22 29 89 a8 28 00 00 08 44 02 42 20 58 a7 Data Ascii: ~LK$ADh6D]Gz@l#c"!<B5BI\'3%)B<4t#So@EL2(PfA9?V<T-9QA3eUA6m;6=W@,o;id[7\8bq1s0ugs.@UBIE")(DB X
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: b5 38 c3 26 90 df 68 45 ea f4 37 62 f4 2b d3 28 60 1a 83 09 f8 00 53 07 18 d6 88 7d 0c 71 c8 6d 21 3b 03 2a be 18 7b a6 e5 1e a1 4e 02 c5 de 6a 17 ed be 2b 49 99 1a b7 fb c2 ed 84 b1 9d 79 60 68 a8 86 54 0a a4 5a d3 4e 84 6e 71 b0 df 23 77 1e e8 31 14 fb f8 8e 67 c4 a4 a1 ca 7e 0e 6e 5d 5a 0d 3b fa 54 23 88 cd b3 5b 80 25 af 88 0e f5 15 1f 83 91 0c 9c 25 ae 3b a3 54 e3 4f 7b 30 52 87 10 23 18 4b 2b b4 c2 7d 0a 18 d8 2f 15 b8 8e 64 34 cf cd 82 36 82 e8 86 c2 ed c0 d4 b3 19 d6 b2 a5 cd 91 b7 bc e8 80 bf dd 18 d2 26 b7 35 34 e7 15 e9 5a d9 0a 16 af ca 21 00 05 0b 8d 08 da 4f 82 76 d4 52 bd 91 58 8a 1b a5 6b 85 38 41 57 ec 1f 07 39 2c 30 bb 4f 83 a5 b8 10 5a ab 17 52 78 b9 00 2b a0 e4 91 f6 ea e5 38 d0 2c a7 2c 91 68 bc 6c 8f 97 1a 81 fc 49 5b 77 83 78 5f be Data Ascii: 8&hE7b+(`S}qm!;*{Nj+Iy`hTZNnq#w1g~n]Z;T#[%%;TO{0R#K+}/d46&54Z!OvRXk8AW9,0OZRx+8,,hlI[wx_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	104.17.24.14	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	557	OUT	GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:21 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-17b8b" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 88998 Expires: Tue, 21 Oct 2025 02:41:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u6lChpVLd7ZIU2m9ji%2BxYwZvsQ459bmI0MyoXeQnWBzzrTUCcM36ifbfDlDxLNLS0c0kNQy7AJ4aUxnDEg0D5kHpW%2Bj5FDyA1hWNFtOtUUPhWMGvg6b28n%2FezzJ3HH6%2BTLQdVgRv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8db0491c2fbd462a-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 02:41:21 UTC	409	IN	Data Raw: 33 39 37 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 Data Ascii: 3978/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 69 2e 74 6f 53 74 72 69 6e 67 2c 6b 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6c 3d 7b 7d 2c 6d 3d 22 31 2e 31 32 2e 34 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a Data Ascii: i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c Data Ascii: return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray\|\|function(a){return"array"===n.type(a)},
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 67 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 69 66 28 62 29 7b 69 66 28 68 29 72 65 74 75 72 6e 20 68 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 3b 66 6f 72 28 64 3d 62 2e 6c 65 6e 67 74 68 2c 63 3d 63 3f 30 3e 63 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 64 2b 63 29 3a 63 3a 30 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 62 26 26 62 5b 63 5d 3d 3d 3d 61 29 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 2d 31 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 Data Ascii: =a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(h)return h.call(b,a,c);for(d=b.length,c=c?0>c?Math.max(0,d+c):c:0;d>c;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.leng
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 31 3c 3c 33 31 2c 44 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 45 3d 5b 5d 2c 46 3d 45 2e 70 6f 70 2c 47 3d 45 2e 70 75 73 68 2c 48 3d 45 2e 70 75 73 68 2c 49 3d 45 2e 73 6c 69 63 65 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 Data Ascii: ,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===b&&(l=!0),0},C=1<<31,D={}.hasOwnProperty,E=[],F=E.pop,G=E.push,H=E.push,I=E.slice,J=function(a,b){for(var c=0,d=a.length;d>c;c++)if(a[c]===b)return c;return-1},K="checked\|selected\|async\|autofocus\|au
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 5f 3d 2f 5b 2b 7e 5d 2f 2c 61 61 3d 2f 27 7c 5c 5c 2f 67 2c 62 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4c 2b 22 3f 7c 28 22 2b 4c 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 Data Ascii: extarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,_=/[+~]/,aa=/'\|\\/g,ba=new RegExp("\\\\([\\da-f]{1,6}"+L+"?\|("+L+")\|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+6
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 2c 64 7d 63 61 74 63 68 28 79 29 7b 7d 66 69 6e 61 6c 6c 79 7b 6b 3d 3d 3d 75 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 Data Ascii: test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s)),d}catch(y){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(Q,"$1"),b,d,e)}function ga(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shif
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 64 61 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 64 61 29 29 2c 63 2e 61 74 74 72 69 62 75 74 65 73 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 Data Ascii: ocumentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventListener("unload",da,!1):e.attachEvent&&e.attachEvent("onunload",da)),c.attributes=ia(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagNa
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 75 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 Data Ascii: sa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-\r\\' msallowcapture=''><option selected=''></option></select>",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c Data Ascii: ction(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	836	OUT	GET /assets/fonts/GT-Walsheim-Pro-Bold-8309a900abf984eff298c77aee586a756de0cbefe14f5dcab92825d05e95534f.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:21 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: application/font-woff Content-Length: 68116 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729109265&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=0oG580wxQttXNKGkjrp1OaEbLEa1KjhFYwetr7I1gx4%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729109265&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=0oG580wxQttXNKGkjrp1OaEbLEa1KjhFYwetr7I1gx4%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 2147 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0491c3d3b2cd9-DFW
2024-10-31 02:41:21 UTC	463	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 01 0a 14 00 0c 00 00 00 02 1c e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 40 00 00 bf ff 00 01 76 79 a5 75 97 2a 47 44 45 46 00 00 cf 40 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 d0 34 00 00 2d 97 00 00 6e e6 4c b7 c8 59 47 53 55 42 00 00 fd cc 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 bc 00 00 00 50 00 00 00 60 6b 9b 84 a3 63 6d 61 70 00 00 0a 10 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 34 00 00 00 36 10 90 48 1f 68 68 65 61 00 00 07 9c 00 00 00 20 00 00 00 24 06 10 06 c5 68 6d 74 78 00 00 01 58 00 00 06 44 00 00 0f 20 91 a0 75 04 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 08 0c 00 00 02 Data Ascii: wOFFOTTOCFF @vyu*GDEF@dz\|GPOS4-nLYGSUBF.#OS/2P`kcmap/9"head$46Hhhea $hmtxXD umaxpPname
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 89 56 f8 fb 67 b3 85 39 d9 2c 7d 37 fa 5b b2 ed fe ce 6a b2 71 72 84 47 6b 6e a4 ce 6f 84 76 0d 18 1d c9 42 8c 0d 82 c5 f7 ff a0 5d 8c 3f 0f 73 59 90 e6 33 04 cd d0 ed c6 b2 dd d8 53 60 61 b8 b3 d9 25 30 0f fa 73 73 1e 02 6c c2 ab 37 ce bf 0e d3 e1 30 1e 9f 6c 3d 49 af 1a e8 56 8f e9 98 e7 9e b4 43 d7 23 21 ea 9e c7 f4 cf c3 5a d4 b8 bb 06 61 93 9f 52 9f 95 cb ea 73 0f 51 9b 95 af d7 26 d7 a3 49 d7 97 ed f4 1b ad bc 29 dc 9f b6 d7 c3 99 b1 3d 96 76 ee f9 fc b7 1d fb 44 75 fa ab b4 d6 2f ce 66 c3 a4 02 7d 35 fa 6b b5 d6 fd 8c f8 69 97 27 3c 5b a5 48 9d df b0 58 ea d9 8d ff 7e 40 7c ff 97 fa fe ae 57 1f 34 11 7f 09 1a 5c 4f f6 27 f8 67 9c 0f 76 bf 9f d1 24 e5 3e ca 7b b1 ed 71 be d5 39 47 f0 75 ba 57 45 0b 9f 32 eb 4d 83 fb ab c9 6c 1e 74 c9 13 de 71 78 1d Data Ascii: Vg9,}7[jqrGknovB]?sY3S`a%0ssl70l=IVC#!ZaRsQ&I)=vDu/f}5ki'<[HX~@\|W4\O'gv$>{q9GuWE2Mltqx
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 3c 6f 67 f5 3f e4 71 a3 31 41 0e af f9 bb e1 e1 ba 29 71 73 b2 57 27 6e 17 49 be 1b 6b ff 61 8f f1 9b f9 7e 50 c3 fe 22 f8 3a b1 62 ad 7e 8a 7a aa f5 da fe 2f b1 b7 7e 95 1d 74 99 fa e2 fb 2d be eb 22 ec 91 3b b8 57 68 63 62 fd 91 94 a5 83 a7 4b d9 08 f6 45 f0 0b d8 04 0f 49 5c 0c 3b e0 2e 70 1f 69 f6 6f b4 bd 10 1a 61 ae 0e a8 f2 2f d5 eb 7f 51 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 b2 fe ef fb ff 4e 2c b3 80 22 28 80 f9 04 00 96 65 06 dd 78 01 63 60 66 f2 65 da c3 c0 ca c0 c1 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 15 19 80 80 83 01 06 98 d8 19 90 40 a8 77 b8 1f 83 03 03 ef 6f 26 a6 bf ff 45 19 26 32 b7 30 7c 55 60 60 98 0e 92 63 7c c4 b4 07 48 29 30 30 03 00 11 be 0d 23 78 01 4c ca 35 42 02 60 00 c5 f1 ff 17 76 77 bb 98 ab b1 d8 4a 1c 81 9d ba 02 0d Data Ascii: <og?q1A)qsW'nIka~P":b~z/~t-";WhcbKEI\;.pioa/Qxc`d``nN,"(exc`fe@wo&E&20\|U``c\|H)00#xL5B`vwJ
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 38 05 a8 88 66 6a b2 29 6e 4a 28 bf 19 ac 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e Data Ascii: 8fj)nJ(5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 28 9c 81 cb 70 0b 1e c2 0b 78 0f df 20 14 fe 62 64 64 8c 89 09 30 39 a6 c3 ac 58 04 2b 63 23 6c 89 1d b0 3b f6 c3 a1 38 06 27 e3 2c 5c 88 2b 70 3d 6e c3 bd 78 04 4f e3 25 bc 89 0f f0 39 be c3 af 18 82 7f 28 12 11 c5 a0 f8 94 8c d2 52 16 ca 4d 85 a8 24 55 a0 ea 54 8f 9a 52 1b ea 4c bd 68 20 8d a0 f1 34 8d e6 d2 12 5a 4d 9b 68 27 1d a0 e3 74 8e ae d2 1d 7a 4c af e8 23 05 d0 0f 0e c7 51 59 39 36 27 e2 94 9c 81 b3 73 3e 2e ca 65 b8 32 d7 e2 86 dc 82 db 73 37 ee cb 43 78 34 4f e2 99 bc 80 97 f3 3a de ca 7b f8 30 9f e2 8b 7c 83 ef f3 33 7e cb 5f 38 98 7f 4b 44 41 89 2e f1 24 a9 a4 91 cc 92 4b 0a 4a 09 29 2f d5 a4 ae 34 91 d6 d2 4b 46 ca 0c 59 2e db e4 a8 5c 91 c7 f2 49 7e 29 6a 7c 4d a7 79 b5 8c d6 d6 e6 da 59 fb eb 68 9d ae 8b 75 bd ee d6 43 7a 52 2f e8 75 bd Data Ascii: (px bdd09X+c#l;8',\+p=nxO%9(RM$UTRLh 4ZMh'tzL#QY96's>.e2s7Cx4O:{0\|3~_8KDA.$KJ)/4KFY.\I~)j\|MyYhuCzR/u
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: a7 2f 93 f4 f4 79 92 86 af 13 ea 21 61 73 40 0f 52 33 31 d9 d3 74 b0 a6 36 0d 3b 0f d4 71 d6 30 ba 5b 20 07 76 c0 35 50 00 7b e0 00 94 c0 3b e0 3d 50 01 35 70 03 34 c0 11 f8 17 68 81 0e e8 81 01 b8 05 ee 80 7b e0 01 78 04 a6 27 6d ca 82 44 49 a2 26 51 41 14 64 dd 9c 52 1a 12 97 10 ff 51 4d df b8 62 e4 40 00 05 6f b4 a0 37 21 c7 6d ae 2b 28 94 bb 7f 24 c3 fa 36 2a 3c 36 ba a3 99 10 55 43 c7 c0 dc 8c a5 5e 38 ec 9d ea 85 0b 37 9e 4d 0a 88 48 c8 d6 6f 55 50 d1 d0 31 30 2d 3c ea c4 c2 61 36 b1 50 f1 72 fa 52 0d 1d 03 d6 d3 8d c7 63 da 34 f4 17 1c 9b 09 05 0d 03 0b 27 dc 5c 01 09 05 7b af a6 97 1a 58 38 61 fd 08 48 28 68 18 58 8e 35 65 fd 0c ea 56 11 19 15 1d 13 07 ae cd 15 90 50 d0 30 b0 70 e2 de dc 01 09 05 0d 03 0b 27 ec 3d 01 09 0d 05 27 f6 7a 8d 01 09 66 Data Ascii: /y!as@R31t6;q0[ v5P{;=P5p4h{x'mDI&QAdRQMb@o7!m+($6*<6UC^87MHoUP10-<a6PrRc4'\{X8aH(hX5eVP0p'='zf
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 50 92 04 30 18 0f 68 b0 10 00 00 06 e7 df ed 12 5d a7 d3 d5 b3 6d db b6 6d db b6 9d e6 d3 58 a9 bf 58 95 11 1a c1 1a 8d cc da 1a 9d f5 1a 3b b4 41 13 b3 b1 26 b3 59 53 32 43 d3 86 cd d6 2c b6 68 0e 5b 6b 2e db 35 5f f3 b4 60 d0 12 2d d6 d2 81 51 5a 31 b0 43 ab d9 a9 35 ec ca 18 f6 68 6d 46 6b 3d 7b b5 61 68 9f b6 d4 76 6d d3 8e 81 d9 ec d7 6e 0e 0c da 33 ec a0 0e e8 90 8e e8 30 87 75 94 ff 7f 2c 47 75 82 3f 7e 77 4c 27 39 9e 71 3a c5 49 9d ce a9 3a 9b 33 3a 3f 74 56 97 73 ae ae 72 41 d7 7e eb 8e 6e eb 2e 17 75 8f 4b 19 cf 15 3d d0 7d 3d 1c f6 5c 4f eb 85 5e e9 25 13 f4 5a 6f f5 46 ef b8 aa f7 5c d3 07 ae 67 12 37 f5 31 23 19 cb 44 7d e6 96 be 0c dd d6 8f fa 5b bf f4 cf e0 3f 82 e0 01 06 d7 03 09 00 e0 7c bb fb 5b cf 46 6d db b6 6d db b6 6d db 76 d4 d8 35 Data Ascii: P0h]mmXX;A&YS2C,h[k.5_`-QZ1C5hmFk={ahvmn30u,Gu?~wL'9q:I:3:?tVsrA~n.uK=}=\O^%ZoF\g71#D}[?\|[Fmmmv5
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 8e 14 77 ea b9 fb 0d 77 cf 71 d7 94 7b 9f 71 cf 82 7b 81 dc cb e5 5e 17 02 cb 11 38 8c 80 1c 02 46 08 24 22 30 81 e0 6f 08 1e 42 d0 08 c1 62 84 7e 47 48 0f a1 52 84 e6 11 3e 8b b0 08 c2 ae 08 d7 21 22 84 48 35 a2 bf 22 2a 88 68 3d 62 d7 11 f3 41 7c 33 e2 97 10 7f 86 b8 11 e2 9e 88 c7 22 5e 84 f8 08 12 eb 91 90 42 c2 00 89 50 24 06 90 fc 09 49 49 24 75 91 74 47 32 0a c9 0e a4 b6 23 35 80 b4 2c d2 73 c8 ec 43 a6 83 fb fb b9 6f ce 83 2f 78 20 c4 83 0e 1e 1e e7 61 0f 8f 7e e2 91 18 8f 3f e0 b1 00 8f 23 78 b2 8e 27 ca 3c 7d 87 a7 52 3c 7b 97 67 9b 79 a6 c4 b3 09 9e 7f c1 f3 c7 3c 9f e4 85 2f 2f 8f f2 ea 57 5e d5 f1 fa 30 af 0d 79 1d 81 ec 47 c8 ca 21 1b 80 dc 7b c8 dd 46 4e 16 79 90 bf 82 7c 2a 0a 3f a2 70 0a 05 47 14 bf 44 f1 20 8a 56 28 0e a2 f4 09 4a c6 28 Data Ascii: wwq{q{^8F$"0oBb~GHR>!"H5"h=bA\|3"^BP$II$utG2#5,sCo/x a~?#x'<}R<{gy<//W^0yG!{FNy\|?pGD V(J(
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: 3d 91 f7 41 de 1f f9 20 e4 43 91 ff 22 7e 00 f1 b7 48 54 48 9c 4f d2 45 f2 11 52 7e 52 4f 90 56 48 3f 4f 66 27 32 cf 92 4d 92 3d 85 ec 97 e4 66 c8 1d 4b be 4a fe 54 0a 75 0a f7 53 ec 50 7c 87 52 89 d2 e9 94 fe a1 bc 1a e5 03 28 3f 45 25 43 e5 60 2a cf 51 4d 53 3d 98 ea ef d4 f6 a6 f6 23 75 85 fa 95 34 2c 34 8e a3 f1 27 4d 3f cd 6d 68 9e 42 f3 2a 9a 1f d3 4a d1 5a 9d d6 a9 b4 ee a6 f5 01 6d 2b ed 26 ed db 69 bf 4c fb 2f 3a 56 3a 3d 3a c7 d1 b9 81 ce 4f 74 27 e8 96 e8 6e 45 f7 64 ba 8f d3 6b d1 5b 9f de 01 f4 4e a5 f7 04 7d 27 fd 02 fd dd e9 9f 45 ff 1e fa 5f 31 98 66 a0 32 78 8c c1 87 0c 77 62 78 36 c3 67 18 fe ce 28 c6 68 15 46 7b 31 ba 98 d1 73 8c e6 b1 d2 1a ac 7c 29 63 1b e3 9d 51 8a 28 1a ca 76 28 87 a2 5c 80 72 2b ca 2b 28 3f a0 2c 46 8d a0 b6 50 57 Data Ascii: =A C"~HTHOER~ROVH?Of'2M=fKJTuSP\|R(?E%C`QMS=#u4,4'M?mhBJZm+&iL/:V:=:Ot'nEdk[N}'E_1f2xwbx6g(hF{1s\|)cQ(v(\r++(?,FPW
2024-10-31 02:41:21 UTC	1369	IN	Data Raw: d5 fe 3d a8 c8 34 a9 e6 5d 7e 0f 56 6a a8 7c d9 06 55 a8 6a 6f 83 95 25 55 34 99 83 fe 50 09 a2 a0 92 32 09 e3 a1 89 a9 5c 92 b2 64 bf c2 88 fe 50 85 05 db 8f 1f a1 26 d4 ac f6 11 6b 48 e3 34 3f 08 68 4a da 9b b2 67 b2 06 76 ec e8 39 d0 45 32 42 5d de 3a 78 2f 7c 8d 2c 71 11 fb 12 2d a0 da e5 4e 4f 18 b0 3c 7e 05 2c c1 c6 4a f3 03 4e 14 fe 9a d8 0c 63 c4 e6 cb 6e 82 96 36 b1 80 e6 fb 44 e7 61 7f 06 ba b3 58 16 c6 31 b7 77 ed bf fb bb 95 a6 22 94 11 0c a9 46 53 56 35 2e 14 2a c8 56 30 0e cb 40 19 8b cd e0 8c b6 a4 7f 57 f2 69 0f ce 7c 09 7e 27 ec 27 4c 76 fc fd 3e 54 7c 31 e4 4c 9d 34 89 4f 44 f3 bd 4c a7 6d c1 b1 3b ad f6 c4 6f cd 3d 95 34 dc 45 e4 cf 80 33 cb 27 82 da f6 21 d6 45 fb 3a 4d b1 6c bd 6c 97 17 01 22 e9 6f e1 c1 9c 1a b7 69 a2 b7 95 c7 88 31 Data Ascii: =4]~Vj\|Ujo%U4P2\dP&kH4?hJgv9E2B]:x/\|,q-NO<~,JNcn6DaX1w"FSV5.*V0@Wi\|~''Lv>T\|1L4ODLm;o=4E3'!E:Mll"oi1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:21 UTC	837	OUT	GET /assets/fonts/GT-Walsheim-Pro-Light-39fce1902fa730bf56a53c648bec8185b90690516b06811bb2360c62d185b548.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:22 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:21 GMT Content-Type: application/font-woff Content-Length: 65128 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 2146 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0491fcd532cc0-DFW
2024-10-31 02:41:22 UTC	459	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 fe 68 00 0c 00 00 00 02 0b 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 28 00 00 b5 89 00 01 65 b0 2d 3f ef ad 47 44 45 46 00 00 c4 b4 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 c5 a8 00 00 2c 75 00 00 6d f8 e6 e0 d5 9a 47 53 55 42 00 00 f2 20 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 a8 00 00 00 4f 00 00 00 60 69 fb 80 60 63 6d 61 70 00 00 09 f8 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 72 48 05 68 68 65 61 00 00 07 88 00 00 00 20 00 00 00 24 05 f2 06 92 68 6d 74 78 00 00 01 58 00 00 06 2e 00 00 0f 20 fd 6e a2 d6 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 07 f8 00 00 01 Data Ascii: wOFFOTTOh0CFF (e-?GDEFdz\|GPOS,umGSUB F.#OS/2O`i`cmap/9"head$36rHhhea $hmtxX. nmaxpPname
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 38 da fb f0 df 5e e5 68 5f e9 9f a6 61 bf 43 49 f2 79 2d f3 87 f8 2e 9b de ee 7b b0 8c 53 49 92 57 73 c0 ea 35 84 58 6a b1 d8 e8 d3 e2 fb 7b e0 17 e2 af 84 b9 e4 e3 7c 36 43 03 34 81 83 7e 68 65 8c 62 b0 ba 32 2d 61 5b 2a e6 dc 0b d8 c8 35 c4 c8 fc 6b b0 3c 54 f1 80 68 6b 89 f9 8a 58 de 6a b0 3c 56 12 f2 6c 79 fd 07 08 79 af c4 f2 5f 09 6b b1 c8 82 72 70 c8 d7 05 0b 09 63 17 99 3b 65 da 8f ea 1c f5 e8 fc f4 7c 77 85 0e 51 3e 94 0c e2 db 05 1d f1 3b fc dc 83 75 c8 7d 0b 7b 2f 65 68 9b 75 a7 32 e6 49 aa 77 27 d1 4f 81 fa 57 c8 17 7e 95 24 8f d7 ce 80 d5 6b a9 fb 0b fc 18 a6 21 f9 07 a8 ed af 47 2d b0 8a f8 b7 01 36 3d 09 d2 30 1f ec d5 ee c7 ea a1 bc 86 f2 8d d8 a6 30 df f2 9c e3 bc 33 ee 41 66 fb dd 11 b3 2b 2c 07 63 5a 63 b6 12 f2 52 49 f2 8e ea ba 7b 9c Data Ascii: 8^h_aCIy-.{SIWs5Xj{\|6C4~heb2-a[*5k<ThkXj<Vlyy_krpc;e\|wQ>;u}{/ehu2Iw'OW~$k!G-6=003Af+,cZcRI{
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 67 47 5e 11 ed 63 22 cf 8d 3c bb 82 47 9b fd d7 be 59 c3 9d b1 de 6f 23 ce df a8 3e d8 da fa e2 fe 6f 55 3b fb 28 f1 cb 28 f3 7e 0b ef ba 00 7b e4 65 ee 95 9a 34 5e a1 c1 7f a4 2c 95 5e 22 a5 f7 c7 fe 11 9b c1 3e 1b 3e 10 79 0c 5c 0f 2f 83 a7 c1 2a 7c 1e 05 7b 60 9d 5b ae 89 3f 01 fa d8 b9 50 00 00 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 52 fe 8f f3 bf 3b 4b 12 50 04 05 30 9f 00 00 78 9c 05 8d 78 01 63 60 66 52 65 d4 61 60 65 e0 60 ea 62 8a 60 60 60 f0 86 d0 8c 71 0c 46 8c 82 0c 40 c0 c2 00 03 4c ec 0c 48 20 d4 3b dc 8f c1 81 81 f7 37 13 d3 df ff a2 0c 13 99 5b 18 be 2a 30 30 4c 07 c9 31 1e 67 da 03 a4 14 18 98 01 c9 80 0c 3b 00 78 01 4c ca 25 40 43 61 00 45 e1 f3 1b ee ee 0d 6d 48 c3 b5 57 32 ee 92 78 8d 6d 3d bc de 7b 5a 2f 73 49 8b 8b eb 71 19 bd 48 fb Data Ascii: gG^c"<GYo#>oU;((~{e4^,^">>y\/\|{`[?Pxc`d``nR;KP0xxc`fRea`e`b```qF@LH ;7[00L1g;xL%@CaEmHW2xm={Z/sIqH
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e 32 84 6f f4 e7 23 c3 f8 c1 60 be 32 94 ef 8c e4 37 63 05 e3 Data Ascii: 5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~2o#`27c
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 02 4c 8e e9 30 2f 16 c1 ca 58 0b 1b 62 07 ec 8e fd 70 28 8e c1 c9 38 0b 17 e2 0a 5c 8f db 70 2f 1e c1 d3 78 09 6f e2 03 7c 8e ef f0 2b 86 e0 1f 8a 44 44 31 28 3e 25 a3 b4 94 85 72 53 21 2a 49 15 a8 3a d5 a3 a6 d4 86 3a 53 2f 1a 48 23 68 3c 4d a3 b9 b4 84 56 d3 26 da 49 07 e8 38 9d a3 ab 74 87 1e d3 2b fa 48 01 f4 83 c3 71 54 56 8e cd 89 38 25 67 e0 ec 9c 8f 8b 72 19 ae cc b5 b8 21 b7 e0 f6 dc 8d fb f2 10 1e cd 93 78 26 2f e0 e5 bc 8e b7 f2 1e 3e cc a7 f8 22 df e0 fb fc 8c df f2 17 0e e6 df 12 51 50 a2 4b 3c 49 2a 69 24 b3 e4 92 82 52 42 ca 4b 35 a9 2b 4d a4 b5 f4 92 91 32 43 96 cb 36 39 2a 57 e4 b1 7c 92 5f 8a 1a 5f d3 69 5e 2d a3 b5 b5 b9 76 d6 fe 3a 5a a7 eb 62 5d af bb f5 90 9e d4 0b 7a 5d ef e9 53 7d a3 9f 35 48 7f 59 44 63 8b 65 49 2c ad 65 b3 7c 56 Data Ascii: L0/Xbp(8\p/xo\|+DD1(>%rS!I::S/H#h<MV&I8t+HqTV8%gr!x&/>"QPK<Ii$RBK5+M2C69*W\|__i^-v:Zb]z]S}5HYDceI,e\|V
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 50 71 76 3c 97 99 a5 01 63 ef 37 40 7e c6 08 4b 04 6a 20 01 1b 60 07 54 c0 16 78 0f bc 03 6a e0 16 68 80 16 d8 03 ff 02 1d d0 03 03 70 07 8c c0 3d f0 00 3c fd a3 9a be 91 23 cb 81 20 80 de 68 03 5a 98 1f e2 8f bf 57 18 73 d4 fd ad 15 fd 2c 5a 2f 32 ab 51 00 9b a4 47 99 fe f7 95 96 18 10 91 91 3e 04 69 06 65 45 31 8b 52 c3 40 c7 fc 30 1e 09 71 39 b7 25 c4 83 17 f7 43 0a 88 48 c8 8e 5f a9 a2 a3 a0 61 60 3a f0 4a 1b 0f 96 d9 c4 83 8a 02 cb d2 91 3a 06 96 d9 c5 ab f4 ce 86 5e 20 cd 84 82 86 81 07 1b 76 3e 01 09 e5 7f 6a 2a 52 c3 c6 c0 85 65 2b 20 a1 a0 61 e0 b1 53 b9 83 72 e3 2a 2b 22 3a 32 26 ce 87 13 90 94 4b 2a 68 18 f0 c0 1b 90 94 1b 57 59 30 d0 f0 60 c3 27 df 80 84 86 82 fd 3f 35 06 24 e5 90 6c 19 88 e5 af 9f 7f be ff 5c df fe d6 5e ed fa d2 e6 80 f8 21 Data Ascii: Pqv<c7@~Kj `Txjhp=<# hZWs,Z/2QG>ieE1R@0q9%CH_a`:J:^ v>jRe+ aSr+":2&K*hWY0`'?5$l\^!
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: ad d0 8f ac cc 4f fa 89 d5 fa 39 6b ea d7 ac d3 98 41 eb 35 21 1b 6a 12 9b 34 39 d3 35 4d 53 35 7d d0 66 cd 66 4b cd 61 9b e6 0e b5 58 8b b4 64 c0 2f 5a 3e 60 bb 56 b1 43 ab d9 99 df d8 ad b5 5a c3 af 5a c7 1e ad af 4d da c8 5e 6d d1 66 6d 1d 32 8b 7d da c5 fe 81 76 8f 74 58 87 38 a4 23 fc ef a3 3a ce 11 1d e3 db 51 ff f7 04 c7 32 56 27 39 a1 53 39 59 67 72 5a e7 06 9d d1 a5 9c ad 2b 9c d7 d5 a1 6e eb 96 ee 70 41 77 b9 98 71 5c d6 7d dd d3 83 7a ac 47 7a aa 27 7a 36 68 bc 5e e9 8d 5e eb 2d 57 f4 9e ab 7a c7 b5 4c e4 86 3e e4 67 c6 30 41 5f b8 a9 4f f5 35 b7 f4 a7 fe d0 df fa eb 3f 8a e0 01 8c 12 ec 0a c2 e0 7f bb cf d3 d8 b6 6d db b6 6d db b6 6d db fc 34 b1 6d db c6 da 4c 36 4e 15 e9 df e2 0e fc 0e 25 f8 bd fe 2f 87 32 49 79 f1 27 54 14 fe 8c 8a 25 fe 82 Data Ascii: O9kA5!j495MS5}ffKaXd/Z>`VCZZM^mfm2}vtX8#:Q2V'9S9YgrZ+npAwq\}zGz'z6h^^-WzL>g0A_O5?mmm4mL6N%/2Iy'T%
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: e1 b6 03 77 79 dc 8b 71 ff 88 47 2c 1e 9b f1 4c c5 73 1f 5e c6 78 2d c0 7b 20 de e5 78 ff c0 a7 10 9f f3 f8 da e3 bb 15 bf 64 fc 5e e0 bf 94 00 5f 02 a6 10 70 93 c0 7e 04 06 11 58 4e e0 2e 02 cf 12 f8 89 a0 62 82 26 11 f4 86 60 1f 82 bb 08 de 4a 88 32 21 fe 84 48 09 39 46 a8 02 a1 01 84 96 10 ba 93 30 7f c2 66 10 f6 83 f0 32 c2 8f 13 a1 41 44 13 11 17 89 0c 23 f2 0a 51 26 44 f5 12 75 81 68 55 a2 e3 88 be 40 8c 98 98 eb c4 9a 11 db 42 ec 13 e2 b2 89 eb 23 7e 1c 09 83 48 98 47 c2 7d 12 ab 48 7c 46 52 2a 49 ab 48 fa 44 72 12 c9 eb 48 d1 21 a5 88 94 e3 a4 2a 91 da 4e ea 3f d2 6a 49 3b 43 ba 39 e9 4b 48 ff 44 46 3e 19 77 c9 ac 23 f3 19 59 3a 64 25 93 35 95 ac bf 64 57 92 3d 8e ec 15 64 1f 46 30 00 81 09 02 01 82 4a 04 0b 11 5c 46 f0 0b a1 2e 42 11 c2 19 08 ef Data Ascii: wyqG,Ls^x-{ xd^_p~XN.b&`J2!H9F0f2AD#Q&DuhU@B#~HG}H\|FRIHDrH!N?jI;C9KHDF>w#Y:d%5dW=dF0J\F.B
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: a9 a5 f5 2c ad df 69 4d a5 6d 05 6d 87 68 8b a0 7d 0e ed 8a b4 47 d1 5e 46 c7 46 3a b4 e8 f0 a7 73 04 9d 97 e9 7c 4d 67 a5 c0 6a 81 a7 02 d2 02 39 82 b0 45 10 9e 0a 82 9f d0 13 9b b9 82 88 a6 20 52 2a f4 08 78 9f 20 aa 23 88 89 0a 62 0b 04 b1 0f 82 58 94 20 56 26 88 5f 16 c4 cd 05 f1 22 41 42 5c 90 38 23 48 b8 09 12 15 82 e4 66 a1 8b 20 78 80 91 a3 01 00 30 9a 2f 38 0f 0f 6b 8e 71 bb b3 b5 19 d5 8c ea b0 b6 11 d4 6e 54 db b6 8d bf 46 54 db 88 59 f3 7f af 78 31 c5 bb 28 49 52 32 98 d2 12 4a 9f 52 56 49 d9 54 ca 0e 52 1e a1 bc 31 e5 b3 29 3f 4f 85 49 45 4b 2a a6 52 71 14 a1 0c a1 1f c2 34 84 b5 08 8f 10 25 44 1d b1 11 62 27 c4 7e 88 63 11 67 23 9e 45 fc 82 14 42 6a 82 b4 10 e9 14 d2 27 64 15 b9 0d f2 48 e4 0d c8 77 90 7f a3 38 28 3e 4a 0e a5 80 52 0f a5 21 Data Ascii: ,iMmmh}G^FF:s\|Mgj9E Rx #bX V&_"AB\8#Hf x0/8kqnTFTYx1(IR2JRVITR1)?OIEKRq4%Db'~cg#EBj'dHw8(>JR!
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 1d b9 44 fe 82 4b 76 b4 92 6c d8 15 a0 73 08 34 12 89 7f a1 95 71 c1 1a 5d 8d 40 c5 be 3c c8 cd b3 84 d5 c8 f4 2a 77 1f 40 5d 41 9c 66 a7 9f c6 10 85 43 9f c6 4d 7a 6b 40 c1 db d1 a4 ee af 6d a0 32 af 7c 68 02 22 6a 75 0e 5c 0b 9a 5c 27 0f 28 78 60 57 e0 90 07 0f 18 b8 86 bf 3d a0 c9 1f f0 86 52 6e 0d d5 ea 2a 18 11 8a d6 5a 72 56 57 01 91 c2 c5 d0 a7 dd 24 20 d6 77 72 c5 8d b9 6c d0 1d 9b 5c 31 8b 86 99 fa 2c 2a 0d 3f c4 74 4a 9f 9e ab 73 e8 cb b0 09 64 83 fe 15 d9 20 be a2 fa 62 bf 0e 46 d4 b9 50 a0 b5 94 3a dd a5 e1 ad fe 2e 75 41 e7 60 af bf 4b 93 77 e2 5d aa 3b b6 3b 55 28 47 e2 15 14 a5 5a 38 2a 7f 50 41 17 70 01 17 82 9f b2 71 50 91 2e c4 85 b8 00 7e a2 98 68 ac 88 7d 35 a8 01 ad a1 f5 3b fc b0 07 fb 77 a4 06 0a 52 eb 6a f8 61 2f 28 6f 21 83 a7 69 Data Ascii: DKvls4q]@<w@]AfCMzk@m2\|h"ju\\'(x`W=RnZrVW$ wrl\1,?tJsd bFP:.uA`Kw];;U(GZ8PApqP.~h}5;wRja/(o!i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:22 UTC	785	OUT	GET /assets/jquery-3158ee616193dde0b605a15cb9ca832f9de674111b7cf4393353432ab8fa272d.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:22 UTC	1106	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3948 Server: cloudflare CF-RAY: 8db049237b710c17-DFW server-timing: cfL4;desc="?proto=TCP&rtt=2297&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1363&delivery_rate=1206666&cwnd=251&unsent_bytes=0&cid=efbb71bb8b2340bf&ts=424&x=0"
2024-10-31 02:41:22 UTC	263	IN	Data Raw: 37 62 66 63 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d Data Ascii: 7bfc/! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 3a 31 37 5a 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 20 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 09 09 2f 2f 20 46 6f 72 20 43 6f 6d 6d 6f 6e 4a 53 20 61 6e 64 20 43 6f 6d 6d 6f 6e 4a 53 2d 6c 69 6b 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 65 20 61 20 70 72 6f 70 65 72 20 60 77 69 6e 64 6f 77 60 0a 09 09 2f 2f 20 69 73 20 70 72 65 73 65 6e 74 2c 20 65 78 65 63 75 74 65 20 74 68 65 20 66 61 63 74 6f 72 79 20 61 6e 64 20 67 65 74 20 6a 51 75 65 72 79 2e 0a 09 09 2f 2f 20 46 6f 72 20 65 6e 76 Data Ascii: :17Z */(function( global, factory ) {if ( typeof module === "object" && typeof module.exports === "object" ) {// For CommonJS and CommonJS-like environments where a proper `window`// is present, execute the factory and get jQuery.// For env
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 0a 0a 76 61 72 20 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 0a 0a 76 61 72 20 73 75 70 70 6f 72 74 20 3d 20 7b 7d 3b 0a 0a 0a 0a 76 61 72 0a 09 76 65 72 73 69 6f 6e 20 3d 20 22 31 2e 31 32 2e 34 22 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 Data Ascii: var hasOwn = class2type.hasOwnProperty;var support = {};varversion = "1.12.4",// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor 'enhanced'// Need init i
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 20 28 61 73 20 61 20 72 65 66 65 Data Ascii: s and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto the stack (as a refe
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b 0a 0a 09 09 2f 2f 20 73 6b 69 70 20 74 68 65 20 62 6f 6f 6c 65 61 6e 20 61 6e 64 20 74 68 65 20 74 61 72 67 65 74 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 09 69 2b 2b 3b 0a 09 7d 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 63 61 73 65 20 77 68 65 6e 20 74 61 72 67 65 74 20 69 73 20 61 20 73 74 72 69 6e 67 20 Data Ascii: length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;// skip the boolean and the targettarget = arguments[ i ] \|\| {};i++;}// Handle case when target is a string
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 78 70 61 6e 64 6f 3a 20 22 6a 51 75 65 72 79 22 20 2b 20 28 20 76 65 72 73 69 6f 6e 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 29 2e 72 65 70 6c 61 63 65 28 20 2f 5c 44 2f 67 2c 20 22 22 20 29 2c 0a 0a 09 2f 2f 20 41 73 73 75 6d 65 20 6a 51 75 65 72 79 20 69 73 20 72 65 61 64 79 20 77 69 74 68 6f 75 74 20 Data Ascii: me ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pageexpando: "jQuery" + ( version + Math.random() ).replace( /\D/g, "" ),// Assume jQuery is ready without
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 2c 0a 0a 09 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 76 61 72 20 6b 65 79 3b 0a 0a 09 09 2f 2f 20 4d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 2e 0a 09 09 2f 2f 20 42 65 63 61 75 73 65 20 6f 66 20 49 45 2c 20 77 65 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f 66 20 74 68 65 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 2e 0a 09 09 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 44 4f 4d 20 6e 6f 64 65 73 20 61 6e 64 20 77 69 6e 64 6f 77 20 6f 62 6a 65 63 74 73 20 64 6f 6e 27 74 20 70 61 73 73 20 74 68 72 6f 75 67 68 2c 20 61 73 20 77 65 6c 6c 0a 09 09 69 66 20 28 20 21 6f 62 6a 20 7c 7c 20 6a 51 75 65 72 79 Data Ascii: ,isPlainObject: function( obj ) {var key;// Must be an Object.// Because of IE, we also have to check the presence of the constructor property.// Make sure that DOM nodes and window objects don't pass through, as wellif ( !obj \|\| jQuery
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 30 30 39 2f 30 39 2f 30 38 2f 65 76 61 6c 2d 6a 61 76 61 73 63 72 69 70 74 2d 67 6c 6f 62 61 6c 2d 63 6f 6e 74 65 78 74 0a 09 67 6c 6f 62 61 6c 45 76 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 20 64 61 74 61 20 29 20 7b 0a 09 09 69 66 20 28 20 64 61 74 61 20 26 26 20 6a 51 75 65 72 79 2e 74 72 69 6d 28 20 64 61 74 61 20 29 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 57 65 20 75 73 65 20 65 78 65 63 53 63 72 69 70 74 20 6f 6e 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 0a 09 09 09 2f 2f 20 57 65 20 75 73 65 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 66 75 6e 63 74 69 6f 6e 20 73 6f 20 74 68 61 74 20 63 6f 6e 74 65 78 74 20 69 73 20 77 69 6e 64 6f 77 0a 09 09 09 2f 2f 20 72 61 74 68 65 72 20 74 68 61 6e 20 6a 51 75 65 72 79 20 69 6e 20 46 69 72 65 66 6f 78 0a Data Ascii: 009/09/08/eval-javascript-global-contextglobalEval: function( data ) {if ( data && jQuery.trim( data ) ) {// We use execScript on Internet Explorer// We use an anonymous function so that context is window// rather than jQuery in Firefox
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 09 09 69 66 20 28 20 61 72 72 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 4f 62 6a 65 63 74 28 20 61 72 72 20 29 20 29 20 29 20 7b 0a 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 72 65 74 2c 0a 09 09 09 09 09 74 79 70 65 6f 66 20 61 72 72 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 0a 09 09 09 09 09 5b 20 61 72 72 20 5d 20 3a 20 61 72 72 0a 09 09 09 09 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 70 75 73 68 2e 63 61 6c 6c 28 20 72 65 74 2c 20 61 72 72 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 7d 2c 0a 0a 09 69 6e 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 61 72 72 2c 20 69 20 29 20 7b 0a 09 09 76 61 72 20 Data Ascii: if ( arr != null ) {if ( isArrayLike( Object( arr ) ) ) {jQuery.merge( ret,typeof arr === "string" ?[ arr ] : arr);} else {push.call( ret, arr );}}return ret;},inArray: function( elem, arr, i ) {var
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 75 73 68 28 20 65 6c 65 6d 73 5b 20 69 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 6d 61 74 63 68 65 73 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 61 72 67 20 69 73 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 61 67 65 20 6f 6e 6c 79 0a 09 6d 61 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 61 72 67 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 76 61 6c 75 65 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 72 65 74 20 3d 20 5b 5d 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 74 72 61 6e 73 6c 61 74 69 6e 67 20 65 61 63 68 20 6f 66 20 74 68 65 20 69 74 65 6d 73 20 74 6f 20 74 68 65 69 72 20 6e 65 77 20 76 61 6c 75 65 73 0a 09 09 69 66 20 Data Ascii: ush( elems[ i ] );}}return matches;},// arg is for internal usage onlymap: function( elems, callback, arg ) {var length, value,i = 0,ret = [];// Go through the array, translating each of the items to their new valuesif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:22 UTC	790	OUT	GET /assets/application-f529098319cbda4e1be1ecbe02bb2e4d0d8692cd437d91302e0b9ae42f8ca4af.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:22 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1722227575&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=qa%2BNze05hz7nd4IUF0V5i9mnycMYQuElPh%2BRzRS%2FK%2Bk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1722227575&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=qa%2BNze05hz7nd4IUF0V5i9mnycMYQuElPh%2BRzRS%2FK%2Bk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Fri, 19 Jul 2024 03:54:52 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 6394 Server: cloudflare CF-RAY: 8db049240dee469c-DFW
2024-10-31 02:41:22 UTC	440	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 36 2e 30 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 69 6e 70 75 74 74 79 70 65 73 20 21 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 61 2c 6c 2c 75 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 73 29 69 66 28 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 29 7b 69 66 28 65 3d 5b 5d 2c 74 3d 73 5b 63 5d 2c 74 2e 6e 61 6d 65 26 26 28 65 2e 70 75 73 68 28 74 Data Ascii: 7bff/! modernizr 3.6.0 (Custom Build) \| MIT * https://modernizr.com/download/?-inputtypes !*/!function(e,t,n){function o(e,t){return typeof e===t}function i(){var e,t,n,i,a,l,u;for(var c in s)if(s.hasOwnProperty(c)){if(e=[],t=s[c],t.name&&(e.push(t
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 2e 66 6e 28 29 3a 74 2e 66 6e 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6c 3d 65 5b 61 5d 2c 75 3d 6c 2e 73 70 6c 69 74 28 22 2e 22 29 2c 31 3d 3d 3d 75 2e 6c 65 6e 67 74 68 3f 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 3d 69 3a 28 21 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 7c 7c 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 69 6e 73 74 61 6e 63 65 6f 66 20 42 6f 6f 6c 65 61 6e 7c 7c 28 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 3d 6e 65 77 20 42 6f 6f 6c 65 61 6e 28 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 29 29 2c 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 5b 75 5b 31 5d 5d 3d 69 29 2c 72 2e 70 75 73 68 28 28 69 3f 22 22 3a 22 6e 6f 2d 22 29 2b 75 2e 6a 6f 69 6e 28 22 2d 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 Data Ascii: .fn():t.fn,a=0;a<e.length;a++)l=e[a],u=l.split("."),1===u.length?Modernizr[u[0]]=i:(!Modernizr[u[0]]\|\|Modernizr[u[0]]instanceof Boolean\|\|(Modernizr[u[0]]=new Boolean(Modernizr[u[0]])),Modernizr[u[0]][u[1]]=i),r.push((i?"":"no-")+u.join("-"))}}function a()
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 29 3a 2f 5e 28 73 65 61 72 63 68 7c 74 65 6c 29 24 2f 2e 74 65 73 74 28 6f 29 7c 7c 28 61 3d 2f 5e 28 75 72 6c 7c 65 6d 61 69 6c 29 24 2f 2e 74 65 73 74 28 6f 29 3f 66 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 26 26 66 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 28 29 3d 3d 3d 21 31 3a 66 2e 76 61 6c 75 65 21 3d 6c 29 29 2c 64 5b 65 5b 72 5d 5d 3d 21 21 61 3b 72 65 74 75 72 6e 20 64 7d 28 70 29 2c 69 28 29 2c 64 65 6c 65 74 65 20 6c 2e 61 64 64 54 65 73 74 2c 64 65 6c 65 74 65 20 6c 2e 61 64 64 41 73 79 6e 63 54 65 73 74 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 4d 6f 64 65 72 6e 69 7a 72 2e 5f 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 4d 6f 64 65 72 6e 69 7a 72 2e 5f 71 5b 6d 5d 28 29 3b 65 2e 4d 6f 64 65 72 6e 69 7a 72 3d 4d 6f 64 65 72 6e 69 7a 72 7d 28 Data Ascii: ):/^(search\|tel)$/.test(o)\|\|(a=/^(url\|email)$/.test(o)?f.checkValidity&&f.checkValidity()===!1:f.value!=l)),d[e[r]]=!!a;return d}(p),i(),delete l.addTest,delete l.addAsyncTest;for(var m=0;m<Modernizr._q.length;m++)Modernizr._q[m]();e.Modernizr=Modernizr}(
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 61 28 62 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 62 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 65 3d 63 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 65 7c 7c 63 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 65 3d 6e 65 77 20 64 28 74 68 69 73 29 29 2c 22 73 74 72 69 6e 67 22 3d Data Ascii: ,handle:function(b){if(a(b.target).is(this))return b.handleObj.handler.apply(this,arguments)}})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=c.data("bs.alert");e\|\|c.data("bs.alert",e=new d(this)),"string"=
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 33 2e 33 2e 37 22 2c 63 2e 44 45 46 41 55 4c 54 53 3d 7b 6c 6f 61 64 69 6e 67 54 65 78 74 3a 22 6c 6f 61 64 69 6e 67 2e 2e 2e 22 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 22 64 69 73 61 62 6c 65 64 22 2c 64 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 65 3d 64 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 22 76 61 6c 22 3a 22 68 74 6d 6c 22 2c 66 3d 64 2e 64 61 74 61 28 29 3b 62 2b 3d 22 54 65 78 74 22 2c 6e 75 6c 6c 3d 3d 66 2e 72 65 73 65 74 54 65 78 74 26 26 64 2e 64 61 74 61 28 22 72 65 73 65 74 54 65 78 74 22 2c 64 5b 65 5d 28 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 65 5d 28 6e 75 6c 6c 3d 3d 66 5b 62 5d 3f 74 68 Data Ascii: 3.3.7",c.DEFAULTS={loadingText:"loading..."},c.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",null==f.resetText&&d.data("resetText",d[e]()),setTimeout(a.proxy(function(){d[e](null==f[b]?th
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 3a 64 2e 66 69 6e 64 28 22 69 6e 70 75 74 3a 76 69 73 69 62 6c 65 2c 62 75 74 74 6f 6e 3a 76 69 73 69 62 6c 65 22 29 2e 66 69 72 73 74 28 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 29 7d 29 2e 6f 6e 28 22 66 6f 63 75 73 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 20 62 6c 75 72 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 28 62 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 66 6f 63 75 73 22 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 62 2e 74 79 70 65 29 29 7d 29 7d 28 Data Ascii: rigger("focus"):d.find("input:visible,button:visible").first().trigger("focus"))}).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',function(b){a(b.target).closest(".btn").toggleClass("focus",/^focus(in)?$/.test(b.type))})}(
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 28 62 29 7b 72 65 74 75 72 6e 20 62 7c 7c 28 74 68 69 73 2e 70 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 70 61 75 73 65 64 26 26 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6e 65 78 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 74 65 72 76 61 6c 29 29 2c 74 68 69 73 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 69 74 65 6d 73 3d 61 2e 70 61 72 65 Data Ascii: (b){return b\|\|(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},c.prototype.getItemIndex=function(a){return this.$items=a.pare
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 69 67 68 74 22 2c 69 3d 74 68 69 73 3b 69 66 28 66 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 3b 76 61 72 20 6a 3d 66 5b 30 5d 2c 6b 3d 61 2e 45 76 65 6e 74 28 22 73 6c 69 64 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6a 2c 64 69 72 65 63 74 69 6f 6e 3a 68 7d 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6b 29 2c 21 6b 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 69 66 28 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 30 2c 67 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 24 69 6e 64 69 Data Ascii: ight",i=this;if(f.hasClass("active"))return this.sliding=!1;var j=f[0],k=a.Event("slide.bs.carousel",{relatedTarget:j,direction:h});if(this.$element.trigger(k),!k.isDefaultPrevented()){if(this.sliding=!0,g&&this.pause(),this.$indicators.length){this.$indi
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 22 5b 64 61 74 61 2d 73 6c 69 64 65 5d 22 2c 65 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 63 61 72 6f 75 73 65 6c 2e 64 61 74 61 2d 61 70 69 22 2c 22 5b 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 5d 22 2c 65 29 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 72 69 64 65 3d 22 63 61 72 6f 75 73 65 6c 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 3b 62 2e 63 61 6c 6c 28 63 2c 63 2e 64 61 74 61 28 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 63 2c 64 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 Data Ascii: "[data-slide]",e).on("click.bs.carousel.data-api","[data-slide-to]",e),a(window).on("load",function(){a('[data-ride="carousel"]').each(function(){var c=a(this);b.call(c,c.data())})})}(jQuery),+function(a){"use strict";function b(b){var c,d=b.attr("data-ta
2024-10-31 02:41:22 UTC	1369	IN	Data Raw: 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 66 29 2c 21 66 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 65 26 26 65 2e 6c 65 6e 67 74 68 26 26 28 63 2e 63 61 6c 6c 28 65 2c 22 68 69 64 65 22 29 2c 62 7c 7c 65 2e 64 61 74 61 28 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 6e 75 6c 6c 29 29 3b 76 61 72 20 67 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 5b 67 5d 28 30 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 30 29 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 43 6c 61 Data Ascii: );if(this.$element.trigger(f),!f.isDefaultPrevented()){e&&e.length&&(c.call(e,"hide"),b\|\|e.data("bs.collapse",null));var g=this.dimension();this.$element.removeClass("collapse").addClass("collapsing")[g](0).attr("aria-expanded",!0),this.$trigger.removeCla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:22 UTC	739	OUT	GET /assets/main.d44653dd034d226877c0.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:23 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730112861&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=IOd0tChQ0luIKXRY4FIs7UJEBBvj%2FJ%2F74a2jatJLATc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730112861&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=IOd0tChQ0luIKXRY4FIs7UJEBBvj%2FJ%2F74a2jatJLATc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Thu, 17 Oct 2024 23:44:08 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 229622 Server: cloudflare CF-RAY: 8db04926dc75e983-DFW
2024-10-31 02:41:23 UTC	446	IN	Data Raw: 37 63 30 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 7b 38 32 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 57 6f 72 6b 65 72 28 6e 2e 70 2b 22 63 6c 75 73 74 65 72 69 6e 67 2d 67 71 6c 2e 77 6f 72 6b 65 72 2e 30 33 35 30 31 64 31 37 64 36 64 35 63 65 30 30 32 38 66 39 2e 77 6f 72 6b 65 72 2e 6a 73 22 29 7d 7d 2c 35 33 37 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 51 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 53 46 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 7c05!function(){var e,t,n,r={82987:function(e,t,n){e.exports=function(){return new Worker(n.p+"clustering-gql.worker.03501d17d6d5ce0028f9.worker.js")}},53756:function(e,t,n){"use strict";n.d(t,{Cp:function(){return d},Qv:function(){return g},SF:function
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 77 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 77 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 78 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 36 39 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 7b 74 79 70 65 3a 22 43 55 52 52 45 4e 54 5f 55 53 45 52 5f 46 45 54 43 48 22 2c 70 61 79 6c 6f 61 64 3a 69 28 29 28 22 2f 75 73 65 72 2f 63 75 72 72 65 6e 74 5f 75 73 65 72 22 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: (){return C},w2:function(){return c},wm:function(){return v},xE:function(){return o}});var r=n(9669),i=n.n(r);function a(){return function(e){return e({type:"CURRENT_USER_FETCH",payload:i()("/user/current_user")})}}function o(){return function(e){return e
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 52 45 4a 45 43 54 45 44 22 7d 7d 7d 2c 32 39 32 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 36 39 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 45 4e 51 55 49 52 59 5f 52 45 53 45 54 5f 50 52 49 43 45 53 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 7b 74 79 70 65 3a 22 45 4e 51 55 49 52 59 5f 46 45 54 43 48 5f 50 52 49 43 45 53 22 2c 70 61 79 6c 6f 61 64 Data Ascii: REJECTED"}}},29245:function(e,t,n){"use strict";n.d(t,{l:function(){return o},u:function(){return a}});var r=n(9669),i=n.n(r);function a(){return{type:"ENQUIRY_RESET_PRICES"}}function o(e,t){return function(n){return n({type:"ENQUIRY_FETCH_PRICES",payload
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 2c 6d 65 74 61 3a 7b 73 74 79 6c 65 3a 74 7d 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 3b 69 66 28 6e 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 6d 65 72 3b 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c 77 69 6e 64 6f 77 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 7b 74 79 70 65 3a 22 4e 4f 54 49 46 49 43 41 54 49 4f 4e 5f 43 4c 45 41 52 22 7d 29 7d 29 2c 6e 29 7d 72 65 74 75 72 6e 20 69 7d 7d 6e 2e 64 28 74 2c 7b 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 7d 2c 37 31 32 33 30 3a 66 75 6e 63 Data Ascii: ,meta:{style:t},payload:e});if(n){var a=window.notificationTimer;window.clearTimeout(a),window.notificationTimer=setTimeout((function(){return r({type:"NOTIFICATION_CLEAR"})}),n)}return i}}n.d(t,{h:function(){return r},i:function(){return i}})},71230:func
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 22 2c 6e 61 6d 65 3a 22 41 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 22 7d 2c 7b 69 64 3a 22 61 64 76 65 6e 74 75 72 65 73 22 2c 73 6c 75 67 3a 22 61 64 76 65 6e 74 75 72 65 73 22 2c 6e 61 6d 65 3a 22 41 64 76 65 6e 74 75 72 65 73 22 7d 2c 7b 69 64 3a 22 65 78 70 65 72 69 65 6e 63 65 73 22 2c 73 6c 75 67 3a 22 65 78 70 65 72 69 65 6e 63 65 73 22 2c 6e 61 6d 65 3a 22 45 78 70 65 72 69 65 6e 63 65 73 22 7d 2c 7b 69 64 3a 22 6d 6f 74 6f 72 56 65 68 69 63 6c 65 22 2c 73 6c 75 67 3a 22 6d 6f 74 6f 72 56 65 68 69 63 6c 65 22 2c 6e 61 6d 65 3a 22 56 65 68 69 63 6c 65 73 22 7d 5d 2c 77 3d 7b 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 3a 5b 5d 2c 65 78 70 65 72 69 65 6e 63 65 73 3a 5b 22 70 65 74 46 72 69 65 6e 64 6c 79 22 2c 22 61 6d Data Ascii: accommodation",name:"Accommodation"},{id:"adventures",slug:"adventures",name:"Adventures"},{id:"experiences",slug:"experiences",name:"Experiences"},{id:"motorVehicle",slug:"motorVehicle",name:"Vehicles"}],w={accommodation:[],experiences:["petFriendly","am
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 6e 75 6c 6c 2c 6e 2e 6e 65 3d 6e 75 6c 6c 2c 6e 2e 72 65 67 69 6f 6e 73 3d 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 3d 6e 75 6c 6c 2c 6e 2e 6f 72 69 67 69 6e 3d 6e 75 6c 6c 29 2c 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 61 3d 72 28 29 2e 72 6f 75 74 65 72 2c 6f 3d 28 30 2c 70 2e 5f 29 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 65 2e 73 74 61 72 74 44 61 74 65 26 26 65 2e 65 6e 64 44 61 74 65 26 26 28 6f 2e 77 65 65 6b 65 6e 64 4d 6f 6e 74 68 73 3d 6e 75 6c 6c 29 2c 65 2e 77 65 65 6b 65 6e 64 4d 6f 6e 74 68 73 26 26 28 6f 2e 73 74 61 72 74 44 61 74 65 3d 6e 75 6c 6c 2c 6f 2e 65 6e 64 44 61 74 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 62 28 62 28 Data Ascii: null,n.ne=null,n.regions=null,n.location=null,n.origin=null),n};function _(e,t){return function(n,r){var a=r().router,o=(0,p._)(a.location.search);e.startDate&&e.endDate&&(o.weekendMonths=null),e.weekendMonths&&(o.startDate=null,o.endDate=null);var l=b(b(
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 36 30 30 37 29 2c 6d 3d 6e 2e 6e 28 75 29 2c 70 3d 6e 28 31 34 31 37 36 29 2c 66 3d 6e 2e 6e 28 70 29 2c 68 3d 6e 28 31 34 32 39 33 29 2c 67 3d 6e 2e 6e 28 68 29 2c 43 3d 5b 22 73 74 61 72 74 5f 64 61 74 65 22 2c 22 65 6e 64 5f 64 61 74 65 22 2c 22 73 74 61 72 74 44 61 74 65 22 2c 22 65 6e 64 44 61 74 65 22 2c 22 61 64 75 6c 74 73 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 70 65 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 63 65 53 74 61 72 74 22 2c 22 70 72 69 63 65 45 6e 64 22 2c 22 62 65 64 72 6f 6f 6d 73 22 2c 22 62 65 64 73 22 2c 22 69 6e 73 74 61 6e 74 42 6f 6f 6b 22 2c 22 66 75 6c 6c 52 65 66 75 6e 64 22 2c 22 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 64 61 79 22 2c 22 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 65 6e 64 22 5d 3b 66 75 6e Data Ascii: 6007),m=n.n(u),p=n(14176),f=n.n(p),h=n(14293),g=n.n(h),C=["start_date","end_date","startDate","endDate","adults","children","petFriendly","priceStart","priceEnd","bedrooms","beds","instantBook","fullRefund","oneNightStayWeekday","oneNightStayWeekend"];fun
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 22 74 72 75 65 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 72 74 5f 64 61 74 65 2c 6e 3d 65 2e 65 6e 64 5f 64 61 74 65 2c 72 3d 65 2e 73 74 61 72 74 44 61 74 65 2c 61 3d 65 2e 65 6e 64 44 61 74 65 2c 6c 3d 65 2e 61 64 75 6c 74 73 2c 73 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 65 2e 70 65 74 46 72 69 65 6e 64 6c 79 2c 75 3d 65 2e 70 72 69 63 65 53 74 61 72 74 2c 6d 3d 65 2e 70 72 69 63 65 45 6e 64 2c 70 3d 65 2e 62 65 64 72 6f 6f 6d 73 2c 66 3d 65 2e 62 65 64 73 2c 68 3d 65 2e 69 6e 73 74 61 6e 74 42 6f 6f 6b 2c 67 3d 65 2e 66 75 6c 6c 52 65 66 75 6e 64 2c 76 3d 65 2e 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 64 61 79 2c 4c 3d 65 2e 6f 6e 65 4e 69 67 Data Ascii: "true"===e.toLowerCase()),t}function b(e){var t=e.start_date,n=e.end_date,r=e.startDate,a=e.endDate,l=e.adults,s=e.children,d=e.petFriendly,u=e.priceStart,m=e.priceEnd,p=e.bedrooms,f=e.beds,h=e.instantBook,g=e.fullRefund,v=e.oneNightStayWeekday,L=e.oneNig
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 3d 6e 28 33 37 37 39 37 29 2c 6c 3d 6e 28 35 35 32 36 39 29 2c 63 3d 6e 28 39 30 31 36 35 29 2c 73 3d 6e 28 35 33 37 35 36 29 2c 64 3d 6e 28 39 39 31 34 32 29 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 74 65 6d 49 64 2c 6e 3d 65 2e 69 74 65 6d 54 79 70 65 2c 75 3d 65 2e 62 6f 6f 6b 69 6e 67 41 64 76 65 6e 74 75 72 65 73 49 6e 64 65 78 2c 6d 3d 65 2e 62 75 63 6b 65 74 4c 69 73 74 49 74 65 6d 73 49 6e 64 65 78 2c 70 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 66 3d 65 2e 61 6e 61 6c 79 74 69 63 73 53 6f 75 72 63 65 2c 68 3d 28 30 2c 61 2e 5a 29 28 29 2c 67 3d 28 30 2c 6c 2e 5a 29 28 29 2c 43 3d 67 2e 63 75 72 72 65 6e 74 55 73 65 72 53 69 67 6e 65 64 49 6e 2c 76 3d 67 2e 6f 70 65 6e 4c 6f 67 69 6e 4d 6f 64 61 6c 2c 79 3d 28 30 2c Data Ascii: =n(37797),l=n(55269),c=n(90165),s=n(53756),d=n(99142);t.Z=function(e){var t=e.itemId,n=e.itemType,u=e.bookingAdventuresIndex,m=e.bucketListItemsIndex,p=e.children,f=e.analyticsSource,h=(0,a.Z)(),g=(0,l.Z)(),C=g.currentUserSignedIn,v=g.openLoginModal,y=(0,
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 69 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 2e 70 75 73 68 28 74 2e 70 61 79 6c 6f 61 64 2e 62 75 63 6b 65 74 4c 69 73 74 49 64 29 7d 2c 73 65 6c 65 63 74 45 73 63 61 70 65 43 6c 65 61 72 49 74 65 6d 41 64 64 65 64 54 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 74 65 6d 41 64 64 65 64 54 6f 3d 5b 5d 7d 2c 73 65 6c 65 63 74 45 73 63 61 70 65 43 6c 65 61 72 49 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 3d 5b 5d 7d 7d 7d 29 2c 69 3d 72 2e 61 63 74 69 6f 6e 73 2c 61 3d 69 2e 6f 70 65 6e 53 65 6c 65 63 74 45 73 63 61 70 65 2c 6f 3d 69 2e 63 6c 6f 73 65 53 65 6c 65 63 74 45 73 63 61 70 65 2c 6c 3d 69 2e 73 65 6c 65 63 Data Ascii: function(e,t){e.itemRemovedFrom.push(t.payload.bucketListId)},selectEscapeClearItemAddedTo:function(e){e.itemAddedTo=[]},selectEscapeClearItemRemovedFrom:function(e){e.itemRemovedFrom=[]}}}),i=r.actions,a=i.openSelectEscape,o=i.closeSelectEscape,l=i.selec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49747	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:22 UTC	742	OUT	GET /assets/vendors.d5a186ee975a655f6996.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:23 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1721169300&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=MN3LMm1UkJTFTUwDyW5X2AJ9oipv0C8BCdN3kRPrbLo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1721169300&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=MN3LMm1UkJTFTUwDyW5X2AJ9oipv0C8BCdN3kRPrbLo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Tue, 16 Jul 2024 05:19:20 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3948 Server: cloudflare CF-RAY: 8db04926eedca91e-DFW
2024-10-31 02:41:23 UTC	456	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 73 2e 64 35 61 31 38 36 65 65 39 37 35 61 36 35 35 66 36 39 39 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 72 69 70 61 72 69 64 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 72 69 70 61 72 69 64 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 36 5d 2c 7b 39 33 31 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 30 31 37 36 29 7d 2c 37 34 37 32 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 33 35 36 35 29 7d 2c 37 34 38 32 38 3a 66 75 Data Ascii: 7c0f/! For license information please see vendors.d5a186ee975a655f6996.js.LICENSE.txt /(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[216],{93133:function(e,t,n){e.exports=n(50176)},74720:function(e,t,n){e.exports=n(23565)},74828:fu
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 2c 37 37 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 31 39 32 32 29 7d 2c 37 35 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 32 39 37 34 29 7d 2c 34 36 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 39 34 38 38 29 7d 2c 38 39 31 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 65 2e 65 78 70 6f 72 74 73 7d Data Ascii: ,77219:function(e,t,n){e.exports=n(71922)},7544:function(e,t,n){e.exports=n(72974)},4626:function(e,t,n){e.exports=n(69488)},89186:function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports}
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 73 74 72 69 6e 67 69 66 79 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 39 34 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 35 36 35 33 36 29 2c 6e 28 37 39 31 36 39 29 2c 6e 28 38 39 39 37 32 29 2c 6e 28 39 39 32 32 38 29 2c 6e 28 39 30 34 30 31 29 2c 6e 28 32 38 38 37 38 29 2c 6e 28 33 33 30 31 32 29 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 33 30 39 33 29 2e 4d 61 70 7d 2c 36 38 32 30 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 38 32 34 36 34 29 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 33 30 39 33 29 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 38 32 36 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: );e.exports=function(e){return i.stringify.apply(i,arguments)}},94175:function(e,t,n){n(56536),n(79169),n(89972),n(99228),n(90401),n(28878),n(33012),e.exports=n(63093).Map},68207:function(e,t,n){n(82464),e.exports=n(63093).Object.assign},82624:function(e,
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 61 29 7b 76 61 72 20 73 2c 75 3d 72 28 74 29 2c 6c 3d 69 28 75 2e 6c 65 6e 67 74 68 29 2c 63 3d 6f 28 61 2c 6c 29 3b 69 66 28 65 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 6c 3e 63 3b 29 69 66 28 28 73 3d 75 5b 63 2b 2b 5d 29 21 3d 73 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 6c 3e 63 3b 63 2b 2b 29 69 66 28 28 65 7c 7c 63 20 69 6e 20 75 29 26 26 75 5b 63 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 65 7c 7c 63 7c 7c 30 3b 72 65 74 75 72 6e 21 65 26 26 2d 31 7d 7d 7d 2c 31 38 34 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 31 31 33 33 29 2c 69 3d 6e 28 36 35 34 37 34 29 2c 6f 3d 6e 28 35 34 39 32 32 29 2c 61 Data Ascii: s=function(e){return function(t,n,a){var s,u=r(t),l=i(u.length),c=o(a,l);if(e&&n!=n){for(;l>c;)if((s=u[c++])!=s)return!0}else for(;l>c;c++)if((e\|\|c in u)&&u[c]===n)return e\|\|c\|\|0;return!e&&-1}}},18485:function(e,t,n){var r=n(31133),i=n(65474),o=n(54922),a
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 7d 2c 32 31 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 36 30 30 37 29 2e 66 2c 69 3d 6e 28 36 39 32 37 30 29 2c 6f 3d 6e 28 35 36 31 29 2c 61 3d 6e 28 33 31 31 33 33 29 2c 73 3d 6e 28 38 30 30 33 29 2c 75 3d 6e 28 32 36 35 31 30 29 2c 6c 3d 6e 28 36 30 33 35 34 29 2c 63 3d 6e 28 38 35 34 39 30 29 2c 64 3d 6e 28 37 31 38 33 29 2c 66 3d 6e 28 39 37 33 30 35 29 2c 68 3d 6e 28 35 37 30 31 30 29 2e 66 61 73 74 4b 65 79 2c 70 3d 6e 28 31 30 30 36 39 29 2c 67 3d 66 3f 22 5f 73 22 3a 22 73 69 7a 65 22 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 68 28 74 29 3b 69 66 28 22 46 Data Ascii: urn t.call(e).slice(8,-1)}},21706:function(e,t,n){"use strict";var r=n(56007).f,i=n(69270),o=n(561),a=n(31133),s=n(8003),u=n(26510),l=n(60354),c=n(85490),d=n(7183),f=n(97305),h=n(57010).fastKey,p=n(10069),g=f?"_s":"size",v=function(e,t){var n,r=h(t);if("F
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 28 65 2e 5f 6c 3d 6e 3d 6e 3f 6e 2e 6e 3a 65 2e 5f 74 2e 5f 66 29 3f 63 28 30 2c 22 6b 65 79 73 22 3d 3d 74 3f 6e 2e 6b 3a 22 76 61 6c 75 65 73 22 3d 3d 74 3f 6e 2e 76 3a 5b 6e 2e 6b 2c 6e 2e 76 5d 29 3a 28 65 2e 5f 74 3d 76 6f 69 64 20 30 2c 63 28 31 29 29 7d 29 2c 6e 3f 22 65 6e 74 72 69 65 73 22 3a 22 76 61 6c 75 65 73 22 2c 21 6e 2c 21 30 29 2c 64 28 74 29 7d 7d 7d 2c 38 30 35 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 35 31 35 38 29 2c 69 3d 6e 28 35 31 37 30 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 28 74 68 69 73 29 21 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 65 2b 22 23 74 6f 4a 53 4f 4e 20 69 Data Ascii: (e._l=n=n?n.n:e._t._f)?c(0,"keys"==t?n.k:"values"==t?n.v:[n.k,n.v]):(e._t=void 0,c(1))}),n?"entries":"values",!n,!0),d(t)}}},80540:function(e,t,n){var r=n(85158),i=n(51705);e.exports=function(e){return function(){if(r(this)!=e)throw TypeError(e+"#toJSON i
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 37 30 31 30 29 2c 61 3d 6e 28 38 34 39 33 30 29 2c 73 3d 6e 28 34 34 33 37 39 29 2c 75 3d 6e 28 35 36 31 29 2c 6c 3d 6e 28 32 36 35 31 30 29 2c 63 3d 6e 28 38 30 30 33 29 2c 64 3d 6e 28 34 34 34 32 35 29 2c 66 3d 6e 28 38 31 38 32 29 2c 68 3d 6e 28 35 36 30 30 37 29 2e 66 2c 70 3d 6e 28 31 38 34 38 35 29 28 30 29 2c 67 3d 6e 28 39 37 33 30 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 76 2c 6d 2c 79 29 7b 76 61 72 20 62 3d 72 5b 65 5d 2c 77 3d 62 2c 45 3d 6d 3f 22 73 65 74 22 3a 22 61 64 64 22 2c 78 3d 77 26 26 77 2e 70 72 6f 74 6f 74 79 70 65 2c 5f 3d 7b 7d 3b 72 65 74 75 72 6e 20 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 26 26 28 79 7c 7c 78 2e 66 6f 72 45 61 63 68 26 26 21 61 28 28 66 75 Data Ascii: 7010),a=n(84930),s=n(44379),u=n(561),l=n(26510),c=n(8003),d=n(44425),f=n(8182),h=n(56007).f,p=n(18485)(0),g=n(97305);e.exports=function(e,t,n,v,m,y){var b=r[e],w=b,E=m?"set":"add",x=w&&w.prototype,_={};return g&&"function"==typeof w&&(y\|\|x.forEach&&!a((fu
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 33 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 21 6e 28 38 34 39 33 30 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 33 32 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 34 34 32 35 29 2c 69 3d 6e 28 33 32 32 30 29 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 72 28 69 29 26 26 72 28 69 2e 63 72 Data Ascii: ==e)throw TypeError("Can't call method on "+e);return e}},97305:function(e,t,n){e.exports=!n(84930)((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a}))},3299:function(e,t,n){var r=n(44425),i=n(3220).document,o=r(i)&&r(i.cr
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 6c 2e 55 3d 36 34 2c 6c 2e 52 3d 31 32 38 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 38 34 39 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 32 36 35 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 31 31 33 33 29 2c 69 3d 6e 28 31 32 34 34 31 29 2c 6f 3d 6e 28 39 32 35 36 36 29 2c 61 3d 6e 28 34 39 32 32 36 29 2c 73 3d 6e 28 34 35 33 32 31 29 2c 75 3d 6e 28 32 35 38 31 36 29 2c 6c 3d 7b 7d 2c 63 3d 7b 7d 2c 64 3d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 64 2c 66 29 7b 76 61 72 20 68 2c 70 2c 67 2c 76 2c 6d 3d 66 3f Data Ascii: l.U=64,l.R=128,e.exports=l},84930:function(e){e.exports=function(e){try{return!!e()}catch(t){return!0}}},26510:function(e,t,n){var r=n(31133),i=n(12441),o=n(92566),a=n(49226),s=n(45321),u=n(25816),l={},c={},d=e.exports=function(e,t,n,d,f){var h,p,g,v,m=f?
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 34 35 30 32 29 2c 69 3d 6e 28 32 33 30 33 32 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 26 26 28 72 2e 41 72 72 61 79 3d 3d 3d 65 7c 7c 6f 5b 69 5d 3d 3d 3d 65 29 7d 7d 2c 33 35 37 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 37 34 38 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 72 28 65 29 7d 7d 2c 34 34 34 32 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 Data Ascii: ,t,n){var r=n(64502),i=n(23032)("iterator"),o=Array.prototype;e.exports=function(e){return void 0!==e&&(r.Array===e\|\|o[i]===e)}},35730:function(e,t,n){var r=n(47489);e.exports=Array.isArray\|\|function(e){return"Array"==r(e)}},44425:function(e){e.exports=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	104.17.24.14	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:23 UTC	381	OUT	GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:23 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-17b8b" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 89000 Expires: Tue, 21 Oct 2025 02:41:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HCo3%2FJt76H5QN%2Bhehy40TofEcl0oCcudJgLq0VzEHftgefdKfyWhSdZyE1PON7VSljbTbVhbtpISOrvzm9hFqtVQMwn%2FfkBu5RXPFJBjlR5qNxuGRZUC1ned%2Bjx5MypqVFK9VSS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8db04927c9b3e81f-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 02:41:23 UTC	409	IN	Data Raw: 37 62 65 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 Data Ascii: 7be8/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 69 2e 74 6f 53 74 72 69 6e 67 2c 6b 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6c 3d 7b 7d 2c 6d 3d 22 31 2e 31 32 2e 34 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a Data Ascii: i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c Data Ascii: return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray\|\|function(a){return"array"===n.type(a)},
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 67 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 69 66 28 62 29 7b 69 66 28 68 29 72 65 74 75 72 6e 20 68 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 3b 66 6f 72 28 64 3d 62 2e 6c 65 6e 67 74 68 2c 63 3d 63 3f 30 3e 63 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 64 2b 63 29 3a 63 3a 30 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 62 26 26 62 5b 63 5d 3d 3d 3d 61 29 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 2d 31 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 Data Ascii: =a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(h)return h.call(b,a,c);for(d=b.length,c=c?0>c?Math.max(0,d+c):c:0;d>c;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.leng
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 31 3c 3c 33 31 2c 44 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 45 3d 5b 5d 2c 46 3d 45 2e 70 6f 70 2c 47 3d 45 2e 70 75 73 68 2c 48 3d 45 2e 70 75 73 68 2c 49 3d 45 2e 73 6c 69 63 65 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 Data Ascii: ,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===b&&(l=!0),0},C=1<<31,D={}.hasOwnProperty,E=[],F=E.pop,G=E.push,H=E.push,I=E.slice,J=function(a,b){for(var c=0,d=a.length;d>c;c++)if(a[c]===b)return c;return-1},K="checked\|selected\|async\|autofocus\|au
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 5f 3d 2f 5b 2b 7e 5d 2f 2c 61 61 3d 2f 27 7c 5c 5c 2f 67 2c 62 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4c 2b 22 3f 7c 28 22 2b 4c 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 Data Ascii: extarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,_=/[+~]/,aa=/'\|\\/g,ba=new RegExp("\\\\([\\da-f]{1,6}"+L+"?\|("+L+")\|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+6
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 2c 64 7d 63 61 74 63 68 28 79 29 7b 7d 66 69 6e 61 6c 6c 79 7b 6b 3d 3d 3d 75 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 Data Ascii: test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s)),d}catch(y){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(Q,"$1"),b,d,e)}function ga(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shif
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 64 61 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 64 61 29 29 2c 63 2e 61 74 74 72 69 62 75 74 65 73 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 Data Ascii: ocumentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventListener("unload",da,!1):e.attachEvent&&e.attachEvent("onunload",da)),c.attributes=ia(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagNa
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 75 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 Data Ascii: sa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-\r\\' msallowcapture=''><option selected=''></option></select>",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"
2024-10-31 02:41:23 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c Data Ascii: ction(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 02:41:24 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=223458 Date: Thu, 31 Oct 2024 02:41:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	814	OUT	GET /assets/webpack-assets/GT-Walsheim-Pro-Light.39e23e8dcc12250f70551b8baf74b7cb.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:24 UTC	916	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:24 GMT Content-Type: application/font-woff Content-Length: 65128 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729711724&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=mK%2BPfKiwgWF%2FVOASFoFupcF2CaCY2EEMF9zjXBljVxQ%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729711724&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=mK%2BPfKiwgWF%2FVOASFoFupcF2CaCY2EEMF9zjXBljVxQ%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:10:38 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 630760 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0492f8ed66c20-DFW
2024-10-31 02:41:24 UTC	453	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 fe 68 00 0c 00 00 00 02 0b 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 28 00 00 b5 89 00 01 65 b0 2d 3f ef ad 47 44 45 46 00 00 c4 b4 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 c5 a8 00 00 2c 75 00 00 6d f8 e6 e0 d5 9a 47 53 55 42 00 00 f2 20 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 a8 00 00 00 4f 00 00 00 60 69 fb 80 60 63 6d 61 70 00 00 09 f8 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 72 48 05 68 68 65 61 00 00 07 88 00 00 00 20 00 00 00 24 05 f2 06 92 68 6d 74 78 00 00 01 58 00 00 06 2e 00 00 0f 20 fd 6e a2 d6 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 07 f8 00 00 01 Data Ascii: wOFFOTTOh0CFF (e-?GDEFdz\|GPOS,umGSUB F.#OS/2O`i`cmap/9"head$36rHhhea $hmtxX. nmaxpPname
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: d4 df 8a 6d a5 7d 38 da fb f0 df 5e e5 68 5f e9 9f a6 61 bf 43 49 f2 79 2d f3 87 f8 2e 9b de ee 7b b0 8c 53 49 92 57 73 c0 ea 35 84 58 6a b1 d8 e8 d3 e2 fb 7b e0 17 e2 af 84 b9 e4 e3 7c 36 43 03 34 81 83 7e 68 65 8c 62 b0 ba 32 2d 61 5b 2a e6 dc 0b d8 c8 35 c4 c8 fc 6b b0 3c 54 f1 80 68 6b 89 f9 8a 58 de 6a b0 3c 56 12 f2 6c 79 fd 07 08 79 af c4 f2 5f 09 6b b1 c8 82 72 70 c8 d7 05 0b 09 63 17 99 3b 65 da 8f ea 1c f5 e8 fc f4 7c 77 85 0e 51 3e 94 0c e2 db 05 1d f1 3b fc dc 83 75 c8 7d 0b 7b 2f 65 68 9b 75 a7 32 e6 49 aa 77 27 d1 4f 81 fa 57 c8 17 7e 95 24 8f d7 ce 80 d5 6b a9 fb 0b fc 18 a6 21 f9 07 a8 ed af 47 2d b0 8a f8 b7 01 36 3d 09 d2 30 1f ec d5 ee c7 ea a1 bc 86 f2 8d d8 a6 30 df f2 9c e3 bc 33 ee 41 66 fb dd 11 b3 2b 2c 07 63 5a 63 b6 12 f2 52 49 Data Ascii: m}8^h_aCIy-.{SIWs5Xj{\|6C4~heb2-a[*5k<ThkXj<Vlyy_krpc;e\|wQ>;u}{/ehu2Iw'OW~$k!G-6=003Af+,cZcRI
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 8f ed 65 3d e7 fb 67 47 5e 11 ed 63 22 cf 8d 3c bb 82 47 9b fd d7 be 59 c3 9d b1 de 6f 23 ce df a8 3e d8 da fa e2 fe 6f 55 3b fb 28 f1 cb 28 f3 7e 0b ef ba 00 7b e4 65 ee 95 9a 34 5e a1 c1 7f a4 2c 95 5e 22 a5 f7 c7 fe 11 9b c1 3e 1b 3e 10 79 0c 5c 0f 2f 83 a7 c1 2a 7c 1e 05 7b 60 9d 5b ae 89 3f 01 fa d8 b9 50 00 00 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 52 fe 8f f3 bf 3b 4b 12 50 04 05 30 9f 00 00 78 9c 05 8d 78 01 63 60 66 52 65 d4 61 60 65 e0 60 ea 62 8a 60 60 60 f0 86 d0 8c 71 0c 46 8c 82 0c 40 c0 c2 00 03 4c ec 0c 48 20 d4 3b dc 8f c1 81 81 f7 37 13 d3 df ff a2 0c 13 99 5b 18 be 2a 30 30 4c 07 c9 31 1e 67 da 03 a4 14 18 98 01 c9 80 0c 3b 00 78 01 4c ca 25 40 43 61 00 45 e1 f3 1b ee ee 0d 6d 48 c3 b5 57 32 ee 92 78 8d 6d 3d bc de 7b 5a 2f 73 49 8b 8b Data Ascii: e=gG^c"<GYo#>oU;((~{e4^,^">>y\/\|{`[?Pxc`d``nR;KP0xxc`fRea`e`b```qF@LH ;7[00L1g;xL%@CaEmHW2xm={Z/sI
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e 32 84 6f f4 e7 23 c3 f8 c1 60 be 32 94 ef Data Ascii: 5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~2o#`2
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: bf 18 19 19 63 62 02 4c 8e e9 30 2f 16 c1 ca 58 0b 1b 62 07 ec 8e fd 70 28 8e c1 c9 38 0b 17 e2 0a 5c 8f db 70 2f 1e c1 d3 78 09 6f e2 03 7c 8e ef f0 2b 86 e0 1f 8a 44 44 31 28 3e 25 a3 b4 94 85 72 53 21 2a 49 15 a8 3a d5 a3 a6 d4 86 3a 53 2f 1a 48 23 68 3c 4d a3 b9 b4 84 56 d3 26 da 49 07 e8 38 9d a3 ab 74 87 1e d3 2b fa 48 01 f4 83 c3 71 54 56 8e cd 89 38 25 67 e0 ec 9c 8f 8b 72 19 ae cc b5 b8 21 b7 e0 f6 dc 8d fb f2 10 1e cd 93 78 26 2f e0 e5 bc 8e b7 f2 1e 3e cc a7 f8 22 df e0 fb fc 8c df f2 17 0e e6 df 12 51 50 a2 4b 3c 49 2a 69 24 b3 e4 92 82 52 42 ca 4b 35 a9 2b 4d a4 b5 f4 92 91 32 43 96 cb 36 39 2a 57 e4 b1 7c 92 5f 8a 1a 5f d3 69 5e 2d a3 b5 b5 b9 76 d6 fe 3a 5a a7 eb 62 5d af bb f5 90 9e d4 0b 7a 5d ef e9 53 7d a3 9f 35 48 7f 59 44 63 8b 65 49 Data Ascii: cbL0/Xbp(8\p/xo\|+DD1(>%rS!I::S/H#h<MV&I8t+HqTV8%gr!x&/>"QPK<Ii$RBK5+M2C69*W\|__i^-v:Zb]z]S}5HYDceI
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: e5 0e 7e cd 5c f0 50 71 76 3c 97 99 a5 01 63 ef 37 40 7e c6 08 4b 04 6a 20 01 1b 60 07 54 c0 16 78 0f bc 03 6a e0 16 68 80 16 d8 03 ff 02 1d d0 03 03 70 07 8c c0 3d f0 00 3c fd a3 9a be 91 23 cb 81 20 80 de 68 03 5a 98 1f e2 8f bf 57 18 73 d4 fd ad 15 fd 2c 5a 2f 32 ab 51 00 9b a4 47 99 fe f7 95 96 18 10 91 91 3e 04 69 06 65 45 31 8b 52 c3 40 c7 fc 30 1e 09 71 39 b7 25 c4 83 17 f7 43 0a 88 48 c8 8e 5f a9 a2 a3 a0 61 60 3a f0 4a 1b 0f 96 d9 c4 83 8a 02 cb d2 91 3a 06 96 d9 c5 ab f4 ce 86 5e 20 cd 84 82 86 81 07 1b 76 3e 01 09 e5 7f 6a 2a 52 c3 c6 c0 85 65 2b 20 a1 a0 61 e0 b1 53 b9 83 72 e3 2a 2b 22 3a 32 26 ce 87 13 90 94 4b 2a 68 18 f0 c0 1b 90 94 1b 57 59 30 d0 f0 60 c3 27 df 80 84 86 82 fd 3f 35 06 24 e5 90 6c 19 88 e5 af 9f 7f be ff 5c df fe d6 5e ed Data Ascii: ~\Pqv<c7@~Kj `Txjhp=<# hZWs,Z/2QG>ieE1R@0q9%CH_a`:J:^ v>jRe+ aSr+":2&K*hWY0`'?5$l\^
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 66 d4 f7 89 6f 46 ad d0 8f ac cc 4f fa 89 d5 fa 39 6b ea d7 ac d3 98 41 eb 35 21 1b 6a 12 9b 34 39 d3 35 4d 53 35 7d d0 66 cd 66 4b cd 61 9b e6 0e b5 58 8b b4 64 c0 2f 5a 3e 60 bb 56 b1 43 ab d9 99 df d8 ad b5 5a c3 af 5a c7 1e ad af 4d da c8 5e 6d d1 66 6d 1d 32 8b 7d da c5 fe 81 76 8f 74 58 87 38 a4 23 fc ef a3 3a ce 11 1d e3 db 51 ff f7 04 c7 32 56 27 39 a1 53 39 59 67 72 5a e7 06 9d d1 a5 9c ad 2b 9c d7 d5 a1 6e eb 96 ee 70 41 77 b9 98 71 5c d6 7d dd d3 83 7a ac 47 7a aa 27 7a 36 68 bc 5e e9 8d 5e eb 2d 57 f4 9e ab 7a c7 b5 4c e4 86 3e e4 67 c6 30 41 5f b8 a9 4f f5 35 b7 f4 a7 fe d0 df fa eb 3f 8a e0 01 8c 12 ec 0a c2 e0 7f bb cf d3 d8 b6 6d db b6 6d db b6 6d db fc 34 b1 6d db c6 da 4c 36 4e 15 e9 df e2 0e fc 0e 25 f8 bd fe 2f 87 32 49 79 f1 27 54 14 Data Ascii: foFO9kA5!j495MS5}ffKaXd/Z>`VCZZM^mfm2}vtX8#:Q2V'9S9YgrZ+npAwq\}zGz'z6h^^-WzL>g0A_O5?mmm4mL6N%/2Iy'T
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 55 1b d7 f9 b8 d9 e1 b6 03 77 79 dc 8b 71 ff 88 47 2c 1e 9b f1 4c c5 73 1f 5e c6 78 2d c0 7b 20 de e5 78 ff c0 a7 10 9f f3 f8 da e3 bb 15 bf 64 fc 5e e0 bf 94 00 5f 02 a6 10 70 93 c0 7e 04 06 11 58 4e e0 2e 02 cf 12 f8 89 a0 62 82 26 11 f4 86 60 1f 82 bb 08 de 4a 88 32 21 fe 84 48 09 39 46 a8 02 a1 01 84 96 10 ba 93 30 7f c2 66 10 f6 83 f0 32 c2 8f 13 a1 41 44 13 11 17 89 0c 23 f2 0a 51 26 44 f5 12 75 81 68 55 a2 e3 88 be 40 8c 98 98 eb c4 9a 11 db 42 ec 13 e2 b2 89 eb 23 7e 1c 09 83 48 98 47 c2 7d 12 ab 48 7c 46 52 2a 49 ab 48 fa 44 72 12 c9 eb 48 d1 21 a5 88 94 e3 a4 2a 91 da 4e ea 3f d2 6a 49 3b 43 ba 39 e9 4b 48 ff 44 46 3e 19 77 c9 ac 23 f3 19 59 3a 64 25 93 35 95 ac bf 64 57 92 3d 8e ec 15 64 1f 46 30 00 81 09 02 01 82 4a 04 0b 11 5c 46 f0 0b a1 2e Data Ascii: UwyqG,Ls^x-{ xd^_p~XN.b&`J2!H9F0f2AD#Q&DuhU@B#~HG}H\|FRIHDrH!N?jI;C9KHDF>w#Y:d%5dW=dF0J\F.
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 45 cb 6d 5a 54 68 a9 a5 f5 2c ad df 69 4d a5 6d 05 6d 87 68 8b a0 7d 0e ed 8a b4 47 d1 5e 46 c7 46 3a b4 e8 f0 a7 73 04 9d 97 e9 7c 4d 67 a5 c0 6a 81 a7 02 d2 02 39 82 b0 45 10 9e 0a 82 9f d0 13 9b b9 82 88 a6 20 52 2a f4 08 78 9f 20 aa 23 88 89 0a 62 0b 04 b1 0f 82 58 94 20 56 26 88 5f 16 c4 cd 05 f1 22 41 42 5c 90 38 23 48 b8 09 12 15 82 e4 66 a1 8b 20 78 80 91 a3 01 00 30 9a 2f 38 0f 0f 6b 8e 71 bb b3 b5 19 d5 8c ea b0 b6 11 d4 6e 54 db b6 8d bf 46 54 db 88 59 f3 7f af 78 31 c5 bb 28 49 52 32 98 d2 12 4a 9f 52 56 49 d9 54 ca 0e 52 1e a1 bc 31 e5 b3 29 3f 4f 85 49 45 4b 2a a6 52 71 14 a1 0c a1 1f c2 34 84 b5 08 8f 10 25 44 1d b1 11 62 27 c4 7e 88 63 11 67 23 9e 45 fc 82 14 42 6a 82 b4 10 e9 14 d2 27 64 15 b9 0d f2 48 e4 0d c8 77 90 7f a3 38 28 3e 4a 0e Data Ascii: EmZTh,iMmmh}G^FF:s\|Mgj9E Rx #bX V&_"AB\8#Hf x0/8kqnTFTYx1(IR2JRVITR1)?OIEKRq4%Db'~cg#EBj'dHw8(>J
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: bf c8 b9 3c 9d 83 1d b9 44 fe 82 4b 76 b4 92 6c d8 15 a0 73 08 34 12 89 7f a1 95 71 c1 1a 5d 8d 40 c5 be 3c c8 cd b3 84 d5 c8 f4 2a 77 1f 40 5d 41 9c 66 a7 9f c6 10 85 43 9f c6 4d 7a 6b 40 c1 db d1 a4 ee af 6d a0 32 af 7c 68 02 22 6a 75 0e 5c 0b 9a 5c 27 0f 28 78 60 57 e0 90 07 0f 18 b8 86 bf 3d a0 c9 1f f0 86 52 6e 0d d5 ea 2a 18 11 8a d6 5a 72 56 57 01 91 c2 c5 d0 a7 dd 24 20 d6 77 72 c5 8d b9 6c d0 1d 9b 5c 31 8b 86 99 fa 2c 2a 0d 3f c4 74 4a 9f 9e ab 73 e8 cb b0 09 64 83 fe 15 d9 20 be a2 fa 62 bf 0e 46 d4 b9 50 a0 b5 94 3a dd a5 e1 ad fe 2e 75 41 e7 60 af bf 4b 93 77 e2 5d aa 3b b6 3b 55 28 47 e2 15 14 a5 5a 38 2a 7f 50 41 17 70 01 17 82 9f b2 71 50 91 2e c4 85 b8 00 7e a2 98 68 ac 88 7d 35 a8 01 ad a1 f5 3b fc b0 07 fb 77 a4 06 0a 52 eb 6a f8 61 2f Data Ascii: <DKvls4q]@<w@]AfCMzk@m2\|h"ju\\'(x`W=RnZrVW$ wrl\1,?tJsd bFP:.uA`Kw];;U(GZ8PApqP.~h}5;wRja/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	815	OUT	GET /assets/webpack-assets/GT-Walsheim-Pro-Medium.5cbbabeb76691ce0046c07b2c6665315.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:24 UTC	1099	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:24 GMT Content-Type: application/font-woff Content-Length: 62624 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1728948339&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=6tbMz2NlEWh9CD2cPTDhZl1P7d7hDY%2Bh5ys3qyT9g7c%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1728948339&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=6tbMz2NlEWh9CD2cPTDhZl1P7d7hDY%2Bh5ys3qyT9g7c%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:10:38 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3949 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0492f88471449-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1283&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1393&delivery_rate=2210687&cwnd=249&unsent_bytes=0&cid=0f406a3297d51aa9&ts=166&x=0"
2024-10-31 02:41:24 UTC	270	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 f4 a0 00 0c 00 00 00 02 0a 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 10 00 00 ae 31 00 01 69 cd 88 db c8 a9 47 44 45 46 00 00 bd 44 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 be 38 00 00 2a 1d 00 00 68 d0 a9 0a 20 ae 47 53 55 42 00 00 e8 58 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 84 00 00 00 50 00 00 00 60 6a c9 82 76 63 6d 61 70 00 00 09 e0 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 7c 48 18 68 68 65 61 00 00 07 64 00 00 00 20 00 00 00 24 05 fc 06 ac 68 6d 74 78 00 00 01 58 00 00 06 09 00 00 0f 20 25 10 89 0e 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 07 d4 00 00 02 Data Ascii: wOFFOTTO4CFF 1iGDEFDdz\|GPOS8*h GSUBXF.#OS/2P`jvcmap/9"head$36\|Hhhead $hmtxX %maxpPname
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 0e fc 00 00 00 13 00 00 00 20 ff b8 00 32 00 00 50 00 03 c8 00 00 78 01 63 60 64 60 60 60 61 60 38 a9 53 7e 2e 9e df e6 2b 03 33 f3 0b 06 20 b8 5e d6 e4 06 a3 ff 7e f9 af c8 d2 c8 dc 0d e4 32 33 30 81 44 01 6d f3 0d 20 00 78 01 c5 96 03 94 6c b9 16 86 77 ce e9 ba d3 97 ad ea 6a eb b2 6d db aa b1 6d db b6 6d 7b 9e 97 9e fd 16 9f 6d db 18 5b 8d 33 df 4e a5 ea 9e aa 31 5f ad f5 ad 1d ec ec 24 3b a9 f3 c7 af 96 8d f2 b2 24 7e 58 6f 1f c9 f1 e6 24 ee 47 64 83 f7 25 89 7b d5 90 47 7d 8c fa 7d 12 37 2b a9 17 4b d4 db 9f 72 40 7b 1b f5 9b b1 a5 f4 cf 38 7b 20 6d b5 52 e9 45 25 e2 5d 28 83 de b0 88 ff 23 62 1f 49 ec b6 e0 29 6f 8a f1 cc 13 c6 3f 40 56 29 5a ce 44 d7 92 89 5d db 97 82 25 5d df 9b 82 9f ae 3f 0c 7b a9 75 fb 89 c1 0a c8 35 2b 83 27 b1 bd 50 e9 d7 d8 Data Ascii: 2Pxc`d```a`8S~.+3 ^~230Dm xlwjmmm{m[3N1_$;$~Xo$Gd%{G}}7+Kr@{8{ mRE%](#bI)o?@V)ZD]%]?{u5+'P
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: ff 97 9f df 80 2e de 88 4f 4d e2 5d e0 de 00 51 33 2a 71 98 4a 5a f6 72 64 52 df 53 3a e5 74 9e be 4f 29 e6 32 ee c0 ee f6 db d9 ae 3a 4f db 29 20 29 2d 4b be 1d d0 7e fb 06 f0 a5 0d f2 5f cf fa ff 15 e1 de 88 bc 0c 71 67 af a0 6d 3b 11 fd b6 2b e6 39 e6 3c 90 7a 8c 39 5d 9b 7d 43 44 69 47 67 ec 3b 82 b7 43 9a 9f d0 9f 78 47 ec a6 84 de 12 9d 30 ea d8 0b 0a 61 7b d7 37 e0 c8 83 26 1d 6f df 25 ad 69 71 5a 33 c6 ed 6a f5 7d 97 c4 fb f3 d5 3a 9e a1 e5 ae 3f a9 e7 8c 3f dd 71 b6 b3 c7 3a ce 72 9c 1e e2 18 b5 ef 70 4c b6 79 94 fc cc c3 4f 65 95 da cc 7a ea fe 57 73 7f 3e 2d e2 65 51 e6 fd a6 ef 3a 85 3b 72 ba b9 55 7a 1d 9d 6f a5 2c b2 7c 84 48 d0 83 bd 0f fe 0e bd 70 be e3 60 78 0e ce 82 cb 45 96 9e c5 77 5f 28 82 55 26 57 06 5f 01 22 c3 96 5b 00 00 00 78 01 Data Ascii: .OM]Q3*qJZrdRS:tO)2:O) )-K~_qgm;+9<z9]}CDiGg;CxG0a{7&o%iqZ3j}:??q:rpLyOezWs>-eQ:;rUzo,\|Hp`xEw_(U&W_"[x
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 89 07 73 8b fc 86 83 17 a1 40 0a a6 48 92 a5 14 4f 16 b2 51 21 80 0a 91 fc 0b 72 40 0e e4 80 12 49 07 c8 96 62 06 64 4e db 78 64 c2 bf 13 04 0f d0 59 80 01 18 46 9f f7 7c d9 b6 31 ff 98 ed 65 cc d9 b6 6d bb 0e b3 6d 6b 46 c6 b2 6d db c6 bd aa 28 5f 0d 53 90 12 95 57 3e 72 93 45 76 4d 54 69 55 50 39 39 aa ac ca 68 ba a6 69 86 2a cb 4f 56 79 c9 a6 45 f2 56 3e 8d 91 93 c6 ca c3 44 a9 92 82 15 a2 18 85 c9 53 0b 55 58 fe dc d3 78 cd d3 38 05 a8 88 66 6a b2 29 6e 4a 28 bf 19 ac 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 Data Ascii: s@HOQ!r@IbdNxdYF\|1emmkFm(_SW>rEvMTiUP99hiOVyEV>DSUXx8fj)nJ(5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj*>
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 4f f1 22 6f f0 3e 9f f1 2d bf f0 37 dd e8 cb 10 46 33 89 ff 04 65 57 2e 15 54 09 95 57 35 d5 55 13 b5 56 27 f5 d4 00 0d d7 38 4d d5 1c 2d d6 2a 6d d4 0e ed d7 31 9d d5 15 dd d6 23 bd d4 07 7d 97 93 3c 15 a0 70 c5 e9 3f 41 f0 00 20 04 00 03 00 30 d7 bc 6c db b6 6d db b6 6d db b6 6d db b6 6d db f5 ce dd fd 82 08 00 e0 10 17 92 40 6a c8 04 39 a1 00 14 87 72 50 15 ea 40 63 68 05 1d a1 07 f4 87 61 30 16 a6 c0 6c 58 04 2b 61 03 6c 87 7d 70 14 ce c0 65 b8 05 0f e1 05 bc 87 6f 10 0a 7f 31 32 32 c6 c4 04 98 1c d3 61 56 2c 82 95 b1 11 b6 c4 0e d8 1d fb e1 50 1c 83 93 71 16 2e c4 15 b8 1e b7 e1 5e 3c 82 a7 f1 12 de c4 07 f8 1c df e1 57 0c c1 3f 14 89 88 62 50 7c 4a 46 69 29 0b e5 a6 42 54 92 2a 50 75 aa 47 4d a9 0d 75 a6 5e 34 90 46 d0 78 9a 46 73 69 09 ad a6 4d b4 Data Ascii: O"o>-7F3eW.TW5UV'8M-m1#}<p?A 0lmmmm@j9rP@cha0lX+al}peo122aV,Pq.^<W?bP\|JFi)BTPuGMu^4FxFsiM
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: fb 3b ff fc 56 19 74 7e e2 e9 62 89 97 66 33 bd c6 a8 45 71 d1 2b c4 78 88 c9 64 be 12 7d ef ec 8e fe 46 a1 5b 47 22 90 83 af 4c a3 8c 0a 7b 4d de 83 30 36 dc 27 02 b5 4e e8 5e b8 a0 84 ae 55 d3 a4 06 75 94 c1 89 5a 49 a1 7d 5c af 45 50 d6 e8 34 a6 69 89 75 66 93 e9 a4 f8 7a e6 fd a4 fc 8a e5 b0 3b 2e 8e e3 ff 7b e5 08 bb 84 3b 3f 4e 9c 57 27 d1 eb 93 e8 e3 49 04 f1 8b 79 16 17 99 98 0a 88 b3 8b 2f 90 dd f1 1e 1c 43 99 5d fe 28 d9 e7 2f 93 fd fc 79 c2 db 67 9c 89 41 17 59 7c b7 9c 1e 14 67 fb 51 86 63 c8 b0 7b 5c 3e 4b 77 8d bd bf 01 4a 60 0d 24 60 03 ec 80 2d 50 01 6f 81 77 40 0d 34 c0 35 d0 02 7b e0 5f a0 03 7a 60 00 46 e0 06 b8 05 ee 80 7b e0 01 98 9f 74 56 4c d8 14 6c 4a 36 53 98 c9 f4 1f d5 f4 8d 2c 36 0e 05 01 f0 46 5b 24 3c 42 80 20 37 d7 15 14 ca Data Ascii: ;Vt~bf3Eq+xd}F[G"L{M06'N^UuZI}\EP4iufz;.{;?NW'Iy/C](/ygAY\|gQc{\>KwJ`$`-Pow@45{_z`F{tVLlJ6S,6F[$<B 7
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 68 b8 3b c5 78 08 d2 3b 18 ad 82 21 29 0f 41 26 c1 98 04 43 52 1e 82 4c 82 31 09 b6 26 27 26 c1 6c 92 9b 32 91 9f 13 32 d9 56 aa c7 be 92 ad 27 10 26 8e 84 90 70 22 a4 84 03 21 c6 c6 95 9b 12 70 6c 98 12 b2 b2 36 03 f7 c0 ed 90 30 f7 fd f8 73 df f7 4f e3 74 97 c3 ed fd f9 61 fd e7 47 5e e8 07 89 57 dd bd 1f 47 d3 79 df 9b db e7 de a1 eb 3c 19 b1 78 b3 59 cc fc 62 9a cf bf fa dd db fe 8e f7 7e 9e 47 6f fd 3f fe 7f 82 e0 21 4b 0e 00 00 a0 60 fd 51 f7 15 66 9b a3 e4 70 b1 ed 64 17 db b6 6d db d6 cb 3e 55 6a 7a 62 ca a4 ad 9a c9 b6 cc d2 2c 76 68 76 76 d6 dc ec d6 fc 51 7b b4 38 7b 6b 29 fb b5 2c ab b4 62 dc 01 ad e3 60 ad e7 b0 36 0c da ac 4d cc d1 96 11 47 b4 9d a3 da c1 b1 cc e3 84 76 66 ae 76 73 52 7b 46 9d d2 81 09 6b 39 ad e3 9c 19 e9 c4 d0 79 5d e4 82 Data Ascii: h;x;!)A&CRL1&'&l22V'&p"!pl60sOtaG^WGy<xYb~Go?!K`Qfpdm>Ujzb,vhvvQ{8{k),b`6MGvfvsR{Fk9y]
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: a4 9d 26 dd 8a f4 76 d2 5f 27 c3 89 0c 15 19 2f c8 4c 20 f3 08 59 e3 c8 aa 22 eb 17 b2 45 64 9f 22 67 01 39 cb c8 f9 8a dc 64 72 6f 91 27 24 ef 6d f2 c7 93 ef 45 7e 03 f9 3f 22 90 20 68 47 30 88 e0 18 82 7f 10 ce 42 18 8e 30 1b a1 1c e1 39 84 df 21 9a 84 28 13 51 3f a2 6f 10 c7 20 96 21 de 86 f8 1f 24 93 90 f8 20 a9 47 f2 0d d2 14 a4 03 48 3f a3 20 83 82 77 29 d4 a1 70 80 c2 93 14 7e 44 e1 5f 14 4d a0 48 8b 22 7b 8a 12 29 5a 46 d1 75 8a be a6 e8 39 c5 ee 14 e7 53 bc 87 e2 1b 14 7f 4e f1 5f 94 e8 53 52 45 a9 25 a5 c7 29 f3 a0 ac 95 f2 25 94 57 50 7e 91 0a 27 2a 64 54 8e a7 b2 8c aa 09 54 39 50 d5 4d b5 1e d5 35 54 5f a5 c6 95 1a 05 b5 13 a9 2d a2 f6 01 75 c6 d4 d5 52 f7 03 f5 50 2f a0 fe 47 1a 94 34 5a d2 34 91 a6 53 34 eb d3 5c 44 b3 86 e6 4f 68 09 a7 a5 Data Ascii: &v_'/L Y"Ed"g9dro'$mE~?" hG0B09!(Q?o !$ GH? w)p~D_MH"{)ZFu9SN_SRE%)%WP~'*dTT9PM5T_-uRP/G4Z4S4\DOh
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 4c 70 3d c1 b3 04 1f 22 84 11 6a 22 b4 45 18 84 30 1e 61 09 c2 36 84 6f 10 fd 88 65 88 ed 11 f7 20 7e 89 64 44 8a 21 75 47 5a 80 74 01 e9 1f e4 24 e4 7a c8 0d 91 1b 23 37 43 6e 89 dc 06 b9 3d 72 27 e4 8f 48 6a 45 d2 01 92 6d 24 0f 26 f9 17 52 e6 91 f2 0b a9 33 49 33 93 36 8b f4 4c d2 c7 91 fe 15 19 95 c9 58 48 c6 19 32 23 64 7e 41 56 88 ac 0f c9 6e 4e f6 87 e4 f4 20 e7 1c b9 32 b9 e3 c9 fd 80 dc 27 e4 35 22 ef 00 79 af c9 6f 45 fe 39 0a 5c 14 4c a5 d0 40 e1 68 0a 3f a1 28 46 d1 12 8a 8d 14 f7 a5 78 1e c5 5f 53 fc 9c 90 9b 50 2d 42 73 09 ed 21 f4 07 61 07 e1 18 e1 ce 84 67 12 7e 4c c4 4b 24 41 a4 1e 91 c9 44 ae 12 f9 83 68 36 d1 86 44 87 12 5d 47 f4 0a d1 07 c4 7a 13 9b 40 6c 23 b1 63 c4 fe 22 1e 21 de 94 f8 3c e2 87 89 7f 42 fc 35 89 42 12 ed 49 5c 27 f1 Data Ascii: Lp="j"E0a6oe ~dD!uGZt$z#7Cn=r'HjEm$&R3I36LXH2#d~AVnN 2'5"yoE9\L@h?(Fx_SP-Bs!ag~LK$ADh6D]Gz@l#c"!<B5BI\'
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 2b c9 5c 4d 6c a7 1f a8 a0 03 8c 86 d1 04 bf 89 1f fe 57 91 0e 64 34 19 0d f8 0d 7e 42 ae 31 69 da 0a 2a e8 3a e9 21 5e 35 55 41 d3 87 a4 02 a9 8b 3d 52 77 49 2b bc 6a aa 52 64 62 27 b8 e6 42 ac 56 ee 42 25 2e 66 49 4c 59 a3 61 85 2b d4 a6 a1 c6 9b 77 50 1b 6a d7 7f 47 6a 08 f3 d4 bf 70 e4 37 88 85 df e8 9b c7 06 b6 6b 67 3b b0 8b a0 a1 af 9d 6f 5e 85 5c 53 1d 85 6c 62 5e 30 e4 72 9f a3 8d 5f 4a bf 26 66 14 eb ff f6 b0 d5 6b 8a 4d 84 06 29 59 c0 43 4b 25 f9 0f d9 c4 95 89 6c 90 95 a0 5b bc 22 8e e2 b4 64 f2 7a f2 29 1a aa 12 57 0a d5 97 f0 e0 4b 3d d9 7d 32 0b 64 4a 35 0b b5 38 c3 26 90 df 68 45 ea f4 37 62 f4 2b d3 28 60 1a 83 09 f8 00 53 07 18 d6 88 7d 0c 71 c8 6d 21 3b 03 2a be 18 7b a6 e5 1e a1 4e 02 c5 de 6a 17 ed be 2b 49 99 1a b7 fb c2 ed 84 b1 9d Data Ascii: +\MlWd4~B1i:!^5UA=RwI+jRdb'BVB%.fILYa+wPjGjp7kg;o^\Slb^0r_J&fkM)YCK%l["dz)WK=}2dJ58&hE7b+(`S}qm!;{Nj+I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	918	OUT	GET /assets/fonts/riparide_icons-0c6d50f63525179eb523fc9d870e27cd14522c9549fb2ab1f8d117f23cb63c87.woff2?b55bd47145334193a0b15feb28d96f88 HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/assets/application-c3a9a0b098bce4bc114461119e1b77e76053f87e2d05409ee1f3a82fbce299fa.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:24 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:24 GMT Content-Type: application/font-woff2 Content-Length: 69704 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729806723&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u%2F33XoHfKvqjurNyKGUwtxCU%2Fh8ss9EJiKyW%2F83Kf9U%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729806723&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u%2F33XoHfKvqjurNyKGUwtxCU%2Fh8ss9EJiKyW%2F83Kf9U%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Tue, 22 Oct 2024 23:44:43 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 535761 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0492f8f5b4868-DFW
2024-10-31 02:41:24 UTC	448	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 10 48 00 0b 00 00 00 03 c1 f0 00 01 0f f6 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c b3 48 06 56 00 a6 08 0a 8d d2 18 8a dc 53 01 36 02 24 03 8f 78 0b 8f 7c 00 04 20 05 84 5e 07 b0 24 5b 6c fe 72 a6 60 87 7f 40 a5 4d dd 10 01 74 9b 5b 63 d3 a4 9e df af 98 6e ee 04 81 ee 80 93 0a 7f 53 75 c9 d8 96 c5 b0 db 21 3d 33 2e 6d e4 ec ff ff ff cf 4e 2a 63 68 5a 35 a1 00 a2 d3 39 fd dc ff 1f 54 0a 9a 5c 14 51 4d 2b d9 93 30 3b 1a 41 83 4b 90 1c d2 48 d0 25 1d 51 14 45 41 12 68 48 d2 76 2d 49 20 d6 9c 90 c0 c7 92 12 69 08 ba 41 d2 0a f4 48 97 74 29 42 08 09 1b 12 16 f6 5d 26 17 d9 62 67 a2 ee 39 4b e0 33 23 9c 2a 1c a6 f5 1c 9b ac f2 8b 8e ea c3 74 4b bb b0 81 9e d0 64 c4 05 5d 26 65 73 0a ad 3a 39 ea c0 Data Ascii: wOF2HHVS6$x\| ^$[lr`@Mt[cnSu!=3.mNchZ59T\QM+0;AKH%QEAhHv-I iAHt)B]&bg9K3#tKd]&es:9
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 41 26 e4 2e 84 31 93 dc b1 5c 10 ee 25 ac 95 04 70 32 83 63 22 10 ac 5a 71 02 ae 8d fd 75 ac 2a d6 d6 f5 5b 15 db 3a 36 b8 3a ac 1d 8e ae 21 da f6 ff 6a 87 32 40 6b f3 f2 ef ef f3 ee fe 9b fa 26 ea 8b 12 c4 4f 22 1f f8 a7 04 fc 87 16 83 48 75 4a a8 80 8d 8a 98 13 a3 30 66 ce c0 8a d9 58 4b 75 da d3 6d ce b9 0a 06 e6 dc 31 2f 99 d6 48 91 4a bc fa 4c ec 26 09 4f c0 3f 3c fb b9 77 ff 88 96 57 02 78 88 9c 95 3e 7c 82 69 68 15 42 59 c5 16 e7 4c b6 13 29 14 fa 46 9a cb 71 89 32 7e c8 f6 f4 57 d1 bf aa f3 8d 89 b8 cd 81 a8 a7 57 05 10 80 02 c0 81 66 38 25 f4 82 1f 33 ed 6b 47 3c a0 0a aa 80 6e af 96 fc 98 3f a3 f5 ce 27 b1 4d e2 3d 9f 67 f7 d3 ab 6a ff 33 f7 be 3a b3 79 f5 14 80 94 2c 27 66 11 c5 b4 cd 75 4f db 5e 40 20 b6 7e 24 33 1b bd 5a ff 80 5f e0 77 0a 8b Data Ascii: A&.1\%p2c"Zqu*[:6:!j2@k&O"HuJ0fXKum1/HJL&O?<wWx>\|ihBYL)Fq2~WWf8%3kG<n?'M=gj3:y,'fuO^@ ~$3Z_w
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 7f e2 66 b0 93 9f 17 ca f4 c3 44 a1 d3 17 96 8b 37 a7 98 db 59 21 4f 98 ac ee 30 73 96 54 91 06 4d 18 0e 51 73 2c 92 9c a6 6e cf 57 53 64 b3 6e 01 a5 41 9a b0 7d 16 13 d7 b8 83 a7 ca 14 e8 99 70 f3 a8 65 66 21 f9 46 9a 2a c6 4e 51 ae 6e 73 58 c3 04 8e ab 27 31 d4 98 a0 31 9c 9d 67 d5 0f 98 e5 72 f0 2a 34 d9 0c bd 20 0c 4d 80 74 c7 b4 af 11 21 1f 0b 63 a3 db 59 cd a6 6d 62 e1 7c 45 db dd 20 61 22 8b 6a ac 79 85 37 8c 8f ea 6c b9 05 db 94 37 15 a9 d5 d8 30 25 c9 a6 05 75 49 77 d9 2a 88 6e 8b 53 eb 54 65 b2 59 71 2e b5 ed bb 4e 68 00 cb 98 c0 ab 44 d3 6b 3e 80 f9 12 0b 9b b4 9b 34 bf 1c 0a 40 61 78 c7 6c b1 58 cd cd a0 20 13 6c 1b 13 13 0b 12 7c 2c 35 77 8e 21 0f c0 23 c0 e8 c8 dd c3 39 b9 80 44 1e 62 b8 4d 28 c4 1d 5f ec fa 33 81 6c 6f bc e7 db d4 39 12 81 Data Ascii: fD7Y!O0sTMQs,nWSdnA}pef!FNQnsX'11gr4 Mt!cYmb\|E a"jy7l70%uIw*nSTeYq.NhDk>4@axlX l\|,5w!#9DbM(_3lo9
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 1d 92 a8 47 3d ab ad dd 44 a3 f0 d9 13 04 6f 67 37 aa 1e 85 32 d3 9c ad 04 27 35 92 9e fe 93 27 6e 0b 6b 94 1f 55 72 9a 4f 2b 16 d0 b0 5d b6 9f bb 47 56 8e f5 43 d6 84 72 dc be 5f 65 f6 64 56 2c 8a 6e 4c 4e 73 c4 6e 11 96 ef b1 3e 71 61 76 d6 66 36 99 27 54 ad 5d a1 cf 5b b4 42 0c 11 b6 95 bc e6 97 88 e6 0b 9b 04 25 f2 31 84 2d c3 c1 73 0f ab d1 6c 7d ca 49 19 3a ec 01 20 05 19 49 8c 5c e5 5e 99 cc a8 ae e9 27 2b 2b b8 83 ee 1e a1 d6 8a b6 ac ad 4d 65 52 03 d7 f4 d4 40 f1 4d ab 36 6a fd 67 b8 76 a3 2c 93 73 0c 65 f9 ac ac 6b a4 12 a4 e2 48 a6 1f ca 45 50 0a b5 cc f4 4b b4 a0 f5 69 99 4b 66 4e 6f cd b1 28 a8 91 50 fc 6e 54 34 a7 91 71 5b 1e 78 1e b7 ba 15 59 0a f7 04 9d a5 2f bd e7 d3 5f 61 2c 8a 55 a9 03 90 c3 cf e7 7f 4a 84 89 42 2d 87 87 0f 24 75 eb d9 Data Ascii: G=Dog72'5'nkUrO+]GVCr_edV,nLNsn>qavf6'T][B%1-sl}I: I\^'++MeR@M6jgv,sekHEPKiKfNo(PnT4q[xY/_a,UJB-$u
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 38 1a 4f a6 b3 79 2b fe 97 ca 95 5a eb 8c 56 a7 db 1f 8c 26 d3 f9 99 63 2e ae 22 51 23 42 d3 af d6 7b 09 ee d7 36 36 b7 3c f8 7d 6f ff f0 f8 f4 fc e2 2a 0e 42 f6 e9 fd c5 d7 17 d4 f7 2f 09 5f cb ff e4 ba 64 4d 1c 94 d5 ab 5d 70 7a df 0a 4b 89 5a c6 0c dc 75 5c 07 b5 b5 01 1d 6c 4e 53 db eb fc 81 ed 00 71 87 88 3a 02 d9 14 4c 27 90 3a 85 d6 19 e8 ce 21 76 01 ae 4b 38 5d 21 68 06 a5 39 d2 16 b0 5a 42 ed 1a 42 37 b0 bb 85 d9 1d f4 ee e1 f7 00 be 47 c8 3d c1 e8 19 5e 2f 70 7b 05 d5 1b 92 de 11 f6 81 6c 25 01 ab 6e 23 4d a7 6b 70 18 32 28 86 0e 86 61 83 63 f8 10 18 31 24 46 0e 85 51 43 63 f4 30 18 33 2c c6 0e 87 71 c3 63 fc 08 98 30 22 26 8e 84 49 23 63 f2 28 98 22 ea ac 68 38 30 55 74 4c 13 03 d3 c5 c4 0c b1 30 53 6c cc 1c 07 b3 c6 c5 ec f1 30 67 7c cc 9d 00 Data Ascii: 8Oy+ZV&c."Q#B{66<}o*B/_dM]pzKZu\lNSq:L':!vK8]!h9ZBB7G=^/p{l%n#Mkp2(ac1$FQCc03,qc0"&I#c("h80UtL0Sl0g\|
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: fe 8a 62 60 8c 48 3b 07 96 6e 02 df 5e 1b 8d 57 83 00 15 01 42 34 07 5f 9e 39 70 b5 58 2e 64 b4 e0 43 a4 37 a9 35 06 c6 02 29 c1 ba fa b4 06 02 4d 2c e9 19 8f 55 47 6e 79 da e1 cc 19 02 3e 00 f8 f1 d9 50 0a 24 8b ca 7c 5c 1f 62 4e 15 ea e8 79 bc 38 bd 8c d4 70 49 4d ae ab 95 a5 aa 56 f9 1b fa e1 87 7d db 76 cf 5c 5d 49 a7 c3 81 a6 bb 3a 09 12 39 4d a2 32 4f e9 95 e9 95 7c c3 05 3e 43 0b db 02 d0 21 dd a8 74 21 90 f1 f7 c0 08 0b 38 84 b3 bd 71 b5 50 11 66 27 9c 9a 66 ac 97 a2 2a f4 90 09 49 89 73 2d 96 24 5c b6 f2 44 e0 b0 25 5e a6 3d 65 0c 25 b0 47 fc 76 d7 c1 60 6e e6 4a 6f ae 14 be 8f 06 1f 4e 4e 11 0c 86 e9 8d 6c fd 4b cc a4 08 f2 1b 07 2e 87 43 b3 48 18 13 df b4 20 05 44 a7 7e f4 b1 72 6f 29 ff 12 61 95 2c 42 4a 99 8b 05 2e 4c 33 4e c3 62 e8 f5 ac b2 Data Ascii: b`H;n^WB4_9pX.dC75)M,UGny>P$\|\bNy8pIMV}v\]I:9M2O\|>C!t!8qPf'f*Is-$\D%^=e%Gv`nJoNNlK.CH D~ro)a,BJ.L3Nb
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 12 92 bb c0 28 cb 41 31 2a d5 31 06 99 79 d3 1d f7 f9 0d 33 4f ed 87 36 df bf 41 6a d5 f9 fc 01 ef 27 66 15 50 2d 9a fa 01 db 07 1f a0 a0 87 11 39 3e 0f 2e 37 87 8b 90 d5 e9 d7 4b ef b9 03 ef e8 88 a5 a2 a9 9c b3 ff 61 a4 a0 80 39 a4 73 61 96 12 5c 9b 61 d5 c6 01 68 8b c8 d9 3a 42 f2 6c 11 b7 09 ac dd a1 40 d4 14 57 aa 47 74 60 c6 4a 15 c2 32 a9 52 be 5b c9 10 c2 f5 ae e6 a0 2f f0 2a e3 87 65 fb 69 b9 0d 2c bd 1f 20 29 a7 c3 ad a0 b5 d6 af e2 ac 99 a6 69 98 82 ea 40 fd d5 21 bd 08 11 32 ef a4 00 bf 98 dc a1 d7 88 68 66 dd 22 20 d4 dc b0 65 6d 3a 4e 1f f9 1a 3e b0 df 06 31 fa df 02 6c 8e c7 aa d7 57 2c 5a 82 20 9a 44 79 49 dc da 8c c6 96 6d d4 97 9b b0 d6 09 20 f7 69 11 51 4d 7a 10 59 94 63 6f 3b 2e f9 56 6a 6f be 6e 36 5b d7 a6 69 f1 bc ce 6d 4f 67 91 a4 Data Ascii: (A11y3O6Aj'fP-9>.7Ka9sa\ah:Bl@WGt`J2R[/ei, )i@!2hf" em:N>1lW,Z DyIm iQMzYco;.Vjon6[imOg
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: ba 83 a7 87 80 d3 5a 52 47 0b 43 73 60 94 ce a4 78 0e ae bc 52 3f cd 05 5a 5f b5 4c 12 0c ad 67 cd 2d 9e 6a 5d 0a 4c 8c 56 38 51 ee 25 80 61 55 29 b9 be d5 98 1b 3f 9d 8c 15 20 88 b4 df ed d1 a7 a4 9c 4e 30 d6 be cc 14 19 85 93 d0 91 5e 9c 5c 26 52 11 c9 08 1b b4 de 13 e0 29 87 08 c0 c4 23 36 c0 be 21 51 bf 8e 3e 73 6f 78 6b 3b 55 f7 b5 5f dd 8a 9a 1e 70 27 9b a1 02 53 61 3c 04 aa 6c 51 7b ff de 13 17 59 e3 d9 38 6b c9 7b 40 d8 3b a1 2a 9c ff 9d 0a 0f 7d bc 5f ef f5 18 3e 78 0f 42 77 3a 47 c8 96 ee d2 21 ec 78 d3 5d 27 86 cc 62 71 fb 6f 1f f0 84 1c d3 18 18 65 a6 74 02 8e 8c c5 a3 e8 1d 4d b0 2f 6c 34 dc d9 6b 2f 28 f9 e0 6d 55 e3 7c e0 5b 77 30 7f 40 df 55 1d 6a 79 33 7a a7 46 b5 1f e6 4b c2 32 45 79 ca 39 90 4c 7b 9d e2 57 66 b2 6d 42 76 74 6c ff ab 35 Data Ascii: ZRGCs`xR?Z_Lg-j]LV8Q%aU)? N0^\&R)#6!Q>soxk;U_p'Sa<lQ{Y8k{@;*}_>xBw:G!x]'bqoetM/l4k/(mU\|[w0@Ujy3zFK2Ey9L{WfmBvtl5
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: af 23 2f d6 26 b5 f9 f8 ae e4 64 72 ce 73 f8 45 2a 31 30 42 83 d8 57 fa 74 b1 87 f2 3d d3 d3 71 5c 47 f4 e8 0a 35 eb 60 a0 f2 68 57 4a d9 73 2e 70 e8 7c 84 78 c6 d4 a0 94 74 de 83 37 d2 a8 12 b5 e3 ab cc 06 db 62 4b 13 57 c0 33 e8 f2 d7 01 a2 89 64 2f 85 37 4c 90 67 0f 0e b0 ce e9 76 b2 5b f6 fa fc 4d 86 41 bb 57 2e b9 25 6f e6 4e b6 11 5a 95 8d 92 1b 01 0e a4 37 44 e5 78 9d 0d b4 b8 46 80 9c 1c ab f3 71 d7 69 a3 dc 57 6d 25 1f 7a cd 49 76 97 94 d7 f6 d6 c2 5f 34 20 58 b1 f2 2d 85 8f 50 3e 69 54 b8 ef 43 f2 59 4c a6 d8 b8 f4 29 d2 e5 e6 32 00 91 ec 1f c0 ba 2f 75 af 0b ff 78 f1 4c ef b7 cb 3d 22 ec e9 de 63 ff 63 73 d0 fc 0f fc f8 b5 57 fb 7d 72 ff f6 7e 58 79 20 e5 ca fc a1 8e 2f 23 a2 82 85 f7 47 e7 3f 08 ea 1d 1d ef 4f 2f 09 9f ee be d4 fd 03 d4 c3 e7 Data Ascii: #/&drsE*10BWt=q\G5`hWJs.p\|xt7bKW3d/7Lgv[MAW.%oNZ7DxFqiWm%zIv_4 X-P>iTCYL)2/uxL="ccsW}r~Xy /#G?O/
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 63 cb 76 70 8b 18 2c 88 eb 13 90 38 bd d0 13 67 9c 62 2e 91 61 d9 45 f6 a0 88 d1 4c f8 8d b2 d4 25 12 11 99 0c 1b 49 b0 05 4b 76 2f 91 83 6e 05 7a 66 cd b3 26 fb 56 03 39 b8 53 e1 07 b4 fc 70 6c ef 1e 1c 2a 29 f4 e4 00 a2 b2 17 78 7e 00 e1 e7 01 78 d7 69 90 df be ca 6f 59 30 8e 7b 5c 21 b4 11 85 46 b0 c3 48 78 ae 85 44 d0 bd 5f ce d6 90 0f 0e c1 d9 2f a8 a1 09 b6 35 97 d1 2f ba a2 e5 73 a1 22 66 84 8c 6e 83 79 62 7f 8e d8 b7 ab 65 71 d0 cd 8e 8e a6 e9 fb 32 47 ee c2 8a 0e 96 50 17 1e ef cc 6a 49 f9 a0 26 83 83 04 34 82 af 59 e9 8e 28 83 49 c5 3f c3 91 6c 3b 88 14 d4 48 1b d6 ac 8b f0 fd be 78 78 24 05 c7 ca 37 90 eb 00 80 d0 e0 ab 79 31 fd 5d 13 e9 40 d2 ad 6d bb 7f 7c 77 44 72 f4 0e de b9 c6 02 f7 a6 65 70 a1 48 32 ab a5 94 ee e9 1b 1b 3a d8 0c 0e ec 58 Data Ascii: cvp,8gb.aEL%IKv/nzf&V9Spl*)x~xioY0{\!FHxD_/5/s"fnybeq2GPjI&4Y(I?l;Hxx$7y1]@m\|wDrepH2:X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	580	OUT	GET /assets/application-f529098319cbda4e1be1ecbe02bb2e4d0d8692cd437d91302e0b9ae42f8ca4af.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:24 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1722227575&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=qa%2BNze05hz7nd4IUF0V5i9mnycMYQuElPh%2BRzRS%2FK%2Bk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1722227575&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=qa%2BNze05hz7nd4IUF0V5i9mnycMYQuElPh%2BRzRS%2FK%2Bk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Fri, 19 Jul 2024 03:54:52 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 6396 Server: cloudflare CF-RAY: 8db0493029ce466e-DFW
2024-10-31 02:41:24 UTC	440	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 36 2e 30 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 69 6e 70 75 74 74 79 70 65 73 20 21 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 61 2c 6c 2c 75 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 73 29 69 66 28 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 29 7b 69 66 28 65 3d 5b 5d 2c 74 3d 73 5b 63 5d 2c 74 2e 6e 61 6d 65 26 26 28 65 2e 70 75 73 68 28 74 Data Ascii: 7bff/! modernizr 3.6.0 (Custom Build) \| MIT * https://modernizr.com/download/?-inputtypes !*/!function(e,t,n){function o(e,t){return typeof e===t}function i(){var e,t,n,i,a,l,u;for(var c in s)if(s.hasOwnProperty(c)){if(e=[],t=s[c],t.name&&(e.push(t
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 2e 66 6e 28 29 3a 74 2e 66 6e 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6c 3d 65 5b 61 5d 2c 75 3d 6c 2e 73 70 6c 69 74 28 22 2e 22 29 2c 31 3d 3d 3d 75 2e 6c 65 6e 67 74 68 3f 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 3d 69 3a 28 21 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 7c 7c 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 69 6e 73 74 61 6e 63 65 6f 66 20 42 6f 6f 6c 65 61 6e 7c 7c 28 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 3d 6e 65 77 20 42 6f 6f 6c 65 61 6e 28 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 29 29 2c 4d 6f 64 65 72 6e 69 7a 72 5b 75 5b 30 5d 5d 5b 75 5b 31 5d 5d 3d 69 29 2c 72 2e 70 75 73 68 28 28 69 3f 22 22 3a 22 6e 6f 2d 22 29 2b 75 2e 6a 6f 69 6e 28 22 2d 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 Data Ascii: .fn():t.fn,a=0;a<e.length;a++)l=e[a],u=l.split("."),1===u.length?Modernizr[u[0]]=i:(!Modernizr[u[0]]\|\|Modernizr[u[0]]instanceof Boolean\|\|(Modernizr[u[0]]=new Boolean(Modernizr[u[0]])),Modernizr[u[0]][u[1]]=i),r.push((i?"":"no-")+u.join("-"))}}function a()
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 29 3a 2f 5e 28 73 65 61 72 63 68 7c 74 65 6c 29 24 2f 2e 74 65 73 74 28 6f 29 7c 7c 28 61 3d 2f 5e 28 75 72 6c 7c 65 6d 61 69 6c 29 24 2f 2e 74 65 73 74 28 6f 29 3f 66 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 26 26 66 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 28 29 3d 3d 3d 21 31 3a 66 2e 76 61 6c 75 65 21 3d 6c 29 29 2c 64 5b 65 5b 72 5d 5d 3d 21 21 61 3b 72 65 74 75 72 6e 20 64 7d 28 70 29 2c 69 28 29 2c 64 65 6c 65 74 65 20 6c 2e 61 64 64 54 65 73 74 2c 64 65 6c 65 74 65 20 6c 2e 61 64 64 41 73 79 6e 63 54 65 73 74 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 4d 6f 64 65 72 6e 69 7a 72 2e 5f 71 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 4d 6f 64 65 72 6e 69 7a 72 2e 5f 71 5b 6d 5d 28 29 3b 65 2e 4d 6f 64 65 72 6e 69 7a 72 3d 4d 6f 64 65 72 6e 69 7a 72 7d 28 Data Ascii: ):/^(search\|tel)$/.test(o)\|\|(a=/^(url\|email)$/.test(o)?f.checkValidity&&f.checkValidity()===!1:f.value!=l)),d[e[r]]=!!a;return d}(p),i(),delete l.addTest,delete l.addAsyncTest;for(var m=0;m<Modernizr._q.length;m++)Modernizr._q[m]();e.Modernizr=Modernizr}(
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 61 28 62 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 62 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 65 3d 63 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 29 3b 65 7c 7c 63 2e 64 61 74 61 28 22 62 73 2e 61 6c 65 72 74 22 2c 65 3d 6e 65 77 20 64 28 74 68 69 73 29 29 2c 22 73 74 72 69 6e 67 22 3d Data Ascii: ,handle:function(b){if(a(b.target).is(this))return b.handleObj.handler.apply(this,arguments)}})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=c.data("bs.alert");e\|\|c.data("bs.alert",e=new d(this)),"string"=
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 33 2e 33 2e 37 22 2c 63 2e 44 45 46 41 55 4c 54 53 3d 7b 6c 6f 61 64 69 6e 67 54 65 78 74 3a 22 6c 6f 61 64 69 6e 67 2e 2e 2e 22 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 22 64 69 73 61 62 6c 65 64 22 2c 64 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 65 3d 64 2e 69 73 28 22 69 6e 70 75 74 22 29 3f 22 76 61 6c 22 3a 22 68 74 6d 6c 22 2c 66 3d 64 2e 64 61 74 61 28 29 3b 62 2b 3d 22 54 65 78 74 22 2c 6e 75 6c 6c 3d 3d 66 2e 72 65 73 65 74 54 65 78 74 26 26 64 2e 64 61 74 61 28 22 72 65 73 65 74 54 65 78 74 22 2c 64 5b 65 5d 28 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 5b 65 5d 28 6e 75 6c 6c 3d 3d 66 5b 62 5d 3f 74 68 Data Ascii: 3.3.7",c.DEFAULTS={loadingText:"loading..."},c.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",null==f.resetText&&d.data("resetText",d[e]()),setTimeout(a.proxy(function(){d[e](null==f[b]?th
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 3a 64 2e 66 69 6e 64 28 22 69 6e 70 75 74 3a 76 69 73 69 62 6c 65 2c 62 75 74 74 6f 6e 3a 76 69 73 69 62 6c 65 22 29 2e 66 69 72 73 74 28 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 29 7d 29 2e 6f 6e 28 22 66 6f 63 75 73 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 20 62 6c 75 72 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 28 62 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 66 6f 63 75 73 22 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 62 2e 74 79 70 65 29 29 7d 29 7d 28 Data Ascii: rigger("focus"):d.find("input:visible,button:visible").first().trigger("focus"))}).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',function(b){a(b.target).closest(".btn").toggleClass("focus",/^focus(in)?$/.test(b.type))})}(
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 28 62 29 7b 72 65 74 75 72 6e 20 62 7c 7c 28 74 68 69 73 2e 70 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 70 61 75 73 65 64 26 26 28 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6e 65 78 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 6e 74 65 72 76 61 6c 29 29 2c 74 68 69 73 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 69 74 65 6d 73 3d 61 2e 70 61 72 65 Data Ascii: (b){return b\|\|(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},c.prototype.getItemIndex=function(a){return this.$items=a.pare
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 69 67 68 74 22 2c 69 3d 74 68 69 73 3b 69 66 28 66 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 3b 76 61 72 20 6a 3d 66 5b 30 5d 2c 6b 3d 61 2e 45 76 65 6e 74 28 22 73 6c 69 64 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6a 2c 64 69 72 65 63 74 69 6f 6e 3a 68 7d 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6b 29 2c 21 6b 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 69 66 28 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 30 2c 67 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 24 69 6e 64 69 Data Ascii: ight",i=this;if(f.hasClass("active"))return this.sliding=!1;var j=f[0],k=a.Event("slide.bs.carousel",{relatedTarget:j,direction:h});if(this.$element.trigger(k),!k.isDefaultPrevented()){if(this.sliding=!0,g&&this.pause(),this.$indicators.length){this.$indi
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 22 5b 64 61 74 61 2d 73 6c 69 64 65 5d 22 2c 65 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 63 61 72 6f 75 73 65 6c 2e 64 61 74 61 2d 61 70 69 22 2c 22 5b 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 5d 22 2c 65 29 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 72 69 64 65 3d 22 63 61 72 6f 75 73 65 6c 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 3b 62 2e 63 61 6c 6c 28 63 2c 63 2e 64 61 74 61 28 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 63 2c 64 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 Data Ascii: "[data-slide]",e).on("click.bs.carousel.data-api","[data-slide-to]",e),a(window).on("load",function(){a('[data-ride="carousel"]').each(function(){var c=a(this);b.call(c,c.data())})})}(jQuery),+function(a){"use strict";function b(b){var c,d=b.attr("data-ta
2024-10-31 02:41:24 UTC	1369	IN	Data Raw: 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 66 29 2c 21 66 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 65 26 26 65 2e 6c 65 6e 67 74 68 26 26 28 63 2e 63 61 6c 6c 28 65 2c 22 68 69 64 65 22 29 2c 62 7c 7c 65 2e 64 61 74 61 28 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 6e 75 6c 6c 29 29 3b 76 61 72 20 67 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 5b 67 5d 28 30 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 21 30 29 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 43 6c 61 Data Ascii: );if(this.$element.trigger(f),!f.isDefaultPrevented()){e&&e.length&&(c.call(e,"hide"),b\|\|e.data("bs.collapse",null));var g=this.dimension();this.$element.removeClass("collapse").addClass("collapsing")[g](0).attr("aria-expanded",!0),this.$trigger.removeCla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	13.33.187.40	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	588	OUT	GET /rollbarjs/refs/tags/v2.26.1/rollbar.min.js HTTP/1.1 Host: cdn.rollbar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:25 UTC	646	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 80302 Connection: close Date: Thu, 31 Oct 2024 02:41:26 GMT Last-Modified: Wed, 04 Jan 2023 20:16:53 GMT ETag: "ddf66d492e77fc149633a129f1f09c40" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30672000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 a6ec089aa02839578670b49d128782c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: rIcGF38IJC0dR805a7HZHOOJB9LuuHaNpA3LHTS1Xy6WnKm0HzYzvw== Access-Control-Allow-Origin: *
2024-10-31 02:41:25 UTC	15738	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=fun
2024-10-31 02:41:25 UTC	252	IN	Data Raw: 69 6e 73 74 72 75 6d 65 6e 74 65 72 26 26 74 68 69 73 2e 69 6e 73 74 72 75 6d 65 6e 74 65 72 2e 63 6f 6e 66 69 67 75 72 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 2c 74 68 69 73 2e 73 65 74 75 70 55 6e 68 61 6e 64 6c 65 64 43 61 70 74 75 72 65 28 29 2c 74 68 69 73 7d 2c 6d 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 63 6f 6e 66 69 67 75 72 65 28 74 2c 65 29 3b 76 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 73 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 6c 61 73 74 45 72 72 6f 72 7d 2c 6d 2e 6c 61 73 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 6c Data Ascii: instrumenter&&this.instrumenter.configure(this.options),this.setupUnhandledCapture(),this},m.configure=function(t,e){if(g)return g.configure(t,e);v()},m.prototype.lastError=function(){return this.client.lastError},m.lastError=function(){if(g)return g.l
2024-10-31 02:41:25 UTC	805	IN	Data Raw: 61 73 74 45 72 72 6f 72 28 29 3b 76 28 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e 75 75 69 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 6c 6f 67 28 74 29 2c 7b 75 75 69 64 3a 65 7d 7d 2c 6d 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 6c 6f 67 2e 61 70 70 6c 79 28 67 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 76 28 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 Data Ascii: astError();v()},m.prototype.log=function(){var t=this._createItem(arguments),e=t.uuid;return this.client.log(t),{uuid:e}},m.log=function(){if(g)return g.log.apply(g,arguments);var t=y(arguments);v(t)},m.prototype.debug=function(){var t=this._createItem(ar
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e 75 75 69 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 77 61 72 6e 69 6e 67 28 74 29 2c 7b 75 75 69 64 3a 65 7d 7d 2c 6d 2e 77 61 72 6e 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 77 61 72 6e 69 6e 67 2e 61 70 70 6c 79 28 67 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 76 28 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e 75 75 69 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 Data Ascii: r t=this._createItem(arguments),e=t.uuid;return this.client.warning(t),{uuid:e}},m.warning=function(){if(g)return g.warning.apply(g,arguments);var t=y(arguments);v(t)},m.prototype.error=function(){var t=this._createItem(arguments),e=t.uuid;return this.cli
2024-10-31 02:41:25 UTC	9973	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 6e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 63 6f 6e 74 65 78 74 2c 72 29 3b 6f 2e 65 72 72 6f 72 3f 65 2e 63 6f 6e 74 65 78 74 3d 22 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 73 65 72 69 61 6c 69 7a 65 20 27 63 6f 6e 74 65 78 74 27 22 3a 65 2e 63 6f 6e 74 65 78 74 3d 6f 2e 76 61 6c 75 65 7c 7c 22 22 2c 65 2e 63 6f 6e 74 65 78 74 2e 6c 65 6e 67 74 68 3e 32 35 35 26 26 28 65 2e 63 6f 6e 74 65 78 74 3d 65 2e 63 6f 6e 74 65 78 74 2e 73 75 62 73 74 72 28 30 2c 32 35 35 29 29 7d 72 65 74 75 72 6e 7b 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3a 74 2c 64 61 74 61 3a 65 7d 7d 2c 67 65 74 54 72 61 6e 73 70 6f 72 74 46 72 6f 6d 4f 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 65 2e 68 6f 73 74 6e 61 Data Ascii: ){var o=n.stringify(e.context,r);o.error?e.context="Error: could not serialize 'context'":e.context=o.value\|\|"",e.context.length>255&&(e.context=e.context.substr(0,255))}return{access_token:t,data:e}},getTransportFromOptions:function(t,e,r){var n=e.hostna
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 61 6d 65 3a 69 2e 6e 61 6d 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 69 2e 64 65 73 63 72 69 70 74 69 6f 6e 7d 29 3b 6e 2e 73 65 74 28 65 2c 22 64 61 74 61 2e 63 6c 69 65 6e 74 2e 6a 61 76 61 73 63 72 69 70 74 2e 70 6c 75 67 69 6e 73 22 2c 73 29 2c 6f 28 6e 75 6c 6c 2c 65 29 7d 7d 2c 61 64 64 42 6f 64 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 2e 73 74 61 63 6b 49 6e 66 6f 3f 74 2e 73 74 61 63 6b 49 6e 66 6f 2e 74 72 61 63 65 43 68 61 69 6e 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 74 2e 73 74 61 63 6b 49 6e 66 6f 2e 74 72 61 63 65 43 68 61 69 6e 2c 69 3d 5b 5d 2c 73 3d 6f 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 73 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 75 28 74 2c 6f 5b 61 5d 2c 65 29 3b 69 2e 70 75 73 Data Ascii: ame:i.name,description:i.description});n.set(e,"data.client.javascript.plugins",s),o(null,e)}},addBody:function(t,e,r){t.stackInfo?t.stackInfo.traceChain?function(t,e,r){for(var o=t.stackInfo.traceChain,i=[],s=o.length,a=0;a<s;a++){var c=u(t,o[a],e);i.pus
2024-10-31 02:41:25 UTC	2851	IN	Data Raw: 69 63 79 26 26 74 68 69 73 2e 64 65 69 6e 73 74 72 75 6d 65 6e 74 43 6f 6e 74 65 6e 74 53 65 63 75 72 69 74 79 50 6f 6c 69 63 79 28 29 3a 74 68 69 73 2e 69 6e 73 74 72 75 6d 65 6e 74 43 6f 6e 74 65 6e 74 53 65 63 75 72 69 74 79 50 6f 6c 69 63 79 28 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 69 6e 73 74 72 75 6d 65 6e 74 4e 65 74 77 6f 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 74 68 69 73 2e 72 65 70 6c 61 63 65 6d 65 6e 74 73 2c 22 6e 65 74 77 6f 72 6b 22 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 74 72 75 6d 65 6e 74 4e 65 74 77 6f 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 72 29 7b 65 20 69 6e 20 72 26 26 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 72 5b 65 5d 29 Data Ascii: icy&&this.deinstrumentContentSecurityPolicy():this.instrumentContentSecurityPolicy()},p.prototype.deinstrumentNetwork=function(){l(this.replacements,"network")},p.prototype.instrumentNetwork=function(){var t=this;function e(e,r){e in r&&n.isFunction(r[e])
2024-10-31 02:41:25 UTC	9000	IN	Data Raw: 6e 64 6f 77 26 26 63 28 74 68 69 73 2e 5f 77 69 6e 64 6f 77 2c 22 66 65 74 63 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 69 29 7b 66 6f 72 28 76 61 72 20 73 3d 6e 65 77 20 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 75 3d 73 2e 6c 65 6e 67 74 68 3b 61 3c 75 3b 61 2b 2b 29 73 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 76 61 72 20 63 2c 6c 3d 73 5b 30 5d 2c 70 3d 22 47 45 54 22 3b 6e 2e 69 73 54 79 70 65 28 6c 2c 22 73 74 72 69 6e 67 22 29 3f 63 3d 6c 3a 6c 26 26 28 63 3d 6c 2e 75 72 6c 2c 6c 2e 6d 65 74 68 6f 64 26 26 28 70 3d 6c 2e 6d 65 74 68 6f 64 29 29 2c 73 5b 31 5d 26 26 73 5b 31 5d 2e 6d 65 74 68 6f 64 26 26 28 70 3d 73 5b 31 5d 2e 6d 65 74 68 Data Ascii: ndow&&c(this._window,"fetch",(function(e){return function(r,i){for(var s=new Array(arguments.length),a=0,u=s.length;a<u;a++)s[a]=arguments[a];var c,l=s[0],p="GET";n.isType(l,"string")?c=l:l&&(c=l.url,l.method&&(p=l.method)),s[1]&&s[1].method&&(p=s[1].meth
2024-10-31 02:41:25 UTC	8915	IN	Data Raw: 2c 74 68 69 73 2e 68 61 73 28 74 29 3f 74 68 69 73 2e 6d 61 70 5b 74 5d 3a 6e 75 6c 6c 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 28 74 29 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 68 69 73 2e 6d 61 70 29 74 68 69 73 2e 6d 61 70 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 74 2e 63 61 6c 6c 28 65 2c 74 68 69 73 2e 6d 61 70 5b 72 5d 2c 72 2c 74 68 69 73 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 Data Ascii: ,this.has(t)?this.map[t]:null},o.prototype.has=function(t){return this.map.hasOwnProperty(n(t))},o.prototype.forEach=function(t,e){for(var r in this.map)this.map.hasOwnProperty(r)&&t.call(e,this.map[r],r,this)},o.prototype.entries=function(){var t=[];retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	580	OUT	GET /analytics.js/v1/jYfhScQuNyTsDkItrVJy345jDYThvpkz/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:25 UTC	735	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 105589 Connection: close Date: Thu, 31 Oct 2024 02:41:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Thu, 25 Jul 2024 19:03:34 GMT ETag: "456de29af8a76c3ff3483e96c6514932" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=120 x-amz-version-id: y3X1wC8Jwvbse9vZT4P6a6_AMFZRJu_e Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 92ab13182d4b89ed20b3b5c10adc4f22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: a4bk80AITYDkJUB6AQ4bl8gK8rcTRZUlbNfMdEuGZmlE0ZxobCaimQ==
2024-10-31 02:41:25 UTC	1214	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 64 22 29 7c 7c 74 68 69 73 2e 66 69 65 6c 64 28 22 74 6f 22 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 3d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 75 73 65 72 49 64 7d 2c 34 38 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 63 6c 6f 6e 65 3d 76 6f 69 64 20 30 2c 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e Data Ascii: d")\|\|this.field("to")},s.prototype.to=s.prototype.userId},4814:function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.clone=void 0,e.clone=function t(e){if("[object Object]"===Object.prototype.toString.call(e)){var n={};for(var r in
2024-10-31 02:41:25 UTC	1024	IN	Data Raw: 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 74 2c 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 73 2e 63 61 6c 6c 28 65 29 3f 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3d 3d 3d 73 2e 63 61 6c 6c 28 74 29 7d 28 74 29 3f 6e 65 77 20 44 61 74 65 28 28 6e 3d 74 29 3c 33 31 35 35 37 36 65 35 3f 31 65 33 2a 6e 3a 6e 29 3a 72 2e 69 73 28 74 29 3f 72 2e 70 61 72 73 65 28 74 29 3a 69 2e 69 73 28 74 29 3f 69 2e 70 61 72 73 65 28 74 29 3a 6f 2e 69 73 28 74 29 3f 6f 2e 70 61 72 73 65 28 74 29 3a 6e 65 77 20 44 61 74 65 28 74 29 3b 76 61 72 20 65 2c 6e 7d 7d 2c 35 32 32 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 Data Ascii: oString;t.exports=function(t){return e=t,"[object Date]"===s.call(e)?t:function(t){return"[object Number]"===s.call(t)}(t)?new Date((n=t)<315576e5?1e3*n:n):r.is(t)?r.parse(t):i.is(t)?i.parse(t):o.is(t)?o.parse(t):new Date(t);var e,n}},5228:function(t,e){"
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 74 5b 65 5d 3d 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5c 2e 5d 2b 2f 67 2c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 74 2e 65 78 70 6f 72 74 73 3d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 2c 74 2e 65 78 70 6f 72 74 73 2e 66 69 6e 64 3d 74 2e 65 78 70 6f 72 74 73 2c 74 2e 65 78 70 6f 72 74 73 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 65 28 72 29 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 6e 2c 69 2c 6f 29 2c 74 7d 2c 74 2e 65 Data Ascii: Property(e)&&(t[e]=n),t}function i(t){return t.replace(/[^a-zA-Z0-9\.]+/g,"").toLowerCase()}t.exports=e((function(t,e){if(t.hasOwnProperty(e))return t[e]})),t.exports.find=t.exports,t.exports.replace=function(t,n,i,o){return e(r).call(this,t,n,i,o),t},t.e
2024-10-31 02:41:25 UTC	1514	IN	Data Raw: 2e 6c 6f 67 73 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6c 6f 67 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 73 3d 28 30 2c 6f 2e 70 69 29 28 28 30 2c 6f 2e 70 69 29 28 7b 7d 2c 65 29 2c 7b 6a 73 6f 6e 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 65 78 74 72 61 73 2c 6e 75 6c 6c 2c 22 20 22 29 2c 65 78 74 72 61 73 3a 65 2e 65 78 74 72 61 73 7d 29 3b 64 65 6c 65 74 65 20 73 2e 74 69 6d 65 3b 76 61 72 20 75 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 74 69 6d 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 22 3b 72 65 74 75 72 Data Ascii: .logs.length>1){var t=this._logs.reduce((function(t,e){var n,r,i,s=(0,o.pi)((0,o.pi)({},e),{json:JSON.stringify(e.extras,null," "),extras:e.extras});delete s.time;var u=null!==(i=null===(r=e.time)\|\|void 0===r?void 0:r.toISOString())&&void 0!==i?i:"";retur
2024-10-31 02:41:25 UTC	14870	IN	Data Raw: 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 61 69 6c 65 64 44 65 6c 69 76 65 72 79 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 46 61 69 6c 65 64 44 65 6c 69 76 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 66 61 69 6c 65 64 44 65 6c 69 76 65 72 79 3d 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 67 65 72 2e 6c 6f 67 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 6f 67 67 65 72 2e 66 6c 75 73 68 28 29 2c 74 68 69 73 2e 73 74 61 74 73 2e 66 6c 75 73 68 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 Data Ascii: ery=function(){return this._failedDelivery},t.prototype.setFailedDelivery=function(t){this._failedDelivery=t},t.prototype.logs=function(){return this.logger.logs},t.prototype.flush=function(){this.logger.flush(),this.stats.flush()},t.prototype.toJSON=func
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 79 70 65 3a 22 70 61 67 65 22 2c 6f 70 74 69 6f 6e 73 3a 69 7d 29 3b 76 61 72 20 75 3d 7b 74 79 70 65 3a 22 70 61 67 65 22 2c 70 72 6f 70 65 72 74 69 65 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 72 29 2c 6f 70 74 69 6f 6e 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 69 29 2c 69 6e 74 65 67 72 61 74 69 6f 6e 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 6f 29 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 28 75 2e 63 61 74 65 67 6f 72 79 3d 65 2c 75 2e 70 72 6f 70 65 72 74 69 65 73 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 75 2e 70 72 6f 70 65 72 74 69 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 7b 7d 2c 75 2e 70 72 6f 70 65 72 74 69 65 73 2e 63 61 74 65 67 6f 72 79 3d 65 29 2c 6e 75 6c 6c 21 3d 3d 6e 26 26 28 75 2e 6e 61 6d 65 3d 6e 29 2c 74 68 69 73 Data Ascii: ype:"page",options:i});var u={type:"page",properties:(0,t.pi)({},r),options:(0,t.pi)({},i),integrations:(0,t.pi)({},o)};return null!==e&&(u.category=e,u.properties=null!==(s=u.properties)&&void 0!==s?s:{},u.properties.category=e),null!==n&&(u.name=n),this
2024-10-31 02:41:26 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 3d 6e 2c 74 68 69 73 2e 69 64 4b 65 79 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 63 6f 6f 6b 69 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6b 65 79 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 58 2e 63 6f 6f 6b 69 65 2e 6b 65 79 2c 74 68 69 73 2e 74 72 61 69 74 73 4b 65 79 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6b 65 79 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 3f 73 3a 58 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 2c 74 68 69 73 2e 61 6e 6f 6e 4b 65 79 3d 22 61 6a 73 5f 61 6e 6f 6e 79 6d 6f 75 73 5f 69 Data Ascii: ,this.cookieOptions=n,this.idKey=null!==(i=null===(r=e.cookie)\|\|void 0===r?void 0:r.key)&&void 0!==i?i:X.cookie.key,this.traitsKey=null!==(s=null===(o=e.localStorage)\|\|void 0===o?void 0:o.key)&&void 0!==s?s:X.localStorage.key,this.anonKey="ajs_anonymous_i
2024-10-31 02:41:26 UTC	16384	IN	Data Raw: 28 22 2d 22 29 2c 22 49 6e 74 65 67 72 61 74 69 6f 6e 22 29 2c 72 3d 77 69 6e 64 6f 77 5b 6e 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 72 2e 49 6e 74 65 67 72 61 74 69 6f 6e 3b 72 65 74 75 72 6e 20 69 3f 28 74 5b 65 2e 6e 61 6d 65 5d 3d 69 2c 74 29 3a 28 74 5b 65 2e 6e 61 6d 65 5d 3d 72 2c 74 29 7d 29 2c 7b 7d 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 68 69 66 74 28 29 3b 65 26 26 21 74 68 69 73 5b 65 5d 7c 7c 74 68 69 73 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 6e 7d 28 79 2e 51 29 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e Data Ascii: ("-"),"Integration"),r=window[n];if(!r)return t;var i=r.Integration;return i?(t[e.name]=i,t):(t[e.name]=r,t)}),{})},enumerable:!1,configurable:!0}),n.prototype.push=function(t){var e=t.shift();e&&!this[e]\|\|this[e].apply(this,t)},n}(y.Q),St=function(e){fun
2024-10-31 02:41:26 UTC	5047	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 74 29 7d 29 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 2e 6d 65 73 73 61 67 65 29 2c 74 7d 29 29 29 5d 3b 63 61 73 65 20 32 3a 67 3d 4f 2e 73 65 6e 74 28 29 2c 4f 2e 6c 61 62 65 6c 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6d 3d 67 2c 72 2e 75 70 64 61 74 65 43 44 4e 53 65 74 74 69 6e 67 73 26 26 28 6d 3d 72 2e 75 70 64 61 74 65 43 44 4e 53 65 74 74 69 6e 67 73 28 6d 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 2e 64 69 73 61 62 6c 65 3f 5b 33 2c 35 5d 3a 5b 34 2c 72 2e 64 69 73 61 62 6c 65 28 6d 29 5d 3b 63 61 73 65 20 34 3a 69 66 28 4f 2e 73 65 6e 74 28 29 29 72 65 74 75 72 6e 5b 32 2c 5b 6e 65 Data Ascii: w new Error(t)}))})).catch((function(t){throw console.error(t.message),t})))];case 2:g=O.sent(),O.label=3;case 3:return m=g,r.updateCDNSettings&&(m=r.updateCDNSettings(m)),"function"!=typeof r.disable?[3,5]:[4,r.disable(m)];case 4:if(O.sent())return[2,[ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49752	18.66.122.50	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:24 UTC	516	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:24 UTC	721	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 690296 Connection: close Last-Modified: Wed, 30 Oct 2024 20:41:44 GMT Accept-Ranges: bytes Server: Cloudfront Date: Thu, 31 Oct 2024 02:41:23 GMT Cache-Control: max-age=60 Etag: "78aaea0b91bf05493002b40f2441bc59" Vary: Accept-Encoding Via: 1.1 7b314c2b827b3a655861e27775634208.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 2 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: HkkHWn87oe2mavauC97qT8y4frcLFHrq3OnFLbP97sZuqxXPHbTQTQ==
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 29 7d 29 2c 63 3d 22 73 68 69 70 70 69 6e 67 22 2c 73 3d 22 62 69 6c 6c 69 6e 67 22 2c 75 3d 28 30 2c 72 2e 6f 72 29 28 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 64 69 73 61 62 6c 65 64 22 29 7d 29 2c 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 29 2c 61 70 69 4b 65 79 3a 72 2e 5a 5f 7d 29 29 2c 6c 3d 7b 61 75 74 6f 6d 61 74 69 63 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 64 69 73 61 62 6c 65 64 3a 22 64 69 73 61 62 6c 65 64 22 2c 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 3a 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 7d 2c 64 3d 7b 73 74 72 69 70 65 3a 22 73 74 72 69 70 65 22 2c 6d 65 72 63 68 61 6e 74 Data Ascii: )}),c="shipping",s="billing",u=(0,r.or)((0,r.mC)({mode:(0,r.kw)("automatic","disabled")}),(0,r.mC)({mode:(0,r.kw)("google_maps_api"),apiKey:r.Z_})),l={automatic:"automatic",disabled:"disabled",google_maps_api:"google_maps_api"},d={stripe:"stripe",merchant
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 73 67 29 29 29 2c 70 61 79 70 61 6c 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 2c 6c 69 6e 6b 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 2c 6b 6c 61 72 6e 61 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 7d 2c 5f 29 29 2c 77 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 61 70 70 6c 65 50 61 79 3a 28 30 2c 61 2e 6a 74 29 28 28 30 2c 61 2e 6b 77 29 28 22 62 6c 61 63 6b 22 2c 22 77 68 69 74 65 22 Data Ascii: (0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.sg))),paypal:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ))),link:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ))),klarna:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ)))},_)),w=Object.freeze({applePay:(0,a.jt)((0,a.kw)("black","white"
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 65 61 6c 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6b 72 5f 6d 61 72 6b 65 74 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6e 67 5f 63 61 72 64 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6e 67 5f 6d 61 72 6b 65 74 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 70 61 79 70 61 6c 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 Data Ascii: eal:(0,l.jt)((0,l.kw)("auto","always","never")),kr_market:(0,l.jt)((0,l.kw)("auto","always","never")),ng_card:(0,l.jt)((0,l.kw)("auto","always","never")),ng_market:(0,l.jt)((0,l.kw)("auto","always","never")),paypal:(0,l.jt)((0,l.kw)("auto","always","never
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 22 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 65 7d 7d 29 29 29 29 7d 29 29 7d 28 69 2c 72 2c 6e 2e 5f 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 2c 63 29 3b 63 61 73 65 20 6d 2e 45 52 52 4f 52 3a 72 65 74 75 72 6e 20 6e 2e 5f 66 61 6c 6c 62 61 63 6b 54 6f 52 65 64 69 72 65 63 74 4f 6e 45 72 72 6f 72 73 3f 6c 28 69 2c 72 2c 6f 2c 61 2c 6e 2e 5f 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 29 3a 69 2e 61 63 74 69 6f 6e 2e 6c 6f 63 61 6c 69 7a 65 45 72 72 6f 72 28 7b 63 6f 64 65 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 75 6e 65 78 70 65 63 74 65 64 22 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 65 7d 7d 29 29 3b 63 61 73 65 20 6d 2e 44 55 50 4c 49 43 Data Ascii: "}).then((function(e){return{error:e}}))))}))}(i,r,n._paymentMethod,c);case m.ERROR:return n._fallbackToRedirectOnErrors?l(i,r,o,a,n._paymentMethod):i.action.localizeError({code:"errors.code.unexpected"}).then((function(e){return{error:e}}));case m.DUPLIC
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 2e 5a 45 52 4f 5f 52 45 53 55 4c 54 53 3a 72 3d 7b 70 72 65 64 69 63 74 69 6f 6e 73 3a 5b 5d 2c 73 74 61 74 75 73 3a 22 7a 65 72 6f 52 65 73 75 6c 74 73 22 7d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 3d 69 28 74 29 7d 6e 2e 73 65 6e 64 28 7b 61 63 74 69 6f 6e 3a 22 67 6f 6f 67 6c 65 2d 6d 61 70 73 2d 70 72 65 64 69 63 74 69 6f 6e 73 22 2c 70 61 79 6c 6f 61 64 3a 7b 64 61 74 61 3a 7b 74 61 67 3a 46 2c 76 61 6c 75 65 3a 72 7d 7d 7d 29 7d 29 29 7d 29 29 7d 2c 4b 3d 6e 28 35 33 31 31 29 2c 59 3d 6e 28 37 30 33 30 29 2c 57 3d 5b 22 61 74 74 61 63 68 4c 69 6e 6b 41 63 63 6f 75 6e 74 53 65 73 73 69 6f 6e 46 6f 72 50 61 79 6d 65 6e 74 22 2c 22 61 74 74 61 63 68 4c 69 6e 6b 41 63 63 6f 75 6e 74 53 65 73 73 69 6f 6e 46 6f 72 53 65 74 75 70 22 2c 22 61 75 74 Data Ascii: .ZERO_RESULTS:r={predictions:[],status:"zeroResults"};break;default:r=i(t)}n.send({action:"google-maps-predictions",payload:{data:{tag:F,value:r}}})}))}))},K=n(5311),Y=n(7030),W=["attachLinkAccountSessionForPayment","attachLinkAccountSessionForSetup","aut
2024-10-31 02:41:25 UTC	135	IN	Data Raw: 5a 29 28 65 2c 5b 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4f 75 74 65 72 41 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2c 72 3d 65 2e 6e 6f 6e 63 65 2c 6f 3d 65 2e 61 63 74 69 6f 6e 4e 61 6d 65 2c 69 3d 65 2e 72 65 71 75 65 73 74 3b 74 72 79 7b 76 61 72 20 61 3d 74 68 69 73 2e 6f 75 74 65 72 41 63 74 69 6f 6e 5b 6f 5d 3b 74 3d 75 65 2e 72 Data Ascii: Z)(e,[{key:"handleOuterAction",value:function(e){var t,n=this,r=e.nonce,o=e.actionName,i=e.request;try{var a=this.outerAction[o];t=ue.r
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 65 73 6f 6c 76 65 28 61 28 69 29 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 75 65 2e 72 65 6a 65 63 74 28 65 29 7d 74 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 46 72 61 6d 65 2e 73 65 6e 64 28 7b 61 63 74 69 6f 6e 3a 22 73 74 72 69 70 65 2d 6f 75 74 65 72 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2d 61 63 74 69 6f 6e 2d 72 65 73 70 6f 6e 73 65 22 2c 70 61 79 6c 6f 61 64 3a 7b 6e 6f 6e 63 65 3a 72 2c 72 65 73 70 6f 6e 73 65 3a 6e 75 6c 6c 21 3d 65 3f 65 3a 6e 75 6c 6c 7d 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 46 72 61 6d 65 2e 73 65 6e 64 28 7b 61 63 74 69 6f 6e 3a 22 73 74 72 69 70 65 2d 6f 75 74 65 72 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2d 61 63 74 69 6f 6e 2d 65 Data Ascii: esolve(a(i))}catch(e){t=ue.reject(e)}t.then((function(e){n._controllerFrame.send({action:"stripe-outer-controller-action-response",payload:{nonce:r,response:null!=e?e:null}})}),(function(e){n._controllerFrame.send({action:"stripe-outer-controller-action-e
2024-10-31 02:41:25 UTC	16384	IN	Data Raw: 68 3e 30 3b 29 7b 76 61 72 20 69 3d 6e 2e 6d 65 73 73 61 67 65 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 69 26 26 69 28 29 7d 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 2c 6e 2e 66 72 61 6d 65 26 26 28 6e 2e 66 72 61 6d 65 2e 64 61 74 61 73 65 74 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 22 74 72 75 65 22 29 7d 65 6c 73 65 7b 76 61 72 20 61 3d 6e 2e 72 65 73 6f 6c 76 65 72 2e 67 65 74 52 65 73 6f 6c 76 65 72 41 6e 64 44 65 6c 65 74 65 28 74 29 3b 61 26 26 61 28 74 2e 62 6f 64 79 29 7d 7d 7d 2c 74 68 69 73 2e 63 68 61 6e 6e 65 6c 3d 74 2e 63 68 61 6e 6e 65 6c 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 65 64 50 61 74 68 3d 74 2e 66 69 6e 67 65 72 70 72 69 6e 74 65 64 50 61 74 68 2c 74 68 69 73 2e 66 72 61 6d 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 Data Ascii: h>0;){var i=n.messageQueue.shift();i&&i()}n.initialized=!0,n.frame&&(n.frame.dataset.initialized="true")}else{var a=n.resolver.getResolverAndDelete(t);a&&a(t.body)}}},this.channel=t.channel,this.fingerprintedPath=t.fingerprintedPath,this.frame=null,this.f
2024-10-31 02:41:25 UTC	6396	IN	Data Raw: 20 74 68 69 73 2e 5f 68 6f 73 74 65 64 50 61 79 6d 65 6e 74 55 69 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6d 65 73 73 61 67 65 4b 65 79 73 7d 7d 2c 7b 6b 65 79 3a 22 65 78 63 6c 75 64 65 46 72 6f 6d 4f 76 65 72 66 6c 6f 77 49 63 6f 6e 52 6f 74 61 74 69 6f 6e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 6f 73 74 65 64 50 61 79 6d 65 6e 74 55 69 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 66 65 61 74 75 72 65 73 2e 65 78 63 6c 75 64 65 46 72 6f 6d 4f 76 65 72 66 6c 6f 77 49 63 6f 6e 52 6f 74 61 74 69 6f 6e 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 6f 6e 66 69 67 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 28 29 5b 74 68 69 73 2e 5f 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 54 79 70 65 5d 7d Data Ascii: this._hostedPaymentUiConfiguration.messageKeys}},{key:"excludeFromOverflowIconRotation",get:function(){return this._hostedPaymentUiConfiguration.features.excludeFromOverflowIconRotation}},{key:"_config",get:function(){return l()[this._paymentMethodType]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49753	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:25 UTC	532	OUT	GET /en_GB/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:25 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 700162d44bec8910bc18bad17fb71ef8 ETag: "4165c44755b7b6c6fd25d5e0562709f8" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: cAFi1EvsiRC8GLrRf7ce+A== Expires: Thu, 31 Oct 2024 02:56:19 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-10-31 02:41:25 UTC	877	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-10-31 02:41:25 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:25 UTC	3092	IN	Data Raw: 2a 31 37 33 30 33 34 32 31 37 39 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 37 38 32 34 35 32 33 2c 65 6e 5f 47 42 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1730342179,,JIT Construction: v1017824523,en_GB//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 02:41:25 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=223514 Date: Thu, 31 Oct 2024 02:41:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 02:41:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:25 UTC	816	OUT	GET /assets/webpack-assets/GT-Walsheim-Pro-Regular.02a342d8130585953c407995c0f558a6.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:25 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:25 GMT Content-Type: application/font-woff Content-Length: 65212 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1726806092&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=ypj9dZsfV8hLbShQVQN%2Fe3MFKF8d48cUt6g6YNLD5Lk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1726806092&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=ypj9dZsfV8hLbShQVQN%2Fe3MFKF8d48cUt6g6YNLD5Lk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:10:38 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3950 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db0493739f14623-DFW
2024-10-31 02:41:25 UTC	459	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 fe bc 00 0c 00 00 00 02 08 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 0f 34 00 00 b5 41 00 01 62 ce e6 46 59 5e 47 44 45 46 00 00 c4 78 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 c5 6c 00 00 2d 05 00 00 6e 0a 8d ea ef 75 47 53 55 42 00 00 f2 74 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 07 bc 00 00 00 4f 00 00 00 60 6a 62 81 6c 63 6d 61 70 00 00 0a 04 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 33 00 00 00 36 10 77 48 0a 68 68 65 61 00 00 07 9c 00 00 00 20 00 00 00 24 05 f7 06 9e 68 6d 74 78 00 00 01 58 00 00 06 43 00 00 0f 20 11 39 96 80 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 08 0c 00 00 01 Data Ascii: wOFFOTTOXCFF 4AbFY^GDEFxdz\|GPOSl-nuGSUBtF.#OS/2O`jblcmap/9"head$36wHhhea $hmtxXC 9maxpPname
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 5c 3d a1 5e 35 e1 f6 5a 0a 13 b2 ec 8d ca c2 15 d4 14 fa cb bf 0c 0b 3c cf 7b 8a 64 a7 b5 3b e2 f5 0a e2 5c 2a f0 b9 81 f9 fc fe 1e e4 c5 f9 17 61 2d c7 d3 7a da a1 1e f6 ea 77 e5 df 10 e7 a0 2b 6b f4 be 6e 10 b4 15 d6 dc 07 c4 c4 4f e9 63 fd 15 b8 0e db b8 71 8a 95 e4 7a 41 ae 5b 25 ae 63 91 0d f2 d0 f5 1f 21 ea 5e c4 f5 2f c2 5e 6c 71 61 f5 41 29 d4 c6 08 f5 ac f5 ca 6a f6 f2 a4 ce d3 f7 35 a4 1f 97 bf 6f bf 51 49 3f 50 29 5b 26 77 1c 8e a6 e7 c8 b3 eb a8 64 6f 21 5e 03 5d 46 b5 69 5f e5 9d df 51 9d 7d 43 8d 61 8a fa ab b5 3b e6 15 c9 ae ad a3 11 af 57 52 fb 17 f8 48 3e bf 7f 80 ca f1 26 75 08 ea 59 4b 2f d4 e9 fb e5 4f c1 6f 29 97 88 3f b2 cf 6b 88 72 23 e5 5f 12 f7 c4 f5 e6 6b 4e eb 6e b0 5b 7b 5c b6 1b 7a ac 76 0d ce 68 9f c7 22 e8 52 24 7b f8 f6 ba Data Ascii: \=^5Z<{d;\*a-zw+knOcqzA[%c!^/^lqaA)j5oQI?P)[&wdo!^]Fi_Q}Ca;WRH>&uYK/Oo)?kr#_kNn[{\zvh"R${
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: ba e2 b9 cb b8 bf e3 f3 ee ff 7f e6 e3 15 5e 9e fa 73 3f e7 f9 db 26 ee 9a e2 0d 12 b7 4f dc b6 c0 f5 3d fe 6b cf ec b6 6f e9 60 98 c5 1f 3f cc 7a 88 95 f5 ad ff 7f 97 7a ed f1 b2 50 45 99 fb 5b bc d7 45 6c 59 77 b2 07 69 29 31 fb 8f 94 a5 3f de 52 2a 97 88 af 81 df c3 65 e1 21 89 6b c3 cf e1 2e 70 27 36 ff 8f e4 5e 1d 7a 61 af ed d4 ca 9f 00 2b e7 aa db 00 78 01 63 60 64 60 60 6e f9 cf cd c0 c0 d2 f6 f7 df 7f 17 96 22 a0 08 0a 60 3e 01 00 90 ef 06 9d 78 01 63 60 66 d2 66 9c c0 c0 ca c0 c1 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 45 80 7c a0 14 0c 30 b1 33 20 81 50 ef 70 3f 06 07 06 de df 4c 4c 7f ff 8b 32 4c 64 6e 61 f8 aa c0 c0 30 1d 24 c7 78 96 69 0f 90 52 60 60 06 00 f0 77 0c af 00 78 01 2c c6 25 62 c2 71 00 c7 d1 cf 4f e6 ee 2e 75 ae 6d c3 1a c7 c0 Data Ascii: ^s?&O=ko`?zzPE[ElYwi)1?R*e!k.p'6^za+xc`d``n"`>xc`ffE\|03 Pp?LL2Ldna0$xiR``wx,%bqO.um
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 6e 4a 28 bf 19 ac 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 17 75 08 23 82 48 fc 49 a0 35 cd 68 41 07 5a 6a 0a ed 18 44 3f 06 30 90 31 f4 55 1e d6 b2 9c 95 6c 64 15 1b 58 cd 16 f6 b3 93 3d ec e5 30 19 64 91 ad a1 5c e1 36 d7 b8 c1 23 6e 6a 2a 0f f8 c2 07 3e f1 99 7f bc 97 a8 cd 3a aa b2 02 07 d6 e3 cc 26 dc d8 8a 85 6d b8 b0 19 2b db b1 b1 03 5f 0e e0 ce 2e bc d9 87 1f 07 f1 60 37 81 24 13 40 12 c1 a4 12 44 0a a1 a4 13 42 1a 0d 38 4e 3d 8e 12 4e 26 f5 39 46 14 87 a8 cb 11 1a 72 82 46 9c e2 34 8d c9 a1 29 67 69 c2 19 a2 39 47 0c e7 89 e5 02 f1 5c 26 8e 4b 5c 24 91 ab b4 e5 2e cd b9 4e 1b ee d0 8a 5b 74 e4 31 9d 79 4a 27 9e d0 85 67 74 e7 25 dd 78 41 57 9e d3 9b b7 f4 e2 0d 3d 79 cd 70 7e 32 84 6f f4 e7 23 c3 f8 Data Ascii: nJ(5AqWPT8RW\|u#HI5hAZjD?01UldX=0d\6#nj>:&m+_.`7$@DB8N=N&9FrF4)gi9G\&K\$.N[t1yJ'gt%xAW=yp~2o#
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 3c 84 17 f0 1e be 41 28 fc c5 c8 c8 18 13 13 60 72 4c 87 59 b1 08 56 c6 46 d8 12 3b 60 77 ec 87 43 71 0c 4e c6 59 b8 10 57 e0 7a dc 86 7b f1 08 9e c6 4b 78 13 1f e0 73 7c 87 5f 31 04 ff 50 24 22 8a 41 f1 29 19 a5 a5 2c 94 9b 0a 51 49 aa 40 d5 a9 1e 35 a5 36 d4 99 7a d1 40 1a 41 e3 69 1a cd a5 25 b4 9a 36 d1 4e 3a 40 c7 e9 1c 5d a5 3b f4 98 5e d1 47 0a a0 1f 1c 8e a3 b2 72 6c 4e c4 29 39 03 67 e7 7c 5c 94 cb 70 65 ae c5 0d b9 05 b7 e7 6e dc 97 87 f0 68 9e c4 33 79 01 2f e7 75 bc 95 f7 f0 61 3e c5 17 f9 06 df e7 67 fc 96 bf 70 30 ff 96 88 82 12 5d e2 49 52 49 23 99 25 97 14 94 12 52 5e aa 49 5d 69 22 ad a5 97 8c 94 19 b2 5c b6 c9 51 b9 22 8f e5 93 fc 52 d4 f8 9a 4e f3 6a 19 ad ad cd b5 b3 f6 d7 d1 3a 5d 17 eb 7a dd ad 87 f4 a4 5e d0 eb 7a 4f 9f ea 1b fd ac Data Ascii: <A(`rLYVF;`wCqNYWz{Kxs\|_1P$"A),QI@56z@Ai%6N:@];^GrlN)9g\|\penh3y/ua>gp0]IRI#%R^I]i"\Q"RNj:]z^zO
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 8f 95 3d 7c ab 70 8f 19 17 47 28 b2 5b 64 38 1e 64 10 0d 32 8b 74 d6 d8 fb 3f 40 09 ac 81 04 6c 80 2d b0 03 2a e0 35 f0 06 a8 81 5b a0 01 5a 60 0f fc 0b 74 40 0f 0c c0 08 dc 01 f7 c0 03 f0 08 3c 01 f3 93 2e a6 13 36 53 36 33 36 73 98 09 9b ab db 96 05 1b ac e2 1f d5 f4 8d 05 c9 09 05 50 74 47 73 a0 f0 21 50 94 f2 d9 82 42 b9 fd 47 72 37 22 ba e7 35 fc df 3e 87 a8 2a 1a 3a c6 ff f4 a9 10 b6 5a d8 78 71 f0 fd cf 13 10 f1 20 d9 72 54 46 41 43 45 c7 30 f0 a9 8d 89 e5 6c 60 a2 20 bb f2 aa 8a 8e 86 e5 ca c1 e7 41 af b3 a2 65 a8 f1 20 a3 62 a2 63 c3 ce 19 f0 20 a3 fe 47 79 b2 ea 98 d8 30 be 02 1e 64 54 74 4c cb aa 32 be 83 3a 2a 22 a1 a0 61 60 e1 fd 9f 37 e0 41 46 45 c7 c4 81 a7 3d 01 0f 32 3a 2a 0e 8c 7f 41 6d f5 a0 22 63 a3 ff 47 89 0f 02 9c 75 74 ab e3 fa f1 Data Ascii: =\|pG([d8d2t?@l-5[Z`t@<.6S636sPtGs!PBGr7"5>:Zxq rTFACE0l` Ae bc Gy0dTtL2:"a`7AFE=2:Am"cGut
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: f8 66 75 b1 d1 54 11 92 12 34 63 3a b4 48 06 66 40 1b 66 4a bb 66 4b 27 e6 06 e9 c2 42 e9 d6 62 e8 c5 12 a9 c0 b2 30 7d 58 03 fd 5a 0b 83 58 17 27 0b 9b 02 0c 61 2b 0c 63 1b 8c 48 0e 8c 61 bb 64 63 27 8c 63 57 90 09 ec d3 41 1c c0 a1 00 d5 30 89 a3 30 15 70 2c e8 1c 4e e9 2c ce c0 7f 9f 87 ff 9f 05 99 c7 25 48 4e b0 80 cb b0 28 79 b8 02 cb b8 2a 2b ba 2e 6b b8 19 64 1d 77 65 43 f7 61 0b 0f a2 6c e3 05 ec 48 3e ec e1 15 5e e2 b5 de e1 2d de 87 29 c0 c7 20 fb f8 0a 07 f8 06 87 52 04 c7 f8 2e 99 90 0b 85 f8 09 27 f8 25 c8 29 fe d0 df f8 0b ff 04 68 80 b3 7f 1c cd 03 b0 06 64 16 00 d0 f3 dd 7b df ef f7 b2 6d db b6 6d db b6 ed 1a 66 db 76 e3 34 6c 90 6d db b5 bb 99 7b c6 3c a2 f1 6e 44 64 74 45 47 f4 c4 40 f4 f9 40 0c f9 50 8c 8b 11 1f 89 09 2e a1 cb 89 e9 5c Data Ascii: fuT4c:Hf@fJfK'Bb0}XZX'a+cHadc'cWA00p,N,%HN(y*+.kdweCalH>^-) R.'%)hd{mmfv4lm{<nDdtEG@@P.\
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: da 21 4c 41 78 1d e1 63 08 df 43 f8 23 19 aa 64 5c 24 d3 90 cc 13 b2 dc c8 6a 24 5b 85 ec 5a b2 9f 23 c7 81 9c 76 72 a5 c9 ad 26 4f 9a 3c 17 f2 ba 39 a3 c6 99 3a ce 3c 4f be 3d f9 ad 9c 95 e4 6c 21 e7 6e e6 9c 21 e7 ca 39 f7 0d e7 6f e7 7c 0d 17 a4 b9 f0 28 17 73 28 f0 a5 f0 5e 0a 4b 28 7c 80 c2 8f 28 b2 a7 68 96 a2 a7 29 56 a4 b8 88 e2 5e 4a ee a0 24 8d 92 c7 29 95 a1 d4 87 d2 59 ca 6e a1 cc 9c b2 3a ca 5e a3 ec 07 ca 73 28 3f a1 42 9b 8a 22 2a 3e a4 b2 9c ca df a9 b2 a7 aa 9a aa 9f a9 8e a5 fa 41 aa 3f a7 26 98 9a 0b d4 0c 50 f3 05 b5 4e d4 86 53 db 42 ed 29 b5 ef 53 fb 33 75 9a d4 c5 51 37 4b dd 7d d4 7d 44 fd 1d d4 bb 53 bf 45 fd 7b 34 84 d0 50 46 43 1f 0d cf d2 28 45 63 2d 8d 97 69 7c 81 a6 1b 68 b2 a6 49 48 d3 3f 34 ab d0 1c 45 f3 20 cd a7 34 ff 46 Data Ascii: !LAxcC#d\$j$[Z#vr&O<9:<O=l!n!9o\|(s(^K(\|(h)V^J$)Yn:^s(?B"*>A?&PNSB)S3uQ7K}}DSE{4PFC(Ec-i\|hIH?4E 4F
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 1c df 9f f8 bb e3 bf 48 c0 46 60 0c 81 5f 09 36 23 38 86 e0 39 82 9f 12 fc 93 50 94 d0 40 42 0b 08 dd 25 f4 07 61 33 e1 2a 84 fb 13 fe 94 f0 bf 44 ac 44 52 44 3a 13 d9 45 e4 16 51 0d d1 3c d1 56 44 67 10 3d 4c f4 73 62 8d 89 f5 22 36 9b d8 06 62 6f 11 b7 13 2f 4d 7c 04 f1 f5 c4 2f 13 ff 95 84 8d 44 4d 12 a7 48 bc 46 b2 17 c9 a5 24 2f 91 fc 91 94 93 54 15 52 03 48 ad 20 75 9d d4 7f 14 36 a0 d8 26 8a a0 a8 0b 69 2f e9 1c e9 86 a4 bb 93 9e 44 7a 39 e9 63 a4 5f 27 fd 0d 19 09 19 2f 99 2c 99 c6 64 fa 93 99 42 66 0b 99 8f c9 bc 20 6b 27 5b 9c 6c 27 b2 93 c8 6e 22 7b 9f 9c 8c 5c 6d 72 9d c8 ad 24 77 8f bc 85 7c 5d f2 2b 1e 4e 18 bb f5 d6 8e 63 db ff dc fe b0 ca 97 0f 0b b7 18 0f 6d 7b 7b dd b9 f5 93 be 78 d8 fb 8b 97 2f 8f f7 ec f9 b2 40 ef 4e bc 2c 68 b4 b3 d7 Data Ascii: HF`_6#89P@B%a3*DDRD:EQ<VDg=Lsb"6bo/M\|/DMHF$/TRH u6&i/Dz9c_'/,dBf k'[l'n"{\mr$w\|]+Ncm{{x/@N,h
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 3e 87 26 60 ae 22 85 24 94 ab 12 c5 27 cb 51 2c 5e 13 ed 39 1d 85 7c 31 e1 4d 69 44 e7 42 fd 49 a3 64 7a 52 4f 8e 5d ce 83 af 54 5a 01 4c b9 d2 b4 93 76 b4 72 b9 57 96 78 2b c3 28 a4 a0 7f 01 ec 2d b0 28 40 15 f2 08 22 90 bf c2 a3 0c a8 f9 7c c2 d5 f6 41 02 31 08 a3 d8 74 b3 a3 4e a1 89 aa 6b 67 4e 65 3c 8a b3 36 e3 0b 68 30 ee f0 80 f0 c4 b8 7d 4f 52 ad 6d cc f0 67 2e 3c 54 9f 4c b1 8f b2 67 07 cd 18 a6 ea 63 ed d0 b1 d9 f0 2b 2f a5 35 d6 f2 59 07 e8 c8 2b ed 02 dc c5 0f 79 86 30 0b d9 3c cb b8 40 fc 00 4e 79 da 2d 66 e0 44 2b 93 75 eb f5 5a 01 e0 9a 82 54 c4 df ee 75 1e 98 0a e2 4c 13 ad 13 43 14 43 47 36 6b 3e f4 12 28 78 d1 c9 44 3b 93 21 a6 af cd a0 2d af 5c a7 5b 3e 1b c4 cb 0a 58 69 9c 4f c3 0a d4 7b cd 69 32 54 7b 9e 0c 11 cf e3 5b a5 a8 f6 81 96 Data Ascii: >&`"$'Q,^9\|1MiDBIdzRO]TZLvrWx+(-(@"\|A1tNkgNe<6h0}ORmg.<TLgc+/5Y+y0<@Ny-fD+uZTuLCCG6k>(xD;!-\[>XiO{i2T{[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:25 UTC	822	OUT	GET /assets/webpack-assets/GT-Walsheim-Pro-Light-Oblique.7fd9c584681c485d02b3d6c4574dfdb1.woff HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:25 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:25 GMT Content-Type: application/font-woff Content-Length: 70124 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1709616513&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Ln91i4TS9mp71FEayfzP7uEUe4T9dthXbVWk6WwNlxs%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1709616513&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Ln91i4TS9mp71FEayfzP7uEUe4T9dthXbVWk6WwNlxs%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:10:38 GMT Cache-Control: public, max-age=864000 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3950 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8db049375ed42e19-DFW
2024-10-31 02:41:25 UTC	463	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 01 11 ec 00 0c 00 00 00 02 3e d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 10 18 00 00 c7 e8 00 01 99 2b 68 f6 91 b0 47 44 45 46 00 00 d8 00 00 00 00 f1 00 00 01 64 7a 09 7c 14 47 50 4f 53 00 00 d8 f4 00 00 2c af 00 00 6d 98 62 e6 d4 7e 47 53 55 42 00 01 05 a4 00 00 0c 46 00 00 1a 2e fb f4 95 23 4f 53 2f 32 00 00 08 7c 00 00 00 52 00 00 00 60 69 fc 80 3e 63 6d 61 70 00 00 0a e4 00 00 05 1b 00 00 07 0e 2f 39 22 dc 68 65 61 64 00 00 01 24 00 00 00 34 00 00 00 36 10 c5 48 2f 68 68 65 61 00 00 08 58 00 00 00 23 00 00 00 24 06 ac 0a 33 68 6d 74 78 00 00 01 58 00 00 07 00 00 00 0f 20 fd 60 f6 5e 6d 61 78 70 00 00 01 1c 00 00 00 06 00 00 00 06 03 c8 50 00 6e 61 6d 65 00 00 08 d0 00 00 02 Data Ascii: wOFFOTTO>CFF +hGDEFdz\|GPOS,mb~GSUBF.#OS/2\|R`i>cmap/9"head$46H/hheaX#$3hmtxX `^maxpPname
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: ce 52 53 f4 1e b5 d8 8c ae b6 63 b4 c8 96 11 d9 27 9f a8 58 17 3a 42 bf 00 77 96 02 c2 d9 60 aa 3b df ff 05 9d 3b 7f 3e ee 2e e1 3e ff 11 f6 08 ed dc 43 43 ef 5c c0 83 8c 73 ff 02 42 3e 0a 58 11 e2 50 42 be 06 21 6f 05 84 3c e6 e3 f2 ec f2 3a 1c 5c de f3 71 f9 2f 80 77 31 48 b3 ea 21 63 47 b8 08 91 ea 4d 56 71 da 33 99 bf 41 bf 55 46 7f c8 7d cb fc 93 48 3b 6a 40 5b 02 93 bd be 0a ea cd 6a 65 cc c7 55 66 7a 14 63 ae cf fc 4c 65 f6 c7 aa 36 3f d6 95 b6 42 0b cc 07 75 99 d3 e5 13 6d 57 a5 23 f4 0b 19 f1 1f f8 02 24 21 1a 06 9c bd 80 32 ce 1b ee 02 69 b8 10 ea 42 bf cc 7c c1 c7 46 fd 36 f7 57 62 d2 dd 77 e0 ce c0 1c 71 95 8f c5 a6 cd c7 c9 3e 07 0b 95 75 b1 00 f2 92 4f f4 d2 c2 be d9 c6 5a bd 6a 2d 18 23 7f 81 72 9f c7 a1 f4 69 b6 d9 a1 18 f9 f5 f8 bc 93 e7 Data Ascii: RSc'X:Bw`;;>.>CC\sB>XPB!o<:\q/w1H!cGMVq3AUF}H;j@[jeUfzcLe6?BumW#$!2iB\|F6Wbwq>uOZj-#ri
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: aa 6a be 93 2e 7c fe 29 c6 4e d9 3b 72 7f c3 c7 66 c2 64 73 1e f1 3c e2 3d ba 43 ff 80 3f 68 31 9c 0d eb 61 3a c4 c0 c2 2e 28 8b fe 2a f1 ed 48 4f 43 1a 72 70 88 b1 26 c9 d5 76 07 bf b7 79 c4 51 d6 90 73 fa 9e 11 4a db 59 7c 3f 8d e4 f8 9d b9 77 b8 77 8c ae 88 b9 d1 e8 ba fc ff 17 fd aa e1 7c ab 02 47 60 23 74 c3 5c d8 04 f7 c0 3c d8 19 c6 6f 81 e3 30 13 8e ba fa 1a 59 ef a1 9d 79 eb b4 c2 dd 61 8d 1d b0 de fb 3b 3e ef fd ff 49 75 7b 7e e5 fc 9a 73 5c a1 16 07 3e 9e 80 1e c6 16 39 f0 f3 0c 71 05 cf bf 32 f0 aa 10 ef 09 9c 80 d7 c0 91 c0 c9 30 fe 06 78 59 e0 e5 21 de 19 38 1a d6 b8 37 70 2c 8c bf 16 96 50 33 92 d4 f1 f1 f6 bb 9a 45 6c a5 5f 4c 1c 4b 7f 2e 31 36 f8 fb 1f 87 57 1f d4 e5 76 24 75 e4 36 25 f5 6b 00 13 d3 2e 73 44 1d 9e c3 4a 10 0f 38 68 6f 22 Data Ascii: j.\|)N;rfds<=C?h1a:.(*HOCrp&vyQsJY\|?ww\|G`#t\<o0Yya;>Iu{~s\>9q20xY!87p,P3El_LK.16Wv$u6%k.sDJ8ho"
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 5c 28 9d 2a 1d ed 1c e0 ec ee ac e1 2c 0a 3c 18 7f ff cd fd 7f 81 fb d7 ee b6 f0 df 61 ea 0f 05 c0 31 e9 25 e9 1d a9 07 cf 00 b6 85 ed 02 e4 ee 61 fb d8 09 f6 33 fb 1d 59 60 67 d8 25 79 9f 48 bf a4 f9 89 07 73 8b fc 86 83 17 a1 40 0a a6 48 92 a5 14 4f 16 b2 51 21 80 0a 91 fc 0b 72 40 0e e4 80 12 49 07 c8 96 62 06 64 4e db 78 64 c2 bf 13 04 0f d0 59 80 01 18 46 9f f7 7c d9 b6 31 ff 98 ed 65 cc d9 b6 6d bb 0e b3 6d 6b 46 c6 b2 6d db c6 bd aa 28 5f 0d 53 90 12 95 57 3e 72 93 45 76 4d 54 69 55 50 39 39 aa ac ca 68 ba a6 69 86 2a cb 4f 56 79 c9 a6 45 f2 56 3e 8d 91 93 c6 ca c3 44 a9 92 82 15 a2 18 85 c9 53 0b 55 58 fe dc d3 78 cd d3 38 05 a8 88 66 6a b2 29 6e 4a 28 bf 19 ac 05 1a ad 92 a6 18 f7 35 41 71 8a 57 82 aa 50 8b 2a 54 c3 89 ea 38 52 03 57 7c b0 e3 89 Data Ascii: \(,<a1%a3Y`g%yHs@HOQ!r@IbdNxdYF\|1emmkFm(_SW>rEvMTiUP99hiOVyEV>DSUXx8fj)nJ(5AqWP*T8RW\|
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: ae 08 95 51 17 2d d0 05 03 30 0c 13 30 1b cb b0 0d 07 71 1e 57 71 1b 0f f1 1c 6f f1 19 3f 61 04 0b d8 c1 05 5e 08 40 18 62 90 84 0c e4 a1 84 e5 28 56 67 4d d6 67 53 b6 66 27 f6 e4 00 0e e7 38 4e e5 1c 2e e6 2a 6e e4 0e ee e7 31 9e e5 15 de e6 23 be e4 07 7e a7 21 2d 68 4f 37 fa 32 84 d1 4c 62 26 0b f8 4f 50 35 d5 54 03 35 57 3b 75 55 1f 0d d6 28 4d d4 0c cd d7 32 ad d5 16 ed d6 21 9d d4 05 5d d7 3d 3d d5 1b 7d d6 2f 99 c8 5a 4e f2 54 80 c2 15 a7 54 fd 27 08 1e 00 84 00 60 00 00 e6 9a 97 6d db b6 6d db b6 6d db b6 6d db b6 6d bb de b9 bb a0 68 bf 20 02 00 38 c4 85 24 90 1a 32 41 4e 28 00 c5 a1 1c 54 85 3a d0 18 5a 41 47 e8 01 fd 61 18 8c 85 29 30 1b 16 c1 4a d8 00 db 61 1f 1c 85 33 70 19 6e c1 43 78 01 ef e1 1b 84 c2 5f 8c 8c 8c 31 31 01 26 c7 74 98 15 8b Data Ascii: Q-00qWqo?a^@b(VgMgSf'8N.*n1#~!-hO72Lb&OP5T5W;uU(M2!]==}/ZNTT'`mmmmmh 8$2AN(T:ZAGa)0Ja3pnCx_11&t
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 61 94 12 36 1a 2e 36 a9 a2 64 34 37 a4 23 ce 95 b1 b2 31 1a a6 b8 ec c8 60 81 af b5 46 6d 36 8b d6 96 e2 f6 06 6a b2 be 32 c1 c5 51 21 0c 16 64 62 af 29 e2 57 c0 ca 12 35 aa 72 89 c5 04 14 15 ef 4b 37 ab 5c 47 24 59 56 3e ae 5a 6a ec f9 dd 7c 7e ab 06 64 73 c5 c3 c9 14 37 cd cb f0 14 ad f6 fb 47 35 67 71 11 bd de 78 26 ea da 9a 35 fd 0d 42 95 96 44 6c 1c b6 22 e7 60 48 3d 97 5a fa 8d 36 7e e7 7b 2a ad 50 b5 b0 5e 0a 55 c8 f9 3c 12 14 21 f7 56 c4 57 28 94 0b 8b 85 f0 d2 68 65 b6 a4 4b 62 9d 51 6f d8 eb 7f 3d 70 ae 37 f8 8a e1 b0 99 06 c7 3e a6 c7 e6 bf e1 c2 1b 77 bd c3 6c cf bb db f3 5e f6 3c 88 1f 8d 1b 71 d1 04 86 82 c5 61 e2 05 b2 99 ea 60 bf 25 81 c7 55 c1 e4 f7 ca 36 bf 53 d8 9b 06 47 a2 79 a6 9c c3 b3 e5 54 ab 38 da 24 19 f6 99 18 66 57 71 14 6b 0d Data Ascii: a6.6d47#1`Fm6j2Q!db)W5rK7\G$YV>Zj\|~ds7G5gqx&5BDl"`H=Z6~{*P^U<!VW(heKbQo=p7>wl^<qa`%U6SGyT8$fWqk
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: af dd f8 9e 3f 51 e3 68 9e 97 61 50 23 bf 23 7c 2a 8a 0c 71 fc 5a 30 90 23 20 6f 03 ea 02 5a 7e 5c a8 53 81 e4 72 97 b7 46 b7 7a 6a 10 3e 46 15 7f 08 56 9b 80 0a df bc 6a 34 6f 55 cf 14 1e af 7b 7e bf 8b 61 fc fc c1 35 98 9c f8 68 45 ab 2e 83 5f 41 4d c2 a9 83 21 89 5f 41 49 82 20 e9 87 06 de 12 30 24 c1 70 a6 77 c8 09 19 8e 95 6a d3 55 38 7a 12 c2 c4 99 10 12 2e 84 94 70 c2 89 95 ab 8d 01 47 d6 86 29 21 23 e4 65 ad 7a 1e 85 cb 05 87 43 fc f1 e1 70 b8 98 e1 15 b7 3b f8 e5 dd fa 97 f7 82 f0 70 4c 82 ea 35 f8 c6 28 1d 7c a5 96 8f 83 93 d6 01 2a a6 60 54 93 1a 1f aa f9 f8 d3 9f 82 ed 7f f9 e0 bb d1 04 7f d3 64 0f 87 a2 18 50 10 86 bf ff b2 86 bb 4d 29 59 a7 ae 58 cf e6 ee d9 b6 6d db b6 19 63 35 67 d8 c0 f9 ea 9f 85 ff 3f f3 ea 9b c4 17 63 16 e9 3b 16 e7 7b Data Ascii: ?QhaP##\|qZ0# oZ~\SrFzj>FVj4oU{~a5hE._AM!_AI 0$pwjU8z.pG)!#ezCp;pL5(\|`TdPM)YXmc5g?c;{
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 1c 37 47 dc 36 e3 1e 82 fb 55 3c 12 f1 d8 89 67 22 9e bb f1 6a c4 db 1a ef ed f8 38 e3 33 16 5f 57 7c 97 e1 e7 8d df 63 fc db 09 b0 24 a0 9c 80 c9 04 fc 22 b0 92 c0 6d 04 59 10 34 9c a0 c7 04 cb 08 3e 41 88 94 90 69 84 fc 43 30 09 a1 05 c2 16 84 3b 11 c5 20 9a 88 e8 18 62 2d c4 6a c4 6b 10 3f 41 e2 8c a4 13 c9 49 a4 c1 48 87 22 7d 4c 68 0c a1 33 09 f3 20 4c 43 d8 46 c2 8d 09 4f 22 bc 92 f0 03 44 e8 13 51 46 c4 5e 22 bd 89 6c 27 f2 3c 51 ce 44 c9 89 9a 45 d4 35 a2 0d 89 1e 42 f4 4a 62 6c 88 99 4b ac 31 b1 1b 88 eb 41 7c 1e f1 fb 49 08 21 61 1f 89 72 92 74 48 92 91 74 95 e4 2e 92 af 90 92 4c ca 1f 52 87 93 fa 8e b4 2e d2 6e 91 9e 41 fa 0b 32 5a c8 b8 44 66 14 99 47 c9 ea 49 b6 35 d9 b7 c8 99 40 ce 4f 72 eb c8 1d 4f ee 49 72 7f 90 57 48 5e 07 79 d3 c9 77 22 Data Ascii: 7G6U<g"j83_W\|c$"mY4>AiC0; b-jk?AIH"}Lh3 LCFO"DQF^"l'<QDE5BJblK1A\|I!artHt.LR.nA2ZDfGI5@OrOIrWH^yw"
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: f3 af 59 38 cc c2 02 8b 57 59 b4 11 f0 91 00 37 01 8b 02 81 bd 40 68 87 40 28 51 f0 86 9c e0 cd 4f 05 6f 5a 0b de 2c 12 bc b5 c4 60 3c 80 27 80 00 00 18 bd 7f b6 b7 5c b3 ed 65 bb 65 eb 5a 3a db b6 6d db b6 6d db b6 6d e3 7d 7a 9b 53 fd 14 35 2a 6a 4e a0 e6 05 6a 57 a8 bd 99 3a 1d 75 97 50 bf 48 fd 81 d4 ff 43 c3 3a 0d f7 d3 f0 0b 8d 03 34 6e 4d e3 8b 34 2d d0 74 26 cd 42 9a 0f a3 f9 2f 5a 0e a5 75 89 b6 76 da d2 b4 3d 4d fb 38 ed 77 d1 31 41 c7 5d 74 0a e8 bc 8c 2e 1f 5d 4f d2 9d a7 fb 6f 7a 22 08 24 08 6e 42 28 43 68 41 78 2e 22 29 a2 04 a2 3b 10 2b 10 6b 10 bf 8a 64 11 c9 ed 48 77 45 fa 07 b2 5b 91 1f 8b 42 89 e2 0f 7a ef a6 4f 43 bf 92 fe bf 18 48 32 70 2a 03 3f 32 b8 3d 83 d7 30 d4 c6 d0 ce 0c 9d c0 f0 2c c3 a7 31 d2 ca 48 99 91 c3 19 79 8b 51 37 a3 Data Ascii: Y8WY7@h@(QOoZ,`<'\eeZ:mmm}zS5jNjW:uPHC:4nM4-t&B/Zuv=M8w1A]t.]Ooz"$nB(ChAx.");+kdHwE[BzOCH2p?2=0,1HyQ7
2024-10-31 02:41:25 UTC	1369	IN	Data Raw: 6f d1 97 d4 16 c8 90 66 60 0a 3d 36 8b f8 07 2a fc 38 44 80 da 57 fb d6 dd 22 5e 64 41 70 ad f3 8c 0c a3 34 d3 8c b4 27 53 9d 44 32 d5 11 aa 91 f6 e0 88 10 cc 57 e5 48 97 73 14 77 8a 2b 4d f9 6a 92 f2 8e 31 cc 62 c1 15 ea 42 0f 18 b0 45 c4 3f 62 00 3d 88 ab 40 66 b1 2b 8b 38 1e df 65 e0 07 16 2c 6e 93 3a a4 be ab 48 ea 2f 25 2c 7e b4 10 54 a9 ab 72 20 34 07 d6 63 5f d2 2c ec 48 12 d8 a0 1c 86 5c c5 51 86 32 70 95 0d d6 3d ac d7 3d 68 04 56 15 b5 cd 09 4e e6 40 64 49 9b 02 f6 00 9c c4 df 75 2d f7 43 a4 de cb 70 cb 35 07 ec 72 e0 ba 3c 1f 8e 19 38 1f 0b 6b 28 d5 57 e0 26 4f 5e b2 be c3 18 b0 64 c9 0f b3 5b 74 20 8d 71 3e 5a 82 00 5d b4 f3 41 49 74 84 00 86 d7 46 b4 db 48 e7 a3 ba 3b 31 b8 4b 5a 09 64 09 a9 4b 3a 93 c9 8e 22 99 e2 08 55 48 3b 70 12 60 34 7c Data Ascii: of`=6*8DW"^dAp4'SD2WHsw+Mj1bBE?b=@f+8e,n:H/%,~Tr 4c_,H\Q2p==hVN@dIu-Cp5r<8k(W&O^d[t q>Z]AItFH;1KZdK:"UH;p`4\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:26 UTC	575	OUT	GET /assets/jquery-3158ee616193dde0b605a15cb9ca832f9de674111b7cf4393353432ab8fa272d.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453
2024-10-31 02:41:26 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1726806091&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1ri1bcMY1ShtnyLoifrdD%2BzUqXboAFGGOAf2K2zF8sI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Mon, 11 Sep 2023 23:12:22 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3952 Server: cloudflare CF-RAY: 8db0493a3ab96b1f-DFW
2024-10-31 02:41:26 UTC	452	IN	Data Raw: 37 63 30 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d Data Ascii: 7c0b/! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 0a 09 09 2f 2f 20 69 73 20 70 72 65 73 65 6e 74 2c 20 65 78 65 63 75 74 65 20 74 68 65 20 66 61 63 74 6f 72 79 20 61 6e 64 20 67 65 74 20 6a 51 75 65 72 79 2e 0a 09 09 2f 2f 20 46 6f 72 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 61 20 60 77 69 6e 64 6f 77 60 20 77 69 74 68 20 61 20 60 64 6f 63 75 6d 65 6e 74 60 0a 09 09 2f 2f 20 28 73 75 63 68 20 61 73 20 4e 6f 64 65 2e 6a 73 29 2c 20 65 78 70 6f 73 65 20 61 20 66 61 63 74 6f 72 79 20 61 73 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 2e 0a 09 09 2f 2f 20 54 68 69 73 20 61 63 63 65 6e 74 75 61 74 65 73 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 61 20 72 65 61 6c 20 60 77 69 6e 64 6f 77 60 2e 0a 09 09 2f 2f 20 Data Ascii: // is present, execute the factory and get jQuery.// For environments that do not have a `window` with a `document`// (such as Node.js), expose a factory as module.exports.// This accentuates the need for the creation of a real `window`.//
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 77 65 20 74 72 69 6d 20 42 4f 4d 20 61 6e 64 20 4e 42 53 50 0a 09 Data Ascii: is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make sure we trim BOM and NBSP
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 20 28 61 73 20 61 20 72 65 66 65 72 65 6e 63 65 29 0a 09 09 72 65 74 2e 70 72 65 76 4f 62 6a 65 63 74 20 3d 20 74 68 69 73 3b 0a 09 09 72 65 74 2e 63 6f 6e 74 65 78 74 20 3d 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6e 65 77 6c 79 2d 66 6f 72 6d 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 45 78 65 63 75 74 65 20 61 20 63 61 6c 6c 62 61 63 6b 20 66 6f 72 20 65 76 65 72 79 20 65 6c 65 6d 65 6e 74 20 69 6e 20 74 68 65 20 6d 61 74 63 68 65 64 20 73 65 74 2e 0a 09 65 61 63 68 Data Ascii: tor(), elems );// Add the old object onto the stack (as a reference)ret.prevObject = this;ret.context = this.context;// Return the newly-formed element setreturn ret;},// Execute a callback for every element in the matched set.each
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 74 73 5b 20 69 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 09 69 2b 2b 3b 0a 09 7d 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 63 61 73 65 20 77 68 65 6e 20 74 61 72 67 65 74 20 69 73 20 61 20 73 74 72 69 6e 67 20 6f 72 20 73 6f 6d 65 74 68 69 6e 67 20 28 70 6f 73 73 69 62 6c 65 20 69 6e 20 64 65 65 70 20 63 6f 70 79 29 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 20 26 26 20 21 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 20 29 20 7b 0a 09 09 74 61 72 67 65 74 20 3d 20 7b 7d 3b 0a 09 7d 0a 0a 09 2f 2f 20 65 78 74 65 6e 64 20 6a 51 75 65 72 79 20 69 74 73 65 6c 66 20 69 66 20 6f 6e 6c 79 20 6f 6e 65 20 61 72 67 75 6d 65 6e 74 20 69 73 20 70 61 73 73 65 64 0a 09 69 66 20 28 20 69 20 Data Ascii: ts[ i ] \|\| {};i++;}// Handle case when target is a string or something (possible in deep copy)if ( typeof target !== "object" && !jQuery.isFunction( target ) ) {target = {};}// extend jQuery itself if only one argument is passedif ( i
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 64 6f 6d 28 29 20 29 2e 72 65 70 6c 61 63 65 28 20 2f 5c 44 2f 67 2c 20 22 22 20 29 2c 0a 0a 09 2f 2f 20 41 73 73 75 6d 65 20 6a 51 75 65 72 79 20 69 73 20 72 65 61 64 79 20 77 69 74 68 6f 75 74 20 74 68 65 20 72 65 61 64 79 20 6d 6f 64 75 6c 65 0a 09 69 73 52 65 61 64 79 3a 20 74 72 75 65 2c 0a 0a 09 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6d 73 67 20 29 20 7b 0a 09 09 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 20 6d 73 67 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 7d 2c 0a 0a 09 2f 2f 20 53 65 65 20 74 65 73 74 2f 75 6e 69 74 2f 63 6f 72 65 2e 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 20 63 6f 6e 63 65 72 6e 69 6e 67 20 69 73 46 75 6e 63 74 69 6f 6e 2e 0a 09 2f 2f 20 53 69 6e 63 65 20 76 65 72 73 Data Ascii: dom() ).replace( /\D/g, "" ),// Assume jQuery is ready without the ready moduleisReady: true,error: function( msg ) {throw new Error( msg );},noop: function() {},// See test/unit/core.js for details concerning isFunction.// Since vers
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 64 20 77 69 6e 64 6f 77 20 6f 62 6a 65 63 74 73 20 64 6f 6e 27 74 20 70 61 73 73 20 74 68 72 6f 75 67 68 2c 20 61 73 20 77 65 6c 6c 0a 09 09 69 66 20 28 20 21 6f 62 6a 20 7c 7c 20 6a 51 75 65 72 79 2e 74 79 70 65 28 20 6f 62 6a 20 29 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 6f 62 6a 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 6a 51 75 65 72 79 2e 69 73 57 69 6e 64 6f 77 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 0a 09 09 74 72 79 20 7b 0a 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 68 61 73 4f Data Ascii: d window objects don't pass through, as wellif ( !obj \|\| jQuery.type( obj ) !== "object" \|\| obj.nodeType \|\| jQuery.isWindow( obj ) ) {return false;}try {// Not own constructor property must be Objectif ( obj.constructor &&!hasO
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 69 6f 6e 20 73 6f 20 74 68 61 74 20 63 6f 6e 74 65 78 74 20 69 73 20 77 69 6e 64 6f 77 0a 09 09 09 2f 2f 20 72 61 74 68 65 72 20 74 68 61 6e 20 6a 51 75 65 72 79 20 69 6e 20 46 69 72 65 66 6f 78 0a 09 09 09 28 20 77 69 6e 64 6f 77 2e 65 78 65 63 53 63 72 69 70 74 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 20 64 61 74 61 20 29 20 7b 0a 09 09 09 09 77 69 6e 64 6f 77 5b 20 22 65 76 61 6c 22 20 5d 2e 63 61 6c 6c 28 20 77 69 6e 64 6f 77 2c 20 64 61 74 61 20 29 3b 20 2f 2f 20 6a 73 63 73 3a 69 67 6e 6f 72 65 20 72 65 71 75 69 72 65 44 6f 74 4e 6f 74 61 74 69 6f 6e 0a 09 09 09 7d 20 29 28 20 64 61 74 61 20 29 3b 0a 09 09 7d 0a 09 7d 2c 0a 0a 09 2f 2f 20 43 6f 6e 76 65 72 74 20 64 61 73 68 65 64 20 74 6f 20 63 61 6d 65 6c 43 61 73 65 3b 20 75 73 65 64 20 62 79 20 74 Data Ascii: ion so that context is window// rather than jQuery in Firefox( window.execScript \|\| function( data ) {window[ "eval" ].call( window, data ); // jscs:ignore requireDotNotation} )( data );}},// Convert dashed to camelCase; used by t
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 7d 2c 0a 0a 09 69 6e 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 61 72 72 2c 20 69 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 3b 0a 0a 09 09 69 66 20 28 20 61 72 72 20 29 20 7b 0a 09 09 09 69 66 20 28 20 69 6e 64 65 78 4f 66 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 20 61 72 72 2c 20 65 6c 65 6d 2c 20 69 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 6c 65 6e 20 3d 20 61 72 72 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 69 20 3d 20 69 20 3f 20 69 20 3c 20 30 20 3f 20 4d 61 74 68 2e 6d 61 78 28 20 30 2c 20 6c 65 6e 20 2b 20 69 20 29 20 3a 20 69 20 3a 20 30 3b 0a 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 20 29 20 7b 0a Data Ascii: }return ret;},inArray: function( elem, arr, i ) {var len;if ( arr ) {if ( indexOf ) {return indexOf.call( arr, elem, i );}len = arr.length;i = i ? i < 0 ? Math.max( 0, len + i ) : i : 0;for ( ; i < len; i++ ) {
2024-10-31 02:41:26 UTC	1369	IN	Data Raw: 74 68 65 20 61 72 72 61 79 2c 20 74 72 61 6e 73 6c 61 74 69 6e 67 20 65 61 63 68 20 6f 66 20 74 68 65 20 69 74 65 6d 73 20 74 6f 20 74 68 65 69 72 20 6e 65 77 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 65 6c 65 6d 73 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 2c 20 61 72 67 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 09 09 72 65 74 2e 70 75 73 68 28 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 Data Ascii: the array, translating each of the items to their new valuesif ( isArrayLike( elems ) ) {length = elems.length;for ( ; i < length; i++ ) {value = callback( elems[ i ], i, arg );if ( value != null ) {ret.push( value );}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:26 UTC	356	OUT	GET /en_GB/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:26 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 700162d44bec8910bc18bad17fb71ef8 ETag: "4165c44755b7b6c6fd25d5e0562709f8" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: cAFi1EvsiRC8GLrRf7ce+A== Expires: Thu, 31 Oct 2024 02:56:19 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-10-31 02:41:26 UTC	877	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-10-31 02:41:26 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:26 UTC	3092	IN	Data Raw: 2a 31 37 33 30 33 34 32 31 37 39 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 37 38 32 34 35 32 33 2c 65 6e 5f 47 42 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1730342179,,JIT Construction: v1017824523,en_GB//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:26 UTC	601	OUT	GET /en_GB/sdk.js?hash=159716819cc0e629bd650d16077040d2 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.riparide.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:26 UTC	1840	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: aa24f9e701d73ac2bdf54a3a922d6a8a ETag: "a57daea5c6f1682d5b7b99dd053cf6a2" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: qiT55wHXOsK99Uo6ki1qig== Expires: Fri, 31 Oct 2025 02:41:26 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-10-31 02:41:26 UTC	879	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-10-31 02:41:26 UTC	542	IN	Data Raw: 2f 2a 31 37 33 30 33 34 32 34 38 36 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 37 38 32 34 35 32 33 2c 65 6e 5f 47 42 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 Data Ascii: /1730342486,,JIT Construction: v1017824523,en_GB//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-10-31 02:41:26 UTC	15842	IN	Data Raw: 70 6f 6c 69 63 79 2f 5d 2e 20 54 68 69 73 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 73 6f 66 74 77 61 72 65 2e 0a 20 2a 0a 20 2a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 2a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e Data Ascii: policy/]. This copyright notice shall be * included in all copies or substantial portions of the software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHAN
2024-10-31 02:41:26 UTC	1500	IN	Data Raw: 7d 7d 3b 61 2e 73 74 72 69 6e 67 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 3b 69 66 28 63 5b 74 79 70 65 6f 66 20 62 5d 26 26 62 29 69 66 28 28 68 3d 6e 2e 63 61 6c 6c 28 62 29 29 3d 3d 74 29 66 3d 62 3b 65 6c 73 65 20 69 66 28 68 3d 3d 78 29 7b 67 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 6a 3d 62 2e 6c 65 6e 67 74 68 2c 6b 3b 69 3c 6a 3b 6b 3d 62 5b 69 2b 2b 5d 2c 28 68 3d 6e 2e 63 61 6c 6c 28 6b 29 2c 68 3d 3d 77 7c 7c 68 3d 3d 76 29 26 26 28 67 5b 6b 5d 3d 31 29 29 3b 7d 69 66 28 64 29 69 66 28 28 68 3d 6e 2e 63 61 6c 6c 28 64 29 29 3d 3d 76 29 7b 69 66 28 28 64 2d 3d 64 25 31 29 3e 30 29 66 6f 72 28 65 3d 22 22 2c 64 3e 31 30 26 26 28 64 3d 31 30 29 3b 65 2e 6c 65 6e 67 74 68 3c 64 3b 65 2b 3d Data Ascii: }};a.stringify=function(a,b,d){var e,f,g,h;if(c[typeof b]&&b)if((h=n.call(b))==t)f=b;else if(h==x){g={};for(var i=0,j=b.length,k;i<j;k=b[i++],(h=n.call(k),h==w\|\|h==v)&&(g[k]=1));}if(d)if((h=n.call(d))==v){if((d-=d%1)>0)for(e="",d>10&&(d=10);e.length<d;e+=
2024-10-31 02:41:26 UTC	14884	IN	Data Raw: 3d 34 35 29 26 26 4c 2b 2b 3b 66 6f 72 28 65 3d 4c 3b 65 3c 62 26 26 28 67 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 2c 67 3e 3d 34 38 26 26 67 3c 3d 35 37 29 3b 65 2b 2b 29 3b 65 3d 3d 4c 26 26 4e 28 29 3b 4c 3d 65 7d 72 65 74 75 72 6e 2b 61 2e 73 6c 69 63 65 28 64 2c 4c 29 7d 66 26 26 4e 28 29 3b 69 66 28 61 2e 73 6c 69 63 65 28 4c 2c 4c 2b 34 29 3d 3d 22 74 72 75 65 22 29 7b 4c 2b 3d 34 3b 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 69 66 28 61 2e 73 6c 69 63 65 28 4c 2c 4c 2b 35 29 3d 3d 22 66 61 6c 73 65 22 29 7b 4c 2b 3d 35 3b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 61 2e 73 6c 69 63 65 28 4c 2c 4c 2b 34 29 3d 3d 22 6e 75 6c 6c 22 29 7b 4c 2b 3d 34 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 4e 28 29 7d 7d 72 65 74 75 72 6e 22 24 22 7d 2c Data Ascii: =45)&&L++;for(e=L;e<b&&(g=a.charCodeAt(e),g>=48&&g<=57);e++);e==L&&N();L=e}return+a.slice(d,L)}f&&N();if(a.slice(L,L+4)=="true"){L+=4;return!0}else if(a.slice(L,L+5)=="false"){L+=5;return!1}else if(a.slice(L,L+4)=="null"){L+=4;return null}N()}}return"$"},
2024-10-31 02:41:26 UTC	1500	IN	Data Raw: 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 20 69 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 5f 66 6c 75 69 64 5f 64 65 73 6b 74 6f 70 2c 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 5f 66 6c 75 69 64 5f 64 65 73 6b 74 6f 70 20 73 70 61 6e 2c 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 5f 66 6c Data Ascii: et{display:inline-block;position:relative}.fb_iframe_widget span{display:inline-block;position:relative;text-align:justify}.fb_iframe_widget iframe{position:absolute}.fb_iframe_widget_fluid_desktop,.fb_iframe_widget_fluid_desktop span,.fb_iframe_widget_fl
2024-10-31 02:41:27 UTC	14884	IN	Data Raw: 6e 5f 66 72 6f 6d 5f 6c 65 66 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 7d 2e 66 62 5f 63 75 73 74 6f 6d 65 72 5f 63 68 61 74 5f 62 6f 75 6e 63 65 5f 6f 75 74 5f 76 32 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 33 30 30 6d 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 62 5f 62 6f 75 6e 63 65 5f 6f 75 74 5f 76 32 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 7d 2e 66 62 5f 63 75 73 74 6f 6d 65 72 5f 63 68 61 74 5f 62 6f 75 6e 63 65 5f 6f 75 74 5f 66 72 6f 6d 5f 6c 65 66 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 33 30 30 6d 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 62 5f 62 6f Data Ascii: n_from_left;transition-timing-function:ease-in}.fb_customer_chat_bounce_out_v2{animation-duration:300ms;animation-name:fb_bounce_out_v2;transition-timing-function:ease-in}.fb_customer_chat_bounce_out_from_left{animation-duration:300ms;animation-name:fb_bo
2024-10-31 02:41:27 UTC	1500	IN	Data Raw: 29 65 3d 22 6e 75 6c 6c 22 3b 65 6c 73 65 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 62 29 3b 66 3d 2f 5c 73 28 5c 77 2a 29 2f 2e 65 78 65 63 28 66 29 3b 65 3d 66 3d 3d 6e 75 6c 6c 3f 74 79 70 65 6f 66 20 66 3a 66 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 68 28 61 2e 69 6e 64 65 78 4f 66 28 65 29 21 3d 3d 2d 31 2c 28 66 3d 64 29 21 3d 6e 75 6c 6c 3f 66 3a 63 28 22 73 70 72 69 6e 74 66 22 29 28 22 45 78 70 72 65 73 73 69 6f 6e 20 69 73 20 6f 66 20 74 79 70 65 20 25 73 2c 20 6e 6f 74 20 25 73 22 2c 65 2c 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 29 7b 68 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 2c 28 61 3d 63 29 21 3d 6e 75 6c Data Ascii: )e="null";else{var f=Object.prototype.toString.call(b);f=/\s(\w*)/.exec(f);e=f==null?typeof f:f[1].toLowerCase()}h(a.indexOf(e)!==-1,(f=d)!=null?f:c("sprintf")("Expression is of type %s, not %s",e,a));return b}function a(a,b,c){h(b instanceof a,(a=c)!=nul
2024-10-31 02:41:27 UTC	14884	IN	Data Raw: 28 29 7b 7d 66 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 66 28 29 3b 63 26 26 45 53 28 22 4f 62 6a 65 63 74 22 2c 22 61 73 73 69 67 6e 22 2c 21 31 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 3b 65 2e 70 61 72 65 6e 74 3d 61 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 6d 69 78 69 6e 73 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 6d 69 78 69 6e 73 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 6d 69 78 69 6e 73 29 3a 5b 5d 3b 64 26 26 69 28 65 2c 64 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 65 6e 74 3d 66 75 6e 63 74 Data Ascii: (){}f.prototype=a.prototype;e.prototype=new f();c&&ES("Object","assign",!1,e.prototype,c);e.prototype.constructor=e;e.parent=a;e.prototype.__mixins=a.prototype.__mixins?Array.prototype.slice.call(a.prototype.__mixins):[];d&&i(e,d);e.prototype.parent=funct
2024-10-31 02:41:27 UTC	1491	IN	Data Raw: 65 72 79 53 74 72 69 6e 67 22 2c 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 2c 22 73 64 6b 2e 53 63 72 69 62 65 22 2c 22 73 64 6b 2e 66 65 61 74 75 72 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 6e 75 6c 6c 2c 69 3d 5b 22 66 62 6c 6f 5f 22 2c 22 66 62 73 72 5f 22 2c 22 66 62 6d 5f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 2c 65 2c 66 29 7b 69 66 28 21 45 53 28 69 2c 22 69 6e 63 6c 75 64 65 73 22 2c 21 30 2c 61 29 29 7b 64 28 22 73 64 6b 2e 53 63 72 69 62 65 22 29 2e 6c 6f 67 28 22 6a 73 73 64 6b 5f 65 72 72 6f 72 22 2c 7b 61 70 70 49 64 3a 63 28 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 29 2e 67 65 74 43 6c 69 65 6e 74 49 44 28 29 2c 65 72 72 6f 72 3a 22 75 6e 6b 6e 6f 77 6e 5f 63 6f 6f 6b 69 Data Ascii: eryString","sdk.Runtime","sdk.Scribe","sdk.feature"],(function(a,b,c,d,e,f,g){var h=null,i=["fblo_","fbsr_","fbm_"];function j(a,b,e,f){if(!ES(i,"includes",!0,a)){d("sdk.Scribe").log("jssdk_error",{appId:c("sdk.Runtime").getClientID(),error:"unknown_cooki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:27 UTC	404	OUT	GET /analytics.js/v1/jYfhScQuNyTsDkItrVJy345jDYThvpkz/analytics.min.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:27 UTC	742	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 105589 Connection: close Date: Thu, 31 Oct 2024 02:41:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Thu, 25 Jul 2024 19:03:34 GMT ETag: "456de29af8a76c3ff3483e96c6514932" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=120 x-amz-version-id: y3X1wC8Jwvbse9vZT4P6a6_AMFZRJu_e Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 71b147cd3102755b55ba8b6fd34e3f4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: Zr1br9OQPGLPpbaZ8JQ8XP3Wlm68sfcQ4RXyrA3e_ffShy38ydmS2Q== Age: 2
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 72 2c 69 3d 7b 38 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 72 28 6e 28 33 32 35 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e Data Ascii: !function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.
2024-10-31 02:41:27 UTC	2180	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 74 5b 72 5d 3d 69 28 6e 2c 65 29 7d 29 29 2c 74 7d 28 74 2c 65 29 3a 72 2e 69 73 28 74 2c 65 29 3f 72 2e 70 61 72 73 65 28 74 29 3a 74 7d 74 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 38 32 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 2f 5e 28 5c 64 7b 34 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 28 3f 3a 2d 3f 28 5c 64 7b 32 7d 29 29 3f 29 3f 28 3f 3a 28 5b 20 54 5d 29 28 5c 64 7b 32 7d 29 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 3a 3f 28 5c 64 7b 32 7d 29 28 3f 3a 5b 2c 5c 2e 5d 28 5c 64 7b 31 2c 7d 29 29 3f 29 3f 28 3f 3a 28 5a 29 Data Ascii: .isArray(t)?function(t,e){return t.forEach((function(n,r){t[r]=i(n,e)})),t}(t,e):r.is(t,e)?r.parse(t):t}t.exports=i},8264:function(t,e){"use strict";var n=/^(\d{4})(?:-?(\d{2})(?:-?(\d{2}))?)?(?:([ T])(\d{2}):?(\d{2})(?::?(\d{2})(?:[,\.](\d{1,}))?)?(?:(Z)
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 6f 70 65 72 74 79 28 65 29 26 26 64 65 6c 65 74 65 20 74 5b 65 5d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 74 5b 65 5d 3d 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5c 2e 5d 2b 2f 67 2c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 74 2e 65 78 70 6f 72 74 73 3d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 2c 74 2e 65 78 70 6f 72 74 73 2e 66 69 6e 64 3d 74 2e 65 78 70 6f 72 74 73 2c 74 2e 65 78 70 6f 72 74 73 2e 72 65 70 6c 61 Data Ascii: operty(e)&&delete t[e],t}function r(t,e,n){return t.hasOwnProperty(e)&&(t[e]=n),t}function i(t){return t.replace(/[^a-zA-Z0-9\.]+/g,"").toLowerCase()}t.exports=e((function(t,e){if(t.hasOwnProperty(e))return t[e]})),t.exports.find=t.exports,t.exports.repla
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6c 6f 67 73 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6c 6f 67 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 73 3d 28 30 2c 6f 2e 70 69 29 28 28 30 2c 6f 2e 70 69 29 28 7b 7d 2c 65 29 2c 7b 6a 73 6f 6e 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 65 78 74 72 61 73 2c 6e 75 6c 6c 2c 22 20 22 29 2c 65 78 74 72 61 73 3a 65 2e 65 78 74 72 61 73 7d 29 3b 64 65 6c 65 74 65 20 73 2e 74 69 6d 65 3b 76 61 72 20 75 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 74 69 6d 65 29 7c Data Ascii: :!1,configurable:!0}),t.prototype.flush=function(){if(this.logs.length>1){var t=this._logs.reduce((function(t,e){var n,r,i,s=(0,o.pi)((0,o.pi)({},e),{json:JSON.stringify(e.extras,null," "),extras:e.extras});delete s.time;var u=null!==(i=null===(r=e.time)\|
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 6f 29 7b 76 61 72 20 73 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 45 76 65 6e 74 4d 65 74 68 6f 64 43 61 6c 6c 28 7b 74 79 70 65 3a 22 70 61 67 65 22 2c 6f 70 74 69 6f 6e 73 3a 69 7d 29 3b 76 61 72 20 75 3d 7b 74 79 70 65 3a 22 70 61 67 65 22 2c 70 72 6f 70 65 72 74 69 65 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 72 29 2c 6f 70 74 69 6f 6e 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 69 29 2c 69 6e 74 65 67 72 61 74 69 6f 6e 73 3a 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 6f 29 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 28 75 2e 63 61 74 65 67 6f 72 79 3d 65 2c 75 2e 70 72 6f 70 65 72 74 69 65 73 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 75 2e 70 72 6f 70 65 72 74 69 65 73 29 26 26 76 6f 69 64 20 30 21 3d Data Ascii: nction(e,n,r,i,o){var s;this.settings.onEventMethodCall({type:"page",options:i});var u={type:"page",properties:(0,t.pi)({},r),options:(0,t.pi)({},i),integrations:(0,t.pi)({},o)};return null!==e&&(u.category=e,u.properties=null!==(s=u.properties)&&void 0!=
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 7b 7d 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 28 30 2c 74 2e 70 69 29 28 28 30 2c 74 2e 70 69 29 28 7b 7d 2c 58 29 2c 65 29 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 3d 6e 2c 74 68 69 73 2e 69 64 4b 65 79 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 63 6f 6f 6b 69 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6b 65 79 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 58 2e 63 6f 6f 6b 69 65 2e 6b 65 79 2c 74 68 69 73 2e 74 72 61 69 74 73 4b 65 79 3d 6e 75 6c 6c 21 3d 3d 28 73 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6b 65 79 29 26 26 76 6f 69 Data Ascii: &&void 0!==e?e:{}},this.options=(0,t.pi)((0,t.pi)({},X),e),this.cookieOptions=n,this.idKey=null!==(i=null===(r=e.cookie)\|\|void 0===r?void 0:r.key)&&void 0!==i?i:X.cookie.key,this.traitsKey=null!==(s=null===(o=e.localStorage)\|\|void 0===o?void 0:o.key)&&voi
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 6f 6e 63 61 74 28 65 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2d 22 29 2c 22 49 6e 74 65 67 72 61 74 69 6f 6e 22 29 2c 72 3d 77 69 6e 64 6f 77 5b 6e 5d 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 72 2e 49 6e 74 65 67 72 61 74 69 6f 6e 3b 72 65 74 75 72 6e 20 69 3f 28 74 5b 65 2e 6e 61 6d 65 5d 3d 69 2c 74 29 3a 28 74 5b 65 2e 6e 61 6d 65 5d 3d 72 2c 74 29 7d 29 2c 7b 7d 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 68 69 66 74 28 29 3b 65 26 26 21 Data Ascii: oncat(e.name.toLowerCase().replace(".","").split(" ").join("-"),"Integration"),r=window[n];if(!r)return t;var i=r.Integration;return i?(t[e.name]=i,t):(t[e.name]=r,t)}),{})},enumerable:!1,configurable:!0}),n.prototype.push=function(t){var e=t.shift();e&&!
2024-10-31 02:41:28 UTC	5105	IN	Data Raw: 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6b 3f 74 2e 6a 73 6f 6e 28 29 3a 74 2e 74 65 78 74 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 29 7d 29 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 2e 6d 65 73 73 61 67 65 29 2c 74 7d 29 29 29 5d 3b 63 61 73 65 20 32 3a 67 3d 4f 2e 73 65 6e 74 28 29 2c 4f 2e 6c 61 62 65 6c 3d 33 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6d 3d 67 2c 72 2e 75 70 64 61 74 65 43 44 4e 53 65 74 74 69 6e 67 73 26 26 28 6d 3d 72 2e 75 70 64 61 74 65 43 44 4e 53 65 74 74 69 6e 67 73 28 6d 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 2e 64 69 73 61 Data Ascii: on(t){return t.ok?t.json():t.text().then((function(t){throw new Error(t)}))})).catch((function(t){throw console.error(t.message),t})))];case 2:g=O.sent(),O.label=3;case 3:return m=g,r.updateCDNSettings&&(m=r.updateCDNSettings(m)),"function"!=typeof r.disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:27 UTC	598	OUT	GET /v1/projects/jYfhScQuNyTsDkItrVJy345jDYThvpkz/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:28 UTC	736	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 7982 Connection: close Date: Thu, 31 Oct 2024 02:41:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 22 Oct 2024 13:58:52 GMT ETag: "73ff05bf7ef520b50549bb6c6d2ee0a9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: .1DkFBLkptyx2.GQ.76Lkpt9vRCbbJaP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9bca546700a965c9c77ef5b8dbe65cc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: Fpuuvo0VeZPhYnyYQb1vrKDK6sOAxN--lHBpj0nHZPxeYIZQtJLDNg==
2024-10-31 02:41:28 UTC	7982	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 66 33 34 63 30 38 66 33 32 30 63 37 37 65 34 34 66 38 61 35 66 34 62 32 39 61 62 35 34 35 62 61 22 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 67 72 6f 75 70 54 79 70 65 54 72 61 69 74 22 3a 22 22 2c 22 67 72 6f 75 70 56 61 6c 75 65 54 72 61 69 74 22 3a 22 22 2c 22 6d 61 70 51 75 65 72 79 50 61 72 61 6d 73 22 3a 7b 7d 2c 22 74 72 61 63 6b 41 6c 6c 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 41 6c 6c 50 61 67 65 73 56 32 22 3a 66 61 Data Ascii: {"integrations":{"Amplitude":{"apiKey":"f34c08f320c77e44f8a5f4b29ab545ba","batchEvents":false,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"trackAllPages":false,"trackAllPagesV2":fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49769	13.33.187.40	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:27 UTC	381	OUT	GET /rollbarjs/refs/tags/v2.26.1/rollbar.min.js HTTP/1.1 Host: cdn.rollbar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:27 UTC	590	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 80302 Connection: close Date: Thu, 08 Feb 2024 04:33:22 GMT Last-Modified: Wed, 04 Jan 2023 20:16:53 GMT ETag: "ddf66d492e77fc149633a129f1f09c40" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30672000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb8dd67e239abea324e36244f60eec4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: zn1zy-hsRKaZVjIFC8w2RdWOXoKJBN6GEyFe0RRNfItlKBjVmtbeCA== Age: 22975686 Vary: Origin
2024-10-31 02:41:27 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=fun
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e 75 75 69 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 69 6e 66 6f 28 74 29 2c 7b 75 75 69 64 3a 65 7d 7d 2c 6d 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 69 6e 66 6f 2e 61 70 70 6c 79 28 67 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 76 28 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e Data Ascii: m.prototype.info=function(){var t=this._createItem(arguments),e=t.uuid;return this.client.info(t),{uuid:e}},m.info=function(){if(g)return g.info.apply(g,arguments);var t=y(arguments);v(t)},m.prototype.warn=function(){var t=this._createItem(arguments),e=t.
2024-10-31 02:41:28 UTC	2410	IN	Data Raw: 2c 22 50 4f 53 54 22 29 3b 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 2e 70 6f 73 74 4a 73 6f 6e 50 61 79 6c 6f 61 64 28 74 68 69 73 2e 61 63 63 65 73 73 54 6f 6b 65 6e 2c 72 2c 74 2c 65 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 6c 64 4f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6e 2e 6d 65 72 67 65 28 65 2c 74 29 2c 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 4f 70 74 69 6f 6e 73 3d 61 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 75 72 6c 29 2c 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 54 6f 6b 65 6e 26 26 28 74 68 69 73 2e 61 63 63 65 73 73 54 6f 6b 65 6e 3d 74 Data Ascii: ,"POST");this.transport.postJsonPayload(this.accessToken,r,t,e)},s.prototype.configure=function(t){var e=this.oldOptions;return this.options=n.merge(e,t),this.transportOptions=a(this.options,this.url),void 0!==this.options.accessToken&&(this.accessToken=t
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 72 6f 6c 6c 62 61 72 57 72 61 70 70 65 64 45 72 72 6f 72 2e 5f 72 6f 6c 6c 62 61 72 43 6f 6e 74 65 78 74 29 2c 74 2e 5f 72 6f 6c 6c 62 61 72 57 72 61 70 70 65 64 45 72 72 6f 72 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 65 2e 68 61 6e 64 6c 65 55 6e 63 61 75 67 68 74 45 78 63 65 70 74 69 6f 6e 2e 61 70 70 6c 79 28 65 2c 6e 29 3b 72 26 26 72 2e 61 70 70 6c 79 28 74 2c 6e 29 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 3d 3d 3d 6f 26 26 28 65 2e 61 6e 6f 6e 79 6d 6f 75 73 45 72 72 6f 72 73 50 65 6e 64 69 6e 67 2b 3d 31 29 7d 74 2e 65 78 70 6f 72 74 73 3d 7b 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 45 78 63 65 70 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 74 29 7b 76 61 72 20 6f 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: rollbarWrappedError._rollbarContext),t._rollbarWrappedError=null);var o=e.handleUncaughtException.apply(e,n);r&&r.apply(t,n),"anonymous"===o&&(e.anonymousErrorsPending+=1)}t.exports={captureUncaughtExceptions:function(t,e,r){if(t){var o;if("function"==typ
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 75 3f 65 2e 68 6f 73 74 42 6c 6f 63 6b 4c 69 73 74 3d 6e 75 6c 6c 3a 65 2e 68 6f 73 74 53 61 66 65 4c 69 73 74 3d 6e 75 6c 6c 3b 76 61 72 20 70 3d 75 3f 22 68 6f 73 74 42 6c 6f 63 6b 4c 69 73 74 22 3a 22 68 6f 73 74 53 61 66 65 4c 69 73 74 22 3b 72 65 74 75 72 6e 20 69 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 72 65 61 64 69 6e 67 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 27 73 20 22 2b 70 2b 22 20 6f 70 74 69 6f 6e 2e 20 52 65 6d 6f 76 69 6e 67 20 63 75 73 74 6f 6d 20 22 2b 70 2b 22 2e 22 2c 74 29 2c 21 75 7d 72 65 74 75 72 6e 21 31 7d 74 2e 65 78 70 6f 72 74 73 3d 7b 63 68 65 63 6b 4c 65 76 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 2e 6c 65 76 Data Ascii: turn!0}catch(t){u?e.hostBlockList=null:e.hostSafeList=null;var p=u?"hostBlockList":"hostSafeList";return i.error("Error while reading your configuration's "+p+" option. Removing custom "+p+".",t),!u}return!1}t.exports={checkLevel:function(t,e){var r=t.lev
2024-10-31 02:41:28 UTC	12356	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 2e 5f 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 65 2e 68 61 6e 64 6c 65 55 72 6c 43 68 61 6e 67 65 28 65 2e 5f 6c 61 73 74 48 72 65 66 2c 72 29 2c 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 74 68 69 73 2e 72 65 70 6c 61 63 65 6d 65 6e 74 73 2c 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 2c 63 28 74 68 69 73 2e 5f 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 22 70 75 73 68 53 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 Data Ascii: ,(function(t){return function(){var r=e._location.href;e.handleUrlChange(e._lastHref,r),t&&t.apply(this,arguments)}}),this.replacements,"navigation"),c(this._window.history,"pushState",(function(t){return function(){var r=arguments.length>2?arguments[2]:v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49775	142.250.184.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:27 UTC	999	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&scrsrc=www.googletagmanager.com&frm=0&rnd=415356647.1730342486&auid=194757565.1730342486&npa=0&gtm=45He4au0h2v72703833za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730342486108&tfd=7174&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.riparide.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:27 UTC	569	IN	HTTP/1.1 200 OK Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Date: Thu, 31 Oct 2024 02:41:27 GMT Vary: Origin Vary: X-Origin Vary: Referer Content-Type: text/html Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.riparide.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49779	151.101.64.176	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:28 UTC	340	OUT	GET /v3/ HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:28 UTC	706	IN	HTTP/1.1 200 OK Connection: close Content-Length: 690296 Last-Modified: Wed, 30 Oct 2024 20:37:41 GMT ETag: "78aaea0b91bf05493002b40f2441bc59" Cache-Control: max-age=60 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Date: Thu, 31 Oct 2024 02:41:28 GMT Via: 1.1 varnish Age: 39 X-Request-ID: dc45066c-5d3b-4770-a187-4a5e449826bc X-Served-By: cache-dfw-kdfw8210060-DFW X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 74 5d 3d 7b 69 64 3a 74 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 28 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 74 2c 6e 2c 72 3d 7b 37 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 2e 6c 65 6e 67 74 68 7c 7c 28 61 28 29 2c 21 30 29 2c 6c 5b 6c 2e 6c 65 6e 67 74 68 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function
2024-10-31 02:41:28 UTC	16384	IN	Data Raw: 29 7d 29 2c 63 3d 22 73 68 69 70 70 69 6e 67 22 2c 73 3d 22 62 69 6c 6c 69 6e 67 22 2c 75 3d 28 30 2c 72 2e 6f 72 29 28 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 64 69 73 61 62 6c 65 64 22 29 7d 29 2c 28 30 2c 72 2e 6d 43 29 28 7b 6d 6f 64 65 3a 28 30 2c 72 2e 6b 77 29 28 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 29 2c 61 70 69 4b 65 79 3a 72 2e 5a 5f 7d 29 29 2c 6c 3d 7b 61 75 74 6f 6d 61 74 69 63 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 64 69 73 61 62 6c 65 64 3a 22 64 69 73 61 62 6c 65 64 22 2c 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 3a 22 67 6f 6f 67 6c 65 5f 6d 61 70 73 5f 61 70 69 22 7d 2c 64 3d 7b 73 74 72 69 70 65 3a 22 73 74 72 69 70 65 22 2c 6d 65 72 63 68 61 6e 74 Data Ascii: )}),c="shipping",s="billing",u=(0,r.or)((0,r.mC)({mode:(0,r.kw)("automatic","disabled")}),(0,r.mC)({mode:(0,r.kw)("google_maps_api"),apiKey:r.Z_})),l={automatic:"automatic",disabled:"disabled",google_maps_api:"google_maps_api"},d={stripe:"stripe",merchant
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 73 67 29 29 29 2c 70 61 79 70 61 6c 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 2c 6c 69 6e 6b 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 2c 6b 6c 61 72 6e 61 3a 28 30 2c 61 2e 6a 74 29 28 61 2e 6b 77 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 28 30 2c 69 2e 5a 29 28 70 2e 55 51 29 29 29 7d 2c 5f 29 29 2c 77 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 61 70 70 6c 65 50 61 79 3a 28 30 2c 61 2e 6a 74 29 28 28 30 2c 61 2e 6b 77 29 28 22 62 6c 61 63 6b 22 2c 22 77 68 69 74 65 22 Data Ascii: (0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.sg))),paypal:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ))),link:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ))),klarna:(0,a.jt)(a.kw.apply(void 0,(0,i.Z)(p.UQ)))},_)),w=Object.freeze({applePay:(0,a.jt)((0,a.kw)("black","white"
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 65 61 6c 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6b 72 5f 6d 61 72 6b 65 74 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6e 67 5f 63 61 72 64 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 6e 67 5f 6d 61 72 6b 65 74 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 22 29 29 2c 70 61 79 70 61 6c 3a 28 30 2c 6c 2e 6a 74 29 28 28 30 2c 6c 2e 6b 77 29 28 22 61 75 74 6f 22 2c 22 61 6c 77 61 79 73 22 2c 22 6e 65 76 65 72 Data Ascii: eal:(0,l.jt)((0,l.kw)("auto","always","never")),kr_market:(0,l.jt)((0,l.kw)("auto","always","never")),ng_card:(0,l.jt)((0,l.kw)("auto","always","never")),ng_market:(0,l.jt)((0,l.kw)("auto","always","never")),paypal:(0,l.jt)((0,l.kw)("auto","always","never
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 22 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 65 7d 7d 29 29 29 29 7d 29 29 7d 28 69 2c 72 2c 6e 2e 5f 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 2c 63 29 3b 63 61 73 65 20 6d 2e 45 52 52 4f 52 3a 72 65 74 75 72 6e 20 6e 2e 5f 66 61 6c 6c 62 61 63 6b 54 6f 52 65 64 69 72 65 63 74 4f 6e 45 72 72 6f 72 73 3f 6c 28 69 2c 72 2c 6f 2c 61 2c 6e 2e 5f 70 61 79 6d 65 6e 74 4d 65 74 68 6f 64 29 3a 69 2e 61 63 74 69 6f 6e 2e 6c 6f 63 61 6c 69 7a 65 45 72 72 6f 72 28 7b 63 6f 64 65 3a 22 65 72 72 6f 72 73 2e 63 6f 64 65 2e 75 6e 65 78 70 65 63 74 65 64 22 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 65 7d 7d 29 29 3b 63 61 73 65 20 6d 2e 44 55 50 4c 49 43 Data Ascii: "}).then((function(e){return{error:e}}))))}))}(i,r,n._paymentMethod,c);case m.ERROR:return n._fallbackToRedirectOnErrors?l(i,r,o,a,n._paymentMethod):i.action.localizeError({code:"errors.code.unexpected"}).then((function(e){return{error:e}}));case m.DUPLIC
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 2e 5a 45 52 4f 5f 52 45 53 55 4c 54 53 3a 72 3d 7b 70 72 65 64 69 63 74 69 6f 6e 73 3a 5b 5d 2c 73 74 61 74 75 73 3a 22 7a 65 72 6f 52 65 73 75 6c 74 73 22 7d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 3d 69 28 74 29 7d 6e 2e 73 65 6e 64 28 7b 61 63 74 69 6f 6e 3a 22 67 6f 6f 67 6c 65 2d 6d 61 70 73 2d 70 72 65 64 69 63 74 69 6f 6e 73 22 2c 70 61 79 6c 6f 61 64 3a 7b 64 61 74 61 3a 7b 74 61 67 3a 46 2c 76 61 6c 75 65 3a 72 7d 7d 7d 29 7d 29 29 7d 29 29 7d 2c 4b 3d 6e 28 35 33 31 31 29 2c 59 3d 6e 28 37 30 33 30 29 2c 57 3d 5b 22 61 74 74 61 63 68 4c 69 6e 6b 41 63 63 6f 75 6e 74 53 65 73 73 69 6f 6e 46 6f 72 50 61 79 6d 65 6e 74 22 2c 22 61 74 74 61 63 68 4c 69 6e 6b 41 63 63 6f 75 6e 74 53 65 73 73 69 6f 6e 46 6f 72 53 65 74 75 70 22 2c 22 61 75 74 Data Ascii: .ZERO_RESULTS:r={predictions:[],status:"zeroResults"};break;default:r=i(t)}n.send({action:"google-maps-predictions",payload:{data:{tag:F,value:r}}})}))}))},K=n(5311),Y=n(7030),W=["attachLinkAccountSessionForPayment","attachLinkAccountSessionForSetup","aut
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 5a 29 28 65 2c 5b 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4f 75 74 65 72 41 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 74 68 69 73 2c 72 3d 65 2e 6e 6f 6e 63 65 2c 6f 3d 65 2e 61 63 74 69 6f 6e 4e 61 6d 65 2c 69 3d 65 2e 72 65 71 75 65 73 74 3b 74 72 79 7b 76 61 72 20 61 3d 74 68 69 73 2e 6f 75 74 65 72 41 63 74 69 6f 6e 5b 6f 5d 3b 74 3d 75 65 2e 72 65 73 6f 6c 76 65 28 61 28 69 29 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 75 65 2e 72 65 6a 65 63 74 28 65 29 7d 74 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 5f 63 6f 6e 74 72 6f 6c 6c 65 72 46 72 61 6d 65 2e 73 65 6e 64 28 7b 61 63 74 69 6f 6e 3a 22 73 74 72 69 70 65 2d 6f 75 74 65 72 2d 63 6f 6e 74 72 6f 6c 6c 65 72 2d 61 63 74 69 6f 6e Data Ascii: Z)(e,[{key:"handleOuterAction",value:function(e){var t,n=this,r=e.nonce,o=e.actionName,i=e.request;try{var a=this.outerAction[o];t=ue.resolve(a(i))}catch(e){t=ue.reject(e)}t.then((function(e){n._controllerFrame.send({action:"stripe-outer-controller-action
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 2e 62 6f 64 79 2c 73 65 6e 64 52 65 70 6c 79 54 6f 43 68 69 6c 64 3a 6f 7d 29 7d 29 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 74 2e 62 6f 64 79 2c 6f 29 7d 29 29 7d 7d 69 66 28 22 69 6e 69 74 4d 65 73 73 61 67 65 22 69 6e 20 74 29 7b 66 6f 72 28 6e 2e 66 72 61 6d 65 4f 72 69 67 69 6e 3d 65 2e 6f 72 69 67 69 6e 3b 6e 2e 6d 65 73 73 61 67 65 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 69 3d 6e 2e 6d 65 73 73 61 67 65 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 69 26 26 69 28 29 7d 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 2c 6e 2e 66 72 61 6d 65 26 26 28 6e 2e 66 72 61 6d 65 2e 64 61 74 61 73 65 74 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 22 74 72 75 65 22 29 7d 65 6c 73 65 7b 76 61 72 20 61 3d 6e 2e 72 65 Data Ascii: .body,sendReplyToChild:o})}))})).then((function(){r(t.body,o)}))}}if("initMessage"in t){for(n.frameOrigin=e.origin;n.messageQueue.length>0;){var i=n.messageQueue.shift();i&&i()}n.initialized=!0,n.frame&&(n.frame.dataset.initialized="true")}else{var a=n.re
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 65 74 68 6f 64 4e 61 6d 65 4c 61 62 65 6c 4b 65 79 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 6f 73 74 65 64 50 61 79 6d 65 6e 74 55 69 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6d 65 73 73 61 67 65 4b 65 79 73 2e 6e 61 6d 65 7d 7d 2c 7b 6b 65 79 3a 22 6d 65 73 73 61 67 65 4b 65 79 73 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 6f 73 74 65 64 50 61 79 6d 65 6e 74 55 69 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6d 65 73 73 61 67 65 4b 65 79 73 7d 7d 2c 7b 6b 65 79 3a 22 65 78 63 6c 75 64 65 46 72 6f 6d 4f 76 65 72 66 6c 6f 77 49 63 6f 6e 52 6f 74 61 74 69 6f 6e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 6f 73 Data Ascii: ethodNameLabelKey",get:function(){return this._hostedPaymentUiConfiguration.messageKeys.name}},{key:"messageKeys",get:function(){return this._hostedPaymentUiConfiguration.messageKeys}},{key:"excludeFromOverflowIconRotation",get:function(){return this._hos
2024-10-31 02:41:29 UTC	16384	IN	Data Raw: 28 61 28 65 29 2c 22 63 68 72 6f 6d 65 22 29 26 26 21 73 28 65 29 7d 28 43 29 2c 55 3d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 28 61 28 65 29 2c 22 63 72 69 6f 73 22 29 7d 28 43 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 66 78 69 6f 73 22 29 7d 28 43 29 29 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 65 64 67 69 6f 73 22 29 7d 28 43 29 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 61 28 65 29 2c 22 65 6c 65 63 74 72 6f 6e 22 29 7d 28 43 29 2c 48 3d 79 28 43 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 28 65 29 26 26 21 6b 28 65 29 26 26 2f 4d 61 63 69 6e 74 6f 73 68 2e 2a 41 70 70 6c 65 57 65 62 4b 69 74 28 3f 21 Data Ascii: (a(e),"chrome")&&!s(e)}(C),U=(function(e){c(a(e),"crios")}(C),function(e){return c(a(e),"fxios")}(C)),G=function(e){return c(a(e),"edgios")}(C),z=function(e){return c(a(e),"electron")}(C),H=y(C),K=function(e){return f(e)&&!k(e)&&/Macintosh.*AppleWebKit(?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:28 UTC	563	OUT	GET /assets/main.d44653dd034d226877c0.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:29 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730112861&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=IOd0tChQ0luIKXRY4FIs7UJEBBvj%2FJ%2F74a2jatJLATc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730112861&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=IOd0tChQ0luIKXRY4FIs7UJEBBvj%2FJ%2F74a2jatJLATc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Thu, 17 Oct 2024 23:44:08 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 229628 Server: cloudflare CF-RAY: 8db0494ceb566b6b-DFW
2024-10-31 02:41:29 UTC	446	IN	Data Raw: 37 63 30 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 7b 38 32 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 57 6f 72 6b 65 72 28 6e 2e 70 2b 22 63 6c 75 73 74 65 72 69 6e 67 2d 67 71 6c 2e 77 6f 72 6b 65 72 2e 30 33 35 30 31 64 31 37 64 36 64 35 63 65 30 30 32 38 66 39 2e 77 6f 72 6b 65 72 2e 6a 73 22 29 7d 7d 2c 35 33 37 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 43 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 51 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 53 46 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 7c05!function(){var e,t,n,r={82987:function(e,t,n){e.exports=function(){return new Worker(n.p+"clustering-gql.worker.03501d17d6d5ce0028f9.worker.js")}},53756:function(e,t,n){"use strict";n.d(t,{Cp:function(){return d},Qv:function(){return g},SF:function
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 77 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 77 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 78 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 36 39 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 7b 74 79 70 65 3a 22 43 55 52 52 45 4e 54 5f 55 53 45 52 5f 46 45 54 43 48 22 2c 70 61 79 6c 6f 61 64 3a 69 28 29 28 22 2f 75 73 65 72 2f 63 75 72 72 65 6e 74 5f 75 73 65 72 22 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: (){return C},w2:function(){return c},wm:function(){return v},xE:function(){return o}});var r=n(9669),i=n.n(r);function a(){return function(e){return e({type:"CURRENT_USER_FETCH",payload:i()("/user/current_user")})}}function o(){return function(e){return e
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 52 45 4a 45 43 54 45 44 22 7d 7d 7d 2c 32 39 32 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 36 39 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 22 45 4e 51 55 49 52 59 5f 52 45 53 45 54 5f 50 52 49 43 45 53 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 7b 74 79 70 65 3a 22 45 4e 51 55 49 52 59 5f 46 45 54 43 48 5f 50 52 49 43 45 53 22 2c 70 61 79 6c 6f 61 64 Data Ascii: REJECTED"}}},29245:function(e,t,n){"use strict";n.d(t,{l:function(){return o},u:function(){return a}});var r=n(9669),i=n.n(r);function a(){return{type:"ENQUIRY_RESET_PRICES"}}function o(e,t){return function(n){return n({type:"ENQUIRY_FETCH_PRICES",payload
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 2c 6d 65 74 61 3a 7b 73 74 79 6c 65 3a 74 7d 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 3b 69 66 28 6e 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 6d 65 72 3b 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c 77 69 6e 64 6f 77 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 7b 74 79 70 65 3a 22 4e 4f 54 49 46 49 43 41 54 49 4f 4e 5f 43 4c 45 41 52 22 7d 29 7d 29 2c 6e 29 7d 72 65 74 75 72 6e 20 69 7d 7d 6e 2e 64 28 74 2c 7b 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 7d 2c 37 31 32 33 30 3a 66 75 6e 63 Data Ascii: ,meta:{style:t},payload:e});if(n){var a=window.notificationTimer;window.clearTimeout(a),window.notificationTimer=setTimeout((function(){return r({type:"NOTIFICATION_CLEAR"})}),n)}return i}}n.d(t,{h:function(){return r},i:function(){return i}})},71230:func
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 22 2c 6e 61 6d 65 3a 22 41 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 22 7d 2c 7b 69 64 3a 22 61 64 76 65 6e 74 75 72 65 73 22 2c 73 6c 75 67 3a 22 61 64 76 65 6e 74 75 72 65 73 22 2c 6e 61 6d 65 3a 22 41 64 76 65 6e 74 75 72 65 73 22 7d 2c 7b 69 64 3a 22 65 78 70 65 72 69 65 6e 63 65 73 22 2c 73 6c 75 67 3a 22 65 78 70 65 72 69 65 6e 63 65 73 22 2c 6e 61 6d 65 3a 22 45 78 70 65 72 69 65 6e 63 65 73 22 7d 2c 7b 69 64 3a 22 6d 6f 74 6f 72 56 65 68 69 63 6c 65 22 2c 73 6c 75 67 3a 22 6d 6f 74 6f 72 56 65 68 69 63 6c 65 22 2c 6e 61 6d 65 3a 22 56 65 68 69 63 6c 65 73 22 7d 5d 2c 77 3d 7b 61 63 63 6f 6d 6d 6f 64 61 74 69 6f 6e 3a 5b 5d 2c 65 78 70 65 72 69 65 6e 63 65 73 3a 5b 22 70 65 74 46 72 69 65 6e 64 6c 79 22 2c 22 61 6d Data Ascii: accommodation",name:"Accommodation"},{id:"adventures",slug:"adventures",name:"Adventures"},{id:"experiences",slug:"experiences",name:"Experiences"},{id:"motorVehicle",slug:"motorVehicle",name:"Vehicles"}],w={accommodation:[],experiences:["petFriendly","am
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 6e 75 6c 6c 2c 6e 2e 6e 65 3d 6e 75 6c 6c 2c 6e 2e 72 65 67 69 6f 6e 73 3d 6e 75 6c 6c 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 3d 6e 75 6c 6c 2c 6e 2e 6f 72 69 67 69 6e 3d 6e 75 6c 6c 29 2c 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 61 3d 72 28 29 2e 72 6f 75 74 65 72 2c 6f 3d 28 30 2c 70 2e 5f 29 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 65 2e 73 74 61 72 74 44 61 74 65 26 26 65 2e 65 6e 64 44 61 74 65 26 26 28 6f 2e 77 65 65 6b 65 6e 64 4d 6f 6e 74 68 73 3d 6e 75 6c 6c 29 2c 65 2e 77 65 65 6b 65 6e 64 4d 6f 6e 74 68 73 26 26 28 6f 2e 73 74 61 72 74 44 61 74 65 3d 6e 75 6c 6c 2c 6f 2e 65 6e 64 44 61 74 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 6c 3d 62 28 62 28 Data Ascii: null,n.ne=null,n.regions=null,n.location=null,n.origin=null),n};function _(e,t){return function(n,r){var a=r().router,o=(0,p._)(a.location.search);e.startDate&&e.endDate&&(o.weekendMonths=null),e.weekendMonths&&(o.startDate=null,o.endDate=null);var l=b(b(
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 36 30 30 37 29 2c 6d 3d 6e 2e 6e 28 75 29 2c 70 3d 6e 28 31 34 31 37 36 29 2c 66 3d 6e 2e 6e 28 70 29 2c 68 3d 6e 28 31 34 32 39 33 29 2c 67 3d 6e 2e 6e 28 68 29 2c 43 3d 5b 22 73 74 61 72 74 5f 64 61 74 65 22 2c 22 65 6e 64 5f 64 61 74 65 22 2c 22 73 74 61 72 74 44 61 74 65 22 2c 22 65 6e 64 44 61 74 65 22 2c 22 61 64 75 6c 74 73 22 2c 22 63 68 69 6c 64 72 65 6e 22 2c 22 70 65 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 63 65 53 74 61 72 74 22 2c 22 70 72 69 63 65 45 6e 64 22 2c 22 62 65 64 72 6f 6f 6d 73 22 2c 22 62 65 64 73 22 2c 22 69 6e 73 74 61 6e 74 42 6f 6f 6b 22 2c 22 66 75 6c 6c 52 65 66 75 6e 64 22 2c 22 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 64 61 79 22 2c 22 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 65 6e 64 22 5d 3b 66 75 6e Data Ascii: 6007),m=n.n(u),p=n(14176),f=n.n(p),h=n(14293),g=n.n(h),C=["start_date","end_date","startDate","endDate","adults","children","petFriendly","priceStart","priceEnd","bedrooms","beds","instantBook","fullRefund","oneNightStayWeekday","oneNightStayWeekend"];fun
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 22 74 72 75 65 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 72 74 5f 64 61 74 65 2c 6e 3d 65 2e 65 6e 64 5f 64 61 74 65 2c 72 3d 65 2e 73 74 61 72 74 44 61 74 65 2c 61 3d 65 2e 65 6e 64 44 61 74 65 2c 6c 3d 65 2e 61 64 75 6c 74 73 2c 73 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 65 2e 70 65 74 46 72 69 65 6e 64 6c 79 2c 75 3d 65 2e 70 72 69 63 65 53 74 61 72 74 2c 6d 3d 65 2e 70 72 69 63 65 45 6e 64 2c 70 3d 65 2e 62 65 64 72 6f 6f 6d 73 2c 66 3d 65 2e 62 65 64 73 2c 68 3d 65 2e 69 6e 73 74 61 6e 74 42 6f 6f 6b 2c 67 3d 65 2e 66 75 6c 6c 52 65 66 75 6e 64 2c 76 3d 65 2e 6f 6e 65 4e 69 67 68 74 53 74 61 79 57 65 65 6b 64 61 79 2c 4c 3d 65 2e 6f 6e 65 4e 69 67 Data Ascii: "true"===e.toLowerCase()),t}function b(e){var t=e.start_date,n=e.end_date,r=e.startDate,a=e.endDate,l=e.adults,s=e.children,d=e.petFriendly,u=e.priceStart,m=e.priceEnd,p=e.bedrooms,f=e.beds,h=e.instantBook,g=e.fullRefund,v=e.oneNightStayWeekday,L=e.oneNig
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 3d 6e 28 33 37 37 39 37 29 2c 6c 3d 6e 28 35 35 32 36 39 29 2c 63 3d 6e 28 39 30 31 36 35 29 2c 73 3d 6e 28 35 33 37 35 36 29 2c 64 3d 6e 28 39 39 31 34 32 29 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 74 65 6d 49 64 2c 6e 3d 65 2e 69 74 65 6d 54 79 70 65 2c 75 3d 65 2e 62 6f 6f 6b 69 6e 67 41 64 76 65 6e 74 75 72 65 73 49 6e 64 65 78 2c 6d 3d 65 2e 62 75 63 6b 65 74 4c 69 73 74 49 74 65 6d 73 49 6e 64 65 78 2c 70 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 66 3d 65 2e 61 6e 61 6c 79 74 69 63 73 53 6f 75 72 63 65 2c 68 3d 28 30 2c 61 2e 5a 29 28 29 2c 67 3d 28 30 2c 6c 2e 5a 29 28 29 2c 43 3d 67 2e 63 75 72 72 65 6e 74 55 73 65 72 53 69 67 6e 65 64 49 6e 2c 76 3d 67 2e 6f 70 65 6e 4c 6f 67 69 6e 4d 6f 64 61 6c 2c 79 3d 28 30 2c Data Ascii: =n(37797),l=n(55269),c=n(90165),s=n(53756),d=n(99142);t.Z=function(e){var t=e.itemId,n=e.itemType,u=e.bookingAdventuresIndex,m=e.bucketListItemsIndex,p=e.children,f=e.analyticsSource,h=(0,a.Z)(),g=(0,l.Z)(),C=g.currentUserSignedIn,v=g.openLoginModal,y=(0,
2024-10-31 02:41:29 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 69 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 2e 70 75 73 68 28 74 2e 70 61 79 6c 6f 61 64 2e 62 75 63 6b 65 74 4c 69 73 74 49 64 29 7d 2c 73 65 6c 65 63 74 45 73 63 61 70 65 43 6c 65 61 72 49 74 65 6d 41 64 64 65 64 54 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 74 65 6d 41 64 64 65 64 54 6f 3d 5b 5d 7d 2c 73 65 6c 65 63 74 45 73 63 61 70 65 43 6c 65 61 72 49 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 74 65 6d 52 65 6d 6f 76 65 64 46 72 6f 6d 3d 5b 5d 7d 7d 7d 29 2c 69 3d 72 2e 61 63 74 69 6f 6e 73 2c 61 3d 69 2e 6f 70 65 6e 53 65 6c 65 63 74 45 73 63 61 70 65 2c 6f 3d 69 2e 63 6c 6f 73 65 53 65 6c 65 63 74 45 73 63 61 70 65 2c 6c 3d 69 2e 73 65 6c 65 63 Data Ascii: function(e,t){e.itemRemovedFrom.push(t.payload.bucketListId)},selectEscapeClearItemAddedTo:function(e){e.itemAddedTo=[]},selectEscapeClearItemRemovedFrom:function(e){e.itemRemovedFrom=[]}}}),i=r.actions,a=i.openSelectEscape,o=i.closeSelectEscape,l=i.selec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:29 UTC	584	OUT	GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:29 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9270 Connection: close Date: Sun, 22 Sep 2024 07:45:31 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Fri, 20 Sep 2024 16:09:56 GMT ETag: "00e9c65cbba11c07c4bf4a6e2727b8ea" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: s5qtRJFv7hDXMk2uMHhT5A4n.cM7M8To Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 3w2nTmW2RVj5RlnWR0a5ajRhJwGFJVgL4JZh03q2TWtkVvxAF6a56g== Age: 3351359
2024-10-31 02:41:29 UTC	9270	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 2c 65 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 61 62 6c 65 64 29 3f 6e 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:29 UTC	392	OUT	GET /v1/projects/jYfhScQuNyTsDkItrVJy345jDYThvpkz/settings HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:29 UTC	743	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 7982 Connection: close Date: Thu, 31 Oct 2024 02:41:28 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 22 Oct 2024 13:58:52 GMT ETag: "73ff05bf7ef520b50549bb6c6d2ee0a9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=10800 x-amz-version-id: .1DkFBLkptyx2.GQ.76Lkpt9vRCbbJaP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a0a81637cc76d6981e4e29044a73b7f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: rUGincRYbz5B4mm00PePYlOn86nWCE5mph7ItGwszbfld1CFsOweqw== Age: 2
2024-10-31 02:41:29 UTC	7982	IN	Data Raw: 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6d 70 6c 69 74 75 64 65 22 3a 7b 22 61 70 69 4b 65 79 22 3a 22 66 33 34 63 30 38 66 33 32 30 63 37 37 65 34 34 66 38 61 35 66 34 62 32 39 61 62 35 34 35 62 61 22 2c 22 62 61 74 63 68 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 50 65 72 69 6f 64 4d 69 6c 6c 69 73 22 3a 33 30 30 30 30 2c 22 65 76 65 6e 74 55 70 6c 6f 61 64 54 68 72 65 73 68 6f 6c 64 22 3a 33 30 2c 22 67 72 6f 75 70 54 79 70 65 54 72 61 69 74 22 3a 22 22 2c 22 67 72 6f 75 70 56 61 6c 75 65 54 72 61 69 74 22 3a 22 22 2c 22 6d 61 70 51 75 65 72 79 50 61 72 61 6d 73 22 3a 7b 7d 2c 22 74 72 61 63 6b 41 6c 6c 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 41 6c 6c 50 61 67 65 73 56 32 22 3a 66 61 Data Ascii: {"integrations":{"Amplitude":{"apiKey":"f34c08f320c77e44f8a5f4b29ab545ba","batchEvents":false,"eventUploadPeriodMillis":30000,"eventUploadThreshold":30,"groupTypeTrait":"","groupValueTrait":"","mapQueryParams":{},"trackAllPages":false,"trackAllPagesV2":fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49783	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:29 UTC	394	OUT	GET /en_GB/sdk.js?hash=159716819cc0e629bd650d16077040d2 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:30 UTC	1840	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: aa24f9e701d73ac2bdf54a3a922d6a8a ETag: "a57daea5c6f1682d5b7b99dd053cf6a2" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: qiT55wHXOsK99Uo6ki1qig== Expires: Fri, 31 Oct 2025 02:41:26 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-10-31 02:41:30 UTC	879	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-10-31 02:41:30 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:30 UTC	15079	IN	Data Raw: 2a 31 37 33 30 33 34 32 34 38 36 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 37 38 32 34 35 32 33 2c 65 6e 5f 47 42 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1730342486,,JIT Construction: v1017824523,en_GB//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-10-31 02:41:30 UTC	16384	IN	Data Raw: 63 29 7d 7d 72 65 74 75 72 6e 20 62 2b 27 22 27 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 2c 6d 2c 72 2c 73 2c 74 2c 7a 2c 42 3b 74 72 79 7b 68 3d 62 5b 61 5d 7d 63 61 74 63 68 28 61 29 7b 7d 69 66 28 74 79 70 65 6f 66 20 68 3d 3d 22 6f 62 6a 65 63 74 22 26 26 68 29 7b 69 3d 6e 2e 63 61 6c 6c 28 68 29 3b 69 66 28 69 3d 3d 75 26 26 21 6f 2e 63 61 6c 6c 28 68 2c 22 74 6f 4a 53 4f 4e 22 29 29 69 66 28 68 3e 2d 31 2f 30 26 26 68 3c 31 2f 30 29 7b 69 66 28 43 29 7b 6d 3d 41 28 68 2f 38 36 34 65 35 29 3b 66 6f 72 28 6a 3d 41 28 6d 2f 33 36 35 2e 32 34 32 35 29 2b 31 39 37 30 2d 31 3b 43 28 6a 2b 31 2c 30 29 3c 3d 6d 3b 6a 2b 2b 29 3b 66 6f 72 28 6b 3d 41 28 28 6d 2d 43 28 6a 2c 30 29 29 Data Ascii: c)}}return b+'"'},I=function(a,b,c,d,e,f,g){var h,i,j,k,m,r,s,t,z,B;try{h=b[a]}catch(a){}if(typeof h=="object"&&h){i=n.call(h);if(i==u&&!o.call(h,"toJSON"))if(h>-1/0&&h<1/0){if(C){m=A(h/864e5);for(j=A(m/365.2425)+1970-1;C(j+1,0)<=m;j++);for(k=A((m-C(j,0))
2024-10-31 02:41:30 UTC	16384	IN	Data Raw: 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 38 35 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 68 65 61 64 65 72 20 2e 74 6f 75 63 68 61 62 6c 65 5f 62 75 74 74 6f 6e 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 3a 62 6f 6c 64 20 31 32 70 78 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 32 70 78 20 2d 31 32 70 Data Ascii: px;display:inline-block;line-height:18px;margin-top:3px;max-width:85px;padding:4px 12px;position:relative}.fb_dialog_content .dialog_header .touchable_button input{background:none;border:none;color:#fff;font:bold 12px Helvetica, sans-serif;margin:2px -12p
2024-10-31 02:41:30 UTC	16384	IN	Data Raw: 79 70 65 3d 7b 69 6e 66 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 67 65 74 53 75 62 73 63 72 69 62 65 72 73 28 61 29 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 69 66 28 63 5b 64 5d 3d 3d 3d 6e 75 6c 6c 29 63 6f 6e 74 69 6e 75 65 3b 74 72 79 7b 63 5b 64 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 63 61 74 63 68 28 61 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 7d 2c 30 29 7d 7d 72 65 74 75 72 6e Data Ascii: ype={inform:function(a){var b=Array.prototype.slice.call(arguments,1),c=Array.prototype.slice.call(this.getSubscribers(a));for(var d=0;d<c.length;d++){if(c[d]===null)continue;try{c[d].apply(this,b)}catch(a){window.setTimeout(function(){throw a},0)}}return
2024-10-31 02:41:30 UTC	1500	IN	Data Raw: 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 76 61 72 20 65 3d 6a 28 29 5b 61 5d 3b 65 26 26 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 29 7d 66 2e 53 55 42 53 43 52 49 42 45 3d 67 3b 66 2e 55 4e 53 55 42 53 43 52 49 42 45 3d 68 3b 66 2e 73 75 62 73 63 72 69 62 65 72 73 3d 6a 3b 66 2e 73 75 62 73 63 72 69 62 65 3d 6b 3b 66 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 6c 3b 66 2e 6d 6f 6e 69 74 6f 72 3d 61 3b 66 2e 63 6c 65 61 72 3d 62 3b 66 2e 66 69 72 65 3d 6d 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 73 64 6b 2e 41 70 70 45 76 65 6e 74 73 2d 70 75 62 6c 69 63 22 2c 5b 22 41 73 73 65 72 74 22 2c 22 46 42 22 2c 22 73 64 6b 2e 41 70 70 45 76 65 6e 74 73 22 2c 22 73 64 6b 2e 45 Data Ascii: d-1]=arguments[d];var e=j()[a];e&&e.forEach(function(a){a&&a.apply(this,c)})}f.SUBSCRIBE=g;f.UNSUBSCRIBE=h;f.subscribers=j;f.subscribe=k;f.unsubscribe=l;f.monitor=a;f.clear=b;f.fire=m}),66);__d("sdk.AppEvents-public",["Assert","FB","sdk.AppEvents","sdk.E
2024-10-31 02:41:30 UTC	14884	IN	Data Raw: 2c 7b 61 70 70 49 64 3a 63 28 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 29 2e 67 65 74 43 6c 69 65 6e 74 49 44 28 29 2c 65 72 72 6f 72 3a 22 75 6e 6b 6e 6f 77 6e 5f 63 6f 6f 6b 69 65 5f 70 72 65 66 69 78 2e 22 2b 61 7d 29 3b 69 66 28 63 28 22 73 64 6b 2e 66 65 61 74 75 72 65 22 29 28 22 6c 69 6d 69 74 5f 75 6e 6b 6e 6f 77 6e 5f 63 6f 6f 6b 69 65 5f 73 65 74 74 69 6e 67 22 2c 21 31 29 29 72 65 74 75 72 6e 7d 61 3d 61 2b 63 28 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 29 2e 67 65 74 43 6c 69 65 6e 74 49 44 28 29 3b 66 3d 66 3f 22 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 53 65 63 75 72 65 22 3a 22 22 3b 76 61 72 20 67 3d 68 21 3d 3d 6e 75 6c 6c 26 26 68 21 3d 3d 22 2e 22 3b 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 61 2b 22 3d 3b 20 65 78 Data Ascii: ,{appId:c("sdk.Runtime").getClientID(),error:"unknown_cookie_prefix."+a});if(c("sdk.feature")("limit_unknown_cookie_setting",!1))return}a=a+c("sdk.Runtime").getClientID();f=f?"; SameSite=None;Secure":"";var g=h!==null&&h!==".";g&&(document.cookie=a+"=; ex
2024-10-31 02:41:31 UTC	16384	IN	Data Raw: 4f 4e 22 2c 22 73 74 72 69 6e 67 69 66 79 22 2c 21 31 2c 61 29 29 3a 74 79 70 65 6f 66 20 61 2e 6d 65 73 73 61 67 65 21 3d 3d 22 73 74 72 69 6e 67 22 3f 62 3d 68 28 22 4e 6f 6e 2d 65 72 72 6f 72 20 74 68 72 6f 77 6e 3a 20 25 73 2c 20 6b 65 79 73 3a 20 25 73 22 2c 53 74 72 69 6e 67 28 61 29 2c 45 53 28 22 4a 53 4f 4e 22 2c 22 73 74 72 69 6e 67 69 66 79 22 2c 21 31 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2e 73 6f 72 74 28 29 29 29 3a 61 2e 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 2e 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 21 3d 3d 22 73 74 72 69 6e 67 22 3f 62 3d 68 28 22 45 72 72 6f 72 20 77 69 74 68 20 6e 6f 6e 2d 73 74 72 69 6e 67 20 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 20 74 68 72 6f 77 6e 3a 20 25 73 Data Ascii: ON","stringify",!1,a)):typeof a.message!=="string"?b=h("Non-error thrown: %s, keys: %s",String(a),ES("JSON","stringify",!1,Object.keys(a).sort())):a.messageFormat!=null&&typeof a.messageFormat!=="string"?b=h("Error with non-string messageFormat thrown: %s
2024-10-31 02:41:31 UTC	16384	IN	Data Raw: 31 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 74 68 69 73 2e 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 22 65 72 72 6f 72 22 2c 61 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 3b 62 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 62 3e 31 3f 62 2d 31 3a 30 29 2c 64 3d 31 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 64 5d 3b 74 68 69 73 2e 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 22 77 61 72 6e 22 2c 61 5d 2e 63 6f 6e 63 61 74 28 63 29 29 7d 3b 62 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: 1;d<b;d++)c[d-1]=arguments[d];this.$1.apply(this,["error",a].concat(c))};b.warn=function(a){for(var b=arguments.length,c=new Array(b>1?b-1:0),d=1;d<b;d++)c[d-1]=arguments[d];this.$1.apply(this,["warn",a].concat(c))};b.info=function(a){for(var b=arguments.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49786	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:30 UTC	581	OUT	GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:30 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1559 Connection: close Date: Tue, 17 Sep 2024 01:13:08 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Mon, 16 Sep 2024 16:03:18 GMT ETag: "3867b2388b619ff7fddc29ef359fc9aa" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: u16VcQlfwBtHRZyWZ3J5lA.kF3ts0Fc8 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 82e9051d8d41080bd3028731e0e8677e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: VPwGkk4chSI7zjsVUnF0KxDccq2MCyWXV7ZMUyO6sAVUV5hzHQMr7g== Age: 3806903
2024-10-31 02:41:30 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 33 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6e 61 62 6c 65 64 29 3f 65 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49785	142.250.185.194	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:30 UTC	1369	OUT	GET /td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:30 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 02:56:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-31 02:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49784	142.250.181.226	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:30 UTC	1245	OUT	GET /pagead/viewthroughconversion/871543968/?random=1730342488859&cv=11&fst=1730342488859&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:30 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 02:56:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:30 UTC	536	IN	Data Raw: 31 32 39 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1294(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-31 02:41:30 UTC	1378	IN	Data Raw: 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 Data Ascii: l",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))br
2024-10-31 02:41:30 UTC	1378	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 Data Ascii: e(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R(
2024-10-31 02:41:30 UTC	1378	IN	Data Raw: 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 Data Ascii: pics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.sr
2024-10-31 02:41:30 UTC	94	IN	Data Raw: 63 6b 50 63 48 68 43 53 5f 74 46 58 43 53 56 4b 6d 43 5f 5a 76 62 56 65 4e 75 51 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 37 39 30 30 31 33 31 34 30 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ckPcHhCS_tFXCSVKmC_ZvbVeNuQ\x26random\x3d1790013140\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-10-31 02:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49789	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	842	OUT	POST /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 386 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	386	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 43 75 72 72 65 6e 74 55 73 65 72 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 43 75 72 72 65 6e 74 55 73 65 72 20 7b 5c 6e 20 20 63 75 72 72 65 6e 74 55 73 65 72 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 64 65 6c 65 74 65 52 65 71 75 65 73 74 65 64 41 74 5c 6e 20 20 20 20 69 6e 63 6f 6d 70 6c 65 74 65 42 6f 6f 6b 69 6e 67 73 20 7b 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 73 74 61 72 74 44 61 74 65 5c 6e 20 20 20 20 20 20 65 6e 64 44 61 74 65 5c 6e 20 20 20 20 20 20 70 72 6f 6d 6f 49 6d 61 67 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 74 68 75 6d 62 5c 6e 20 20 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 5c 6e 20 20 Data Ascii: {"operationName":"getCurrentUser","variables":{},"query":"query getCurrentUser {\n currentUser {\n id\n deleteRequestedAt\n incompleteBookings {\n id\n startDate\n endDate\n promoImage {\n thumb\n __typename\n
2024-10-31 02:41:31 UTC	1184	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"f3951f0268200a69d1aa45c61283e7f5" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: db1e4041-b317-4699-b6e8-01972b235a17 X-Runtime: 0.014879 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db0495a4a49e7bb-DFW
2024-10-31 02:41:31 UTC	29	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 55 73 65 72 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"data":{"currentUser":null}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49791	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	842	OUT	POST /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 785 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	785	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 41 64 76 65 6e 74 75 72 65 52 65 76 69 65 77 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 32 38 37 35 38 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 41 64 76 65 6e 74 75 72 65 52 65 76 69 65 77 73 28 24 69 64 3a 20 49 44 21 2c 20 24 63 75 72 73 6f 72 3a 20 53 74 72 69 6e 67 29 20 7b 5c 6e 20 20 61 64 76 65 6e 74 75 72 65 28 69 64 3a 20 24 69 64 29 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 72 65 76 69 65 77 73 28 66 69 72 73 74 3a 20 33 2c 20 61 66 74 65 72 3a 20 24 63 75 72 73 6f 72 29 20 7b 5c 6e 20 20 20 20 20 20 70 61 67 65 49 6e 66 6f 20 7b 5c 6e 20 20 20 20 20 20 20 20 65 6e 64 43 75 72 73 6f 72 5c 6e 20 20 20 20 20 20 20 20 68 61 73 4e 65 78 Data Ascii: {"operationName":"getAdventureReviews","variables":{"id":"28758"},"query":"query getAdventureReviews($id: ID!, $cursor: String) {\n adventure(id: $id) {\n id\n reviews(first: 3, after: $cursor) {\n pageInfo {\n endCursor\n hasNex
2024-10-31 02:41:31 UTC	1183	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 205 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"c4f47e8a76423a03cb645d5294162a91" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 04de4d34-ae3c-44ea-b41d-0dc9d25f5644 X-Runtime: 0.062570 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db0495a4d18e936-DFW
2024-10-31 02:41:31 UTC	191	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 31 35 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 32 32 32 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 33 38 39 36 33 35 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 63 65 38 61 33 61 32 62 66 34 38 66 38 61 63 26 74 73 3d 33 34 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=2151&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2227&delivery_rate=1389635&cwnd=251&unsent_bytes=0&cid=dce8a3a2bf48f8ac&ts=340&x=0"
2024-10-31 02:41:31 UTC	205	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 64 76 65 6e 74 75 72 65 22 3a 7b 22 69 64 22 3a 22 32 38 37 35 38 22 2c 22 72 65 76 69 65 77 73 22 3a 7b 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 65 6e 64 43 75 72 73 6f 72 22 3a 6e 75 6c 6c 2c 22 68 61 73 4e 65 78 74 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 61 67 65 49 6e 66 6f 22 7d 2c 22 65 64 67 65 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 64 76 65 6e 74 75 72 65 52 65 76 69 65 77 43 6f 6e 6e 65 63 74 69 6f 6e 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 53 74 6f 72 79 41 64 76 65 6e 74 75 72 65 22 7d 7d 7d Data Ascii: {"data":{"adventure":{"id":"28758","reviews":{"pageInfo":{"endCursor":null,"hasNextPage":false,"__typename":"PageInfo"},"edges":[],"__typename":"AdventureReviewConnection"},"__typename":"StoryAdventure"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49793	172.67.75.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	684	OUT	GET /user/89268/avatar/thumb_lg-3af33225542adb6c76b6afe0ca6cca15.jpeg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	1061	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: image/jpeg Content-Length: 12007 Connection: close Cache-Control: public, max-age=864000 Cf-Bgj: h2pri Content-Disposition: inline; filename="image_processing20210615-4-1qa0o9j.jpeg"; filename*=UTF-8''image_processing20210615-4-1qa0o9j.jpeg ETag: "4ee08a7c6854d186c00f1c0a571b1006" Last-Modified: Tue, 15 Jun 2021 05:29:11 GMT x-amz-id-2: +9Yr8gni4z1wZyPBbfaSTUyl7YyK+GiUqcY8yk07cQQ6EByxLtFo9zjJc/wZYOJmN4manhDpT7QwqNp9lSc3bfoflHANgzb5574it0UTUnY= x-amz-request-id: DH8F2TNYVE9YEMHS x-amz-version-id: 4PtFXFIqIMpgTbo7lyu8w2rwPPjd5dnt CF-Cache-Status: HIT Age: 592380 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6tNI4qRLZyZlD%2B4DiEXasLSGZFPitYAxV8sHKvSlo9GPSCdZjGslhteavONZgs%2B%2Bju%2BaFJAFaQJn021AlyHdkI%2FTYtWmLv%2B9wqefZT%2FimT%2FzfZ0KF3QgbLypNkE7YlMvZi7r6SU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0495a4a5c28d1-DFW
2024-10-31 02:41:31 UTC	308	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 b4 00 00 00 03 a0 04 00 01 00 00 00 b4 00 00 00 00 00 00 00 ff ed 00 36 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 19 1c 02 67 00 14 48 45 7a 72 4d 69 59 4d 56 5a 7a 74 47 73 48 5a 78 30 70 6d 00 ff db 00 43 00 08 06 Data Ascii: ExifII*V^(ifHH021001006Photoshop 3.08BIMgHEzrMiYMVZztGsHZx0pmC
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 Data Ascii: 9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 15 d8 8e 56 85 0d c1 4d bc 77 53 ce 3d 7b 66 bc cc 49 6d 7c a5 12 20 2e 15 71 19 20 e1 5b 39 18 07 ea 7f 2a d2 d2 b5 09 6f ee 1f 4d 94 c2 27 04 46 98 73 f3 0f e2 e0 d0 9b 0b 23 b0 bd d1 a6 d4 2e 9a e6 39 52 3d c0 06 47 07 82 06 38 e3 a7 14 53 34 ab ab 7b 7b 15 85 e4 da c8 48 c3 b7 23 eb cd 14 ed 11 5e 46 86 b3 ae 6a 8f 6e 83 4a b3 77 05 f1 22 86 02 46 5f 51 9e 00 f5 ae 4a 4b f4 f3 d6 2d 4e d6 d2 2b f8 c1 0a a8 e4 90 0f b9 38 1d 06 6a ec 57 73 5e e9 2f 24 13 bc 4c d9 32 19 0e f0 0f f7 31 90 47 d4 f1 5c 85 de 94 d2 81 25 cd d3 3b 7d df 97 91 8e c3 9c d5 39 39 3b 92 a2 a2 ac 8b 6f ab 47 67 7e 25 98 2c f6 e3 e5 60 3a 28 1d 3d bb d6 96 8d 6b 6b ac ea 6f 36 e0 2d 21 00 aa 44 db 3a 9e 37 63 20 8e bd 87 5a e6 5b 4b 09 1b b4 66 70 ee 4e 77 2e 54 8f eb 4b a4 44 34 Data Ascii: VMwS={fIm\| .q [9*oM'Fs#.9R=G8S4{{H#^FjnJw"F_QJK-N+8jWs^/$L21G\%;}99;oGg~%,`:(=kko6-!D:7c Z[KfpNw.TKD4
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 8d 89 01 8e e5 1b 46 7a f5 fa f7 a7 84 b5 b6 9c 04 86 04 24 15 0c 14 60 8e 84 03 d8 8e 06 33 5a 0f 0e d5 52 db 62 60 39 7c 80 07 e2 7a 71 58 d7 d6 b2 da f9 be 44 51 b1 97 0c eb 20 ca bf 39 ce 3d 78 ea 38 a1 82 f3 19 75 04 71 c8 90 89 ee 52 36 71 be 30 78 24 9e 4e 7b 71 e9 5d 92 da e9 d7 51 04 b1 d4 5e d2 5c ed 85 9c 96 50 38 ca 32 67 07 9f 61 d6 b9 39 63 69 e2 58 a2 1b 63 71 bd 09 ea ab 81 c0 f5 19 fa 62 9f 60 f2 c1 6f 15 92 b3 33 03 b5 43 82 72 e3 a6 18 73 9a 9b 97 63 a9 d4 4e a5 a6 69 ca d3 22 79 5b c9 9a 5b 39 00 e8 38 72 a4 70 46 31 c1 3f 4a af 6d a1 e9 9a a0 17 8c d3 c3 3b 2a bb 05 03 69 27 1f 32 fa af 39 03 f0 ae 7b 52 ba d4 97 cc 86 6f 30 aa 92 15 54 96 65 c8 e3 bf d4 f2 2a 7d 19 9e 1d 2f ce 86 e5 1a e0 02 8f 6e e0 ed ce 78 ed e9 8e 46 3b d3 b9 36 Data Ascii: Fz$`3ZRb`9\|zqXDQ 9=x8uqR6q0x$N{q]Q^\P82ga9ciXcqb`o3CrscNi"y[[98rpF1?Jm;i'29{Ro0Te}/nxF;6
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 92 27 93 1b c9 24 0d d8 e3 20 8f eb 45 96 e3 d4 17 44 d5 2d b6 25 be bd 0b 46 08 6d b7 36 99 2a 7a 1d a5 48 f6 e2 b1 35 8b 0d 6e d6 1d f3 eb 76 f7 52 ac 6c 63 89 23 31 33 8e f8 1d 3d 3a 8c 72 3d 6b 6a 66 8f 53 b2 38 d4 24 b2 7b 77 56 33 08 94 b7 d3 1d 08 f9 87 3d b1 ef 58 37 52 4e 61 9e c6 0b db 8b a7 b7 8a 45 8e fa 49 02 ef 04 0c a1 db d4 1c 11 d2 86 d0 92 66 06 97 35 dc 96 4e 96 ba a5 d2 22 aa c8 62 98 82 ae 09 e3 9c 67 8f eb 5d 7d bd c4 97 9a 66 e5 b1 54 b8 39 4f 95 c3 aa 8c 0d de b8 19 1c 67 a5 71 30 68 f2 cd 6e a7 c9 62 a3 28 51 01 61 c7 5f ad 76 cb 79 a9 e9 f7 16 33 5c 49 6c 62 99 02 ab 47 20 8f 04 e0 80 e4 0f 6e f9 c5 21 98 9f 62 b9 88 17 5b 67 11 c6 72 f8 0b b4 e3 bf af e5 d2 ba ed 33 c5 16 28 af 6b 0c 70 c5 70 32 44 00 fc f9 1d 7f 1e 3a 71 5b 76 Data Ascii: '$ ED-%Fm6*zH5nvRlc#13=:r=kjfS8${wV3=X7RNaEIf5N"bg]}fT9Ogq0hnb(Qa_vy3\IlbG n!b[gr3(kpp2D:q[v
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: c8 c6 7f c9 af 46 b2 97 4d d7 b4 ab 75 9b 64 8c dd 0c 64 a1 46 1e 84 60 83 5c 2f 88 fc 3f 26 8f 73 e6 c4 8f 2c 0d ff 00 2d 72 49 23 b0 3e e2 8b 15 b9 6c 9f 11 c2 02 c4 ca 57 19 ca b3 0c fb f7 fd 0e 28 ac cb 2f 15 5f 5b db f9 7e 72 b6 0f fc b4 90 ab 0f a8 1f e7 9a 28 ba 26 c7 ac 47 19 9f 7f ee d9 70 40 6c 80 3b 7b 53 5b 4f cb b1 55 50 0f 60 6a 46 b6 8e 56 59 76 b4 2d dd e3 7d 8d 9f a8 e0 fe 35 68 07 00 7c f9 1e ac 2a 8a 20 8a da 48 b3 b4 ed cf 51 ba ac 2e 5a 3c 4a a3 9e a0 f4 a5 52 ec 49 1b 42 8f 63 9a 79 04 f4 2b ef 91 40 8a a6 15 dd 88 9c a9 c7 08 4f 15 95 ab 68 b6 3a 82 b8 ba 47 85 e5 89 a1 37 36 f9 8e 41 91 8e 71 c3 60 74 24 71 da b6 27 81 c2 e6 30 24 20 f0 a4 0f d3 35 14 76 45 b2 6e 84 6c c4 9f ba 0f 4e c3 34 34 9e 8c 16 9b 1e 34 fa 6e a7 e1 ad 62 3d Data Ascii: FMuddF`\/?&s,-rI#>lW(/_[~r(&Gp@l;{S[OUP`jFVYv-}5h\|* HQ.Z<JRIBcy+@Oh:G76Aq`t$q'0$ 5vEnlN444nb=
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: a3 91 4f cb f3 0e 57 e5 e7 0c 33 d4 60 f5 af 40 b2 d3 2d b4 d7 9a 58 bf 74 26 3c a6 ff 00 dd a9 ff 00 64 1e 99 f4 f6 ae 2b c6 5a 50 b1 ba 17 16 df 25 bd db 66 48 13 0a ab 20 18 df 8e 99 a8 b5 b5 28 ea e2 2b ae 68 81 08 89 5d 93 85 49 03 aa 1e c7 8a f3 cd 4b 49 9a 09 e4 13 a2 ab 06 c1 55 c9 1f 89 35 b3 e1 fd 5a 69 6f 92 49 ae be cb 0a c7 e5 ba 2c 6a a1 70 78 39 c7 23 03 d8 f5 c5 5e f1 76 a1 6e 6c 6d dd 6e 96 5e 09 0a bd 4f 4e 7f 51 4e f7 42 68 e0 20 46 b4 bc 58 ed db 67 9c de 5f 3f 77 e6 e3 9c f4 1c e6 ba 35 b4 c8 b5 d6 e2 bb 4f 91 13 ce 42 8d 18 28 5b 97 f9 71 95 e3 9f a7 35 cc de 5c 79 6e 64 45 2d b1 b9 07 8f 7a e8 b4 2b 80 7c fb 2b 83 14 9a 7c ce 5a 24 93 71 30 64 6e 38 00 67 05 73 ec 0d 08 96 76 36 d7 37 42 09 7e ca b1 bc f1 46 5e 37 8d 8e c7 8f b6 32 Data Ascii: OW3`@-Xt&<d+ZP%fH (+h]IKIU5ZioI,jpx9#^vnlmn^ONQNBh FXg_?w5OB([q5\yndE-z+\|+\|Z$q0dn8gsv67B~F^72
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 0e 49 1f 8f e5 54 9d c8 6a c7 45 79 7f 6f 6b 15 bd e3 34 f1 83 82 50 01 84 f5 2d c1 20 0f 51 eb 54 6c a4 5d 72 29 23 b9 b7 81 45 c6 ed db 5f 2f 19 5c ed 38 c7 39 1c e7 3d ea d4 b6 3e 7e 9a b1 44 d1 25 dc 6d f2 b4 69 b7 77 07 03 82 3b 1f d2 a3 b0 6b 85 9a 34 29 fb c5 cb 8d ce 11 88 2d 82 a7 d4 0c f4 f6 e0 d3 77 1a 31 ee 7c 0a 24 62 eb 73 18 75 3b 91 b6 10 73 5c f5 ce 8e 7c c6 8c cc f7 12 0f e2 84 60 0f 60 05 7a 9b 74 e7 19 ef e9 5e 73 7b e2 39 ed 75 0b d1 09 f2 ed 5e 43 17 99 1e dc c6 31 8c e4 1f 5c 1c e7 d6 a5 a5 70 e8 3a d3 4b 16 9a 7b b6 a1 a6 35 ac 3b 42 19 ae 10 10 4b 1c 6e f5 ef 9e 71 f8 d5 cd 1e e5 4d 97 f6 74 b3 c4 09 91 e2 f3 56 43 95 60 31 f3 01 d7 83 f2 f6 ed ef 5b 7a 36 a9 16 b1 a5 a1 66 f3 b8 02 40 3a 6e c7 2a 47 f9 fc 8d 73 9a 87 87 85 bc bf Data Ascii: ITjEyok4P- QTl]r)#E_/\89=>~D%miw;k4)-w1\|$bsu;s\\|``zt^s{9u^C1\p:K{5;BKnqMtVC`1[z6f@:n*Gs
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: c5 a6 cc 9a 8e 87 39 b6 b7 95 b3 25 aa cb c4 67 38 ca 73 f3 29 27 a7 6f a5 4d 17 85 b5 cd 53 49 97 6c 70 cb 0c ea 63 6c a2 12 c3 be 32 78 fe 86 bb 8d 2e d2 7d 42 08 a4 d6 6d 51 66 43 e6 79 40 82 23 6e 85 49 1d 71 fa d7 44 88 88 a1 55 55 47 a0 18 14 b9 6e ee 55 da 56 3e 74 ba f0 c6 a1 a3 4e db 3e d1 13 29 e7 69 64 23 de b3 24 d2 ee 2e 26 77 79 a7 67 65 00 b6 f3 92 07 00 67 bd 7d 29 a8 e9 76 fa 9c 1e 5c ca 37 0f b9 20 19 2b ff 00 d6 f6 ae 36 fb c1 77 51 3b 35 bc 49 28 f5 41 9f cc 75 a7 66 41 e5 d6 f0 5f c1 19 45 26 45 6c 67 39 dd c1 ec c3 07 da b5 ed e7 bc 4b 8b 79 23 b0 79 41 67 df 19 b9 d8 0a 95 2b f2 b6 de 1b 9e f9 15 b3 79 6d 36 93 77 18 b8 89 a2 8c bf 29 2c 67 27 8c 65 4f f4 ae 9a dc 25 bd c5 a4 fa 74 10 bc 2d 93 e6 4b 82 d9 23 8e 49 01 78 1d 81 23 3c Data Ascii: 9%g8s)'oMSIlpcl2x.}BmQfCy@#nIqDUUGnUV>tN>)id#$.&wygeg})v\7 +6wQ;5I(AufA_E&Elg9Ky#yAg+ym6w),g'eO%t-K#Ix#<
2024-10-31 02:41:31 UTC	747	IN	Data Raw: 70 47 3f 50 6b 4e 4d 63 fb 65 24 8e da e9 7e ca b0 90 27 44 dd 2d b3 13 f7 81 07 21 08 18 27 83 c7 7a cc b0 8f c3 fe 29 b7 8e 68 ad bc 8b a0 76 cb 00 0a bf 36 39 2a b8 c6 0e 0e 70 2b 43 49 f0 bd d6 99 78 45 a9 59 ec a5 f9 64 b7 9d 48 d8 30 46 55 f1 83 c9 39 5c 0c 8e d4 c9 03 a0 69 66 09 a4 91 e5 86 72 04 37 71 a4 e1 e3 56 2f cb 2b 31 1b 79 39 2a 79 20 d7 4f a2 cb 30 d3 e0 89 62 80 c6 a8 be 5b ac 99 0f 1e 38 e8 38 3e dd 3d ea 3b eb 4b 58 74 5b 98 ee 2d 92 68 fc 9f de 20 4c 87 c2 e0 60 1f 4e df 4a c5 f0 96 a3 73 0e 8b 04 5e 42 47 1c 00 46 9b f2 a2 45 ea 42 b1 c8 63 8e 46 38 34 0c ec a3 66 60 41 4d b8 f7 cd 73 fe 24 d7 e4 d3 99 21 b6 31 b4 b8 25 c3 02 76 8e d5 d1 06 46 45 65 39 52 32 2b 96 f1 6e 9e 66 54 bb 41 90 a3 63 e0 74 f4 3f d2 9b 03 c9 75 d6 93 51 d4 Data Ascii: pG?PkNMce$~'D-!'z)hv69p+CIxEYdH0FU9\ifr7qV/+1y9y O0b[88>=;KXt[-h L`NJs^BGFEBcF84f`AMs$!1%vFEe9R2+nfTAct?uQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49790	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	842	OUT	POST /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	203	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 53 65 6c 65 63 74 45 73 63 61 70 65 49 6e 64 65 78 65 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 53 65 6c 65 63 74 45 73 63 61 70 65 49 6e 64 65 78 65 73 20 7b 5c 6e 20 20 63 75 72 72 65 6e 74 55 73 65 72 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 62 75 63 6b 65 74 4c 69 73 74 49 74 65 6d 73 49 6e 64 65 78 5c 6e 20 20 20 20 62 6f 6f 6b 69 6e 67 41 64 76 65 6e 74 75 72 65 73 49 6e 64 65 78 5c 6e 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 7d Data Ascii: {"operationName":"getSelectEscapeIndexes","variables":{},"query":"query getSelectEscapeIndexes {\n currentUser {\n id\n bucketListItemsIndex\n bookingAdventuresIndex\n __typename\n }\n}\n"}
2024-10-31 02:41:31 UTC	1184	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"f3951f0268200a69d1aa45c61283e7f5" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 7ac47060-ea15-4eac-84f8-395a9e805797 X-Runtime: 0.052616 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db0495a5b954750-DFW
2024-10-31 02:41:31 UTC	29	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 55 73 65 72 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"data":{"currentUser":null}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	842	OUT	POST /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 421 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	421	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 41 64 76 65 6e 74 75 72 65 50 68 6f 74 6f 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 32 38 37 35 38 22 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 41 64 76 65 6e 74 75 72 65 50 68 6f 74 6f 73 28 24 69 64 3a 20 49 44 21 29 20 7b 5c 6e 20 20 61 64 76 65 6e 74 75 72 65 28 69 64 3a 20 24 69 64 29 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 70 68 6f 74 6f 73 28 66 69 72 73 74 3a 20 31 30 29 20 7b 5c 6e 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 5c 6e 20 20 20 20 20 20 63 72 65 61 74 65 64 41 74 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 69 6d 61 67 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 6f 72 69 67 69 6e 61 6c 5c 6e 20 20 20 20 20 20 20 Data Ascii: {"operationName":"getAdventurePhotos","variables":{"id":"28758"},"query":"query getAdventurePhotos($id: ID!) {\n adventure(id: $id) {\n id\n photos(first: 10) {\n aspectRatio\n createdAt\n id\n image {\n original\n
2024-10-31 02:41:31 UTC	1186	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 5558 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"62a48fffae247bf26d2c42dd855c8333" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: cafa874a-c0b4-41c5-b8c0-b5c0bddccd1a X-Runtime: 0.092652 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db0495a5df9e779-DFW
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 64 76 65 6e 74 75 72 65 22 3a 7b 22 69 64 22 3a 22 32 38 37 35 38 22 2c 22 70 68 6f 74 6f 73 22 3a 5b 7b 22 61 73 70 65 63 74 52 61 74 69 6f 22 3a 31 2e 34 39 39 32 36 37 39 33 35 35 37 38 33 33 31 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 33 37 5a 22 2c 22 69 64 22 3a 22 34 32 30 35 37 30 22 2c 22 69 6d 61 67 65 22 3a 7b 22 6f 72 69 67 69 6e 61 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 70 68 6f 74 6f 2f 34 32 30 35 37 30 2f 69 6d 61 67 65 2f 64 62 35 61 33 33 37 63 35 64 36 62 36 61 61 36 65 39 61 61 36 37 31 64 32 36 37 66 34 33 65 66 2e 6a 70 67 22 2c 22 6d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 Data Ascii: {"data":{"adventure":{"id":"28758","photos":[{"aspectRatio":1.499267935578331,"createdAt":"2023-03-19T03:16:37Z","id":"420570","image":{"original":"https://assets.riparide.com/photo/420570/image/db5a337c5d6b6aa6e9aa671d267f43ef.jpg","medium":"https://asse
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 34 33 5a 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 68 6f 74 6f 22 7d 2c 7b 22 61 73 70 65 63 74 52 61 74 69 6f 22 3a 31 2e 34 39 39 32 36 37 39 33 35 35 37 38 33 33 31 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 33 37 5a 22 2c 22 69 64 22 3a 22 34 32 30 35 37 32 22 2c 22 69 6d 61 67 65 22 3a 7b 22 6f 72 69 67 69 6e 61 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 70 68 6f 74 6f 2f 34 32 30 35 37 32 2f 69 6d 61 67 65 2f 37 32 30 37 33 37 66 35 34 31 37 65 33 62 37 32 65 65 30 30 30 37 32 38 33 63 39 65 66 31 62 32 2e 6a 70 67 22 2c 22 6d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 Data Ascii: :"2023-03-19T03:16:43Z","__typename":"Photo"},{"aspectRatio":1.499267935578331,"createdAt":"2023-03-19T03:16:37Z","id":"420572","image":{"original":"https://assets.riparide.com/photo/420572/image/720737f5417e3b72ee0007283c9ef1b2.jpg","medium":"https://ass
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 34 34 5a 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 68 6f 74 6f 22 7d 2c 7b 22 61 73 70 65 63 74 52 61 74 69 6f 22 3a 31 2e 34 39 39 32 36 37 39 33 35 35 37 38 33 33 31 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 33 37 5a 22 2c 22 69 64 22 3a 22 34 32 30 35 37 34 22 2c 22 69 6d 61 67 65 22 3a 7b 22 6f 72 69 67 69 6e 61 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 70 68 6f 74 6f 2f 34 32 30 35 37 34 2f 69 6d 61 67 65 2f 31 64 38 35 65 63 62 61 63 36 63 33 31 38 32 34 61 34 36 61 62 34 38 62 30 35 37 39 65 36 34 63 2e 6a 70 67 22 2c 22 6d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 Data Ascii: ":"2023-03-19T03:16:44Z","__typename":"Photo"},{"aspectRatio":1.499267935578331,"createdAt":"2023-03-19T03:16:37Z","id":"420574","image":{"original":"https://assets.riparide.com/photo/420574/image/1d85ecbac6c31824a46ab48b0579e64c.jpg","medium":"https://as
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 34 37 5a 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 68 6f 74 6f 22 7d 2c 7b 22 61 73 70 65 63 74 52 61 74 69 6f 22 3a 31 2e 34 39 39 32 36 37 39 33 35 35 37 38 33 33 31 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 33 37 5a 22 2c 22 69 64 22 3a 22 34 32 30 35 37 36 22 2c 22 69 6d 61 67 65 22 3a 7b 22 6f 72 69 67 69 6e 61 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 70 68 6f 74 6f 2f 34 32 30 35 37 36 2f 69 6d 61 67 65 2f 64 32 32 33 35 33 31 33 32 35 37 66 64 36 33 39 38 65 34 64 66 38 39 34 32 35 65 34 63 31 39 64 2e 6a 70 67 22 2c 22 6d 65 64 69 75 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 61 Data Ascii: t":"2023-03-19T03:16:47Z","__typename":"Photo"},{"aspectRatio":1.499267935578331,"createdAt":"2023-03-19T03:16:37Z","id":"420576","image":{"original":"https://assets.riparide.com/photo/420576/image/d2235313257fd6398e4df89425e4c19d.jpg","medium":"https://a
2024-10-31 02:41:31 UTC	82	IN	Data Raw: 41 74 22 3a 22 32 30 32 33 2d 30 33 2d 31 39 54 30 33 3a 31 36 3a 34 38 5a 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 68 6f 74 6f 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 53 74 6f 72 79 41 64 76 65 6e 74 75 72 65 22 7d 7d 7d Data Ascii: At":"2023-03-19T03:16:48Z","__typename":"Photo"}],"__typename":"StoryAdventure"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49788	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	842	OUT	POST /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	525	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 4d 79 42 75 63 6b 65 74 4c 69 73 74 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 4d 79 42 75 63 6b 65 74 4c 69 73 74 73 20 7b 5c 6e 20 20 63 75 72 72 65 6e 74 55 73 65 72 20 7b 5c 6e 20 20 20 20 69 64 5c 6e 20 20 20 20 62 75 63 6b 65 74 4c 69 73 74 73 20 7b 5c 6e 20 20 20 20 20 20 2e 2e 2e 42 75 63 6b 65 74 4c 69 73 74 46 72 61 67 6d 65 6e 74 5c 6e 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 5c 6e 66 72 61 67 6d 65 6e 74 20 42 75 63 6b 65 74 4c 69 73 74 46 72 61 67 6d 65 6e 74 20 6f 6e 20 42 75 63 6b 65 74 4c 69 73 74 20 7b 5c 6e Data Ascii: {"operationName":"getMyBucketLists","variables":{},"query":"query getMyBucketLists {\n currentUser {\n id\n bucketLists {\n ...BucketListFragment\n __typename\n }\n __typename\n }\n}\n\nfragment BucketListFragment on BucketList {\n
2024-10-31 02:41:31 UTC	1184	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"f3951f0268200a69d1aa45c61283e7f5" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 684801c6-be17-4d3b-9e1c-9d56674228c0 X-Runtime: 0.058698 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db0495a686c4635-DFW
2024-10-31 02:41:31 UTC	29	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 74 55 73 65 72 22 3a 6e 75 6c 6c 7d 7d Data Ascii: {"data":{"currentUser":null}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49795	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	785	OUT	GET /api/user/current_user HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	1359	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342491&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=u5MAOzaG7Kn4i8L9MSYXBd9G1O1WVCKx10HbbZiofoE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-store Vary: * Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:31 GMT; SameSite=Lax; secure Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:31 GMT; SameSite=Lax; secure Etag: W/"74234e98afe7498fb5daf1f36ac2d78a" X-Request-Id: aa05268c-83ce-46b3-887d-3e33788e5628 X-Runtime: 0.020265 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC
2024-10-31 02:41:31 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 30 34 39 35 61 36 62 37 61 32 63 61 61 2d 44 46 57 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8db0495a6b7a2caa-DFW
2024-10-31 02:41:31 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49806	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	566	OUT	GET /assets/vendors.d5a186ee975a655f6996.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:31 UTC	1102	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1721169300&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=MN3LMm1UkJTFTUwDyW5X2AJ9oipv0C8BCdN3kRPrbLo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1721169300&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=MN3LMm1UkJTFTUwDyW5X2AJ9oipv0C8BCdN3kRPrbLo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Tue, 16 Jul 2024 05:19:20 GMT Cache-Control: public, max-age=864000 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur CF-Cache-Status: HIT Age: 3956 Server: cloudflare CF-RAY: 8db0495ade19e7ff-DFW server-timing: cfL4;desc="?proto=TCP&rtt=2132&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1144&delivery_rate=1294012&cwnd=251&unsent_bytes=0&cid=c6079b59392dcdfe&ts=149&x=0"
2024-10-31 02:41:31 UTC	267	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 73 2e 64 35 61 31 38 36 65 65 39 37 35 61 36 35 35 66 36 39 39 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 72 69 70 61 72 69 64 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 72 69 70 61 72 69 64 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 36 5d 2c 7b 39 33 31 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 30 31 37 36 29 7d 2c 37 34 37 32 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 33 35 36 35 29 7d 2c 37 34 38 32 38 3a 66 75 Data Ascii: 7c00/! For license information please see vendors.d5a186ee975a655f6996.js.LICENSE.txt /(self.webpackChunkriparide=self.webpackChunkriparide\|\|[]).push([[216],{93133:function(e,t,n){e.exports=n(50176)},74720:function(e,t,n){e.exports=n(23565)},74828:fu
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 34 31 37 35 29 7d 2c 36 36 34 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 38 32 30 37 29 7d 2c 35 38 35 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 38 32 36 32 34 29 7d 2c 39 33 32 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 34 32 32 31 29 7d 2c 33 33 39 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 35 32 39 37 29 7d 2c 37 37 32 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 37 31 39 32 32 29 7d 2c 37 35 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e Data Ascii: ){e.exports=n(94175)},66406:function(e,t,n){e.exports=n(68207)},58548:function(e,t,n){e.exports=n(82624)},93287:function(e,t,n){e.exports=n(44221)},33929:function(e,t,n){e.exports=n(15297)},77219:function(e,t,n){e.exports=n(71922)},7544:function(e,t,n){e.
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 64 75 6c 65 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 65 2e 65 78 70 6f 72 74 73 7d 2c 35 30 31 37 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 37 39 31 36 39 29 2c 6e 28 36 33 30 39 30 29 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 33 30 39 33 29 2e 41 72 72 61 79 2e 66 72 6f 6d 7d 2c 32 33 35 36 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 30 39 33 29 2c 69 3d 72 2e 4a 53 4f 4e 7c 7c 28 72 2e 4a 53 4f 4e 3d 7b 73 74 72 69 6e 67 69 66 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 73 74 72 69 6e 67 69 66 79 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 39 34 Data Ascii: dule=!0,e.exports.default=e.exports},50176:function(e,t,n){n(79169),n(63090),e.exports=n(63093).Array.from},23565:function(e,t,n){var r=n(63093),i=r.JSON\|\|(r.JSON={stringify:JSON.stringify});e.exports=function(e){return i.stringify.apply(i,arguments)}},94
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 6e 20 6f 62 6a 65 63 74 21 22 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 35 31 37 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 36 35 31 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 72 28 65 2c 21 31 2c 6e 2e 70 75 73 68 2c 6e 2c 74 29 2c 6e 7d 7d 2c 34 33 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 30 33 29 2c 69 3d 6e 28 34 35 33 32 31 29 2c 6f 3d 6e 28 31 30 31 33 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 61 29 7b 76 61 72 20 73 2c 75 3d 72 28 74 29 2c 6c 3d 69 28 75 2e 6c 65 6e 67 74 68 29 2c 63 3d Data Ascii: n object!");return e}},51705:function(e,t,n){var r=n(26510);e.exports=function(e,t){var n=[];return r(e,!1,n.push,n,t),n}},43206:function(e,t,n){var r=n(6303),i=n(45321),o=n(10139);e.exports=function(e){return function(t,n,a){var s,u=r(t),l=i(u.length),c=
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 28 74 3d 4f 62 6a 65 63 74 28 65 29 2c 69 29 29 3f 6e 3a 6f 3f 72 28 74 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 61 3d 72 28 74 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 61 7d 7d 2c 34 37 34 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 7d 2c 32 31 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 Data Ascii: ction(e,t){try{return e[t]}catch(n){}}(t=Object(e),i))?n:o?r(t):"Object"==(a=r(t))&&"function"==typeof t.callee?"Arguments":a}},47489:function(e){var t={}.toString;e.exports=function(e){return t.call(e).slice(8,-1)}},21706:function(e,t,n){"use strict";var
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 3d 3d 69 26 26 28 65 2e 5f 69 5b 69 5d 3d 6f 29 29 2c 65 7d 2c 67 65 74 45 6e 74 72 79 3a 76 2c 73 65 74 53 74 72 6f 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6c 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 5f 74 3d 70 28 65 2c 74 29 2c 74 68 69 73 2e 5f 6b 3d 6e 2c 74 68 69 73 2e 5f 6c 3d 76 6f 69 64 20 30 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 5f 6b 2c 6e 3d 65 2e 5f 6c 3b 6e 26 26 6e 2e 72 3b 29 6e 3d 6e 2e 70 3b 72 65 74 75 72 6e 20 65 2e 5f 74 26 26 28 65 2e 5f 6c 3d 6e 3d 6e 3f 6e 2e 6e 3a 65 2e 5f 74 2e 5f 66 29 3f 63 28 30 2c 22 6b 65 79 73 22 3d 3d 74 3f 6e 2e 6b 3a 22 76 61 6c 75 65 73 22 3d 3d 74 3f 6e 2e 76 3a 5b 6e 2e 6b 2c 6e 2e 76 5d Data Ascii: ==i&&(e._i[i]=o)),e},getEntry:v,setStrong:function(e,t,n){l(e,t,(function(e,n){this._t=p(e,t),this._k=n,this._l=void 0}),(function(){for(var e=this,t=e._k,n=e._l;n&&n.r;)n=n.p;return e._t&&(e._l=n=n?n.n:e._t._f)?c(0,"keys"==t?n.k:"values"==t?n.v:[n.k,n.v]
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 73 2c 74 29 29 2e 68 61 73 28 65 29 3a 6e 26 26 63 28 6e 2c 74 68 69 73 2e 5f 69 29 7d 7d 29 2c 6c 7d 2c 64 65 66 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 69 28 6f 28 74 29 2c 21 30 29 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 72 3f 67 28 65 29 2e 73 65 74 28 74 2c 6e 29 3a 72 5b 65 2e 5f 69 5d 3d 6e 2c 65 7d 2c 75 66 73 74 6f 72 65 3a 67 7d 7d 2c 36 36 39 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 32 32 30 29 2c 69 3d 6e 28 31 34 35 31 38 29 2c 6f 3d 6e 28 35 37 30 31 30 29 2c 61 3d 6e 28 38 34 39 33 30 29 2c 73 3d 6e 28 34 34 33 37 39 29 2c 75 3d 6e 28 35 36 31 29 2c 6c 3d 6e 28 32 36 35 31 30 29 2c 63 3d 6e 28 38 30 30 33 29 2c 64 3d 6e 28 34 34 34 32 Data Ascii: s,t)).has(e):n&&c(n,this._i)}}),l},def:function(e,t,n){var r=i(o(t),!0);return!0===r?g(e).set(t,n):r[e._i]=n,e},ufstore:g}},66924:function(e,t,n){"use strict";var r=n(3220),i=n(14518),o=n(57010),a=n(84930),s=n(44379),u=n(561),l=n(26510),c=n(8003),d=n(4442
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 2c 72 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 2c 72 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 35 39 33 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 33 30 35 3a 66 Data Ascii: rn function(n,r){return e.call(t,n,r)};case 3:return function(n,r,i){return e.call(t,n,r,i)}}return function(){return e.apply(t,arguments)}}},59359:function(e){e.exports=function(e){if(null==e)throw TypeError("Can't call method on "+e);return e}},97305:f
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 72 65 74 75 72 6e 20 74 5b 75 5d 3d 65 5b 75 5d 2c 74 7d 28 66 29 3a 76 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 3f 6f 28 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 2c 66 29 3a 66 2c 76 26 26 28 28 62 2e 76 69 72 74 75 61 6c 7c 7c 28 62 2e 76 69 72 74 75 61 6c 3d 7b 7d 29 29 5b 63 5d 3d 66 2c 65 26 6c 2e 52 26 26 77 26 26 21 77 5b 63 5d 26 26 61 28 77 2c 63 2c 66 29 29 29 7d 3b 6c 2e 46 3d 31 2c 6c 2e 47 3d 32 2c 6c 2e 53 3d 34 2c 6c 2e 50 3d 38 2c 6c 2e 42 3d 31 36 2c 6c 2e 57 3d 33 32 2c 6c 2e 55 3d 36 34 2c 6c 2e 52 3d 31 32 38 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 38 34 39 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: this,arguments)};return t[u]=e[u],t}(f):v&&"function"==typeof f?o(Function.call,f):f,v&&((b.virtual\|\|(b.virtual={}))[c]=f,e&l.R&&w&&!w[c]&&a(w,c,f)))};l.F=1,l.G=2,l.S=4,l.P=8,l.B=16,l.W=32,l.U=64,l.R=128,e.exports=l},84930:function(e){e.exports=function(e
2024-10-31 02:41:31 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 36 35 34 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 37 34 38 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 3f 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 72 28 65 29 3f 65 2e 73 70 6c 69 74 28 22 22 29 3a 4f 62 6a 65 63 74 28 65 29 7d 7d 2c 39 32 35 36 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 34 35 30 32 29 2c 69 3d 6e 28 32 33 30 33 32 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 65 78 Data Ascii: ction(){return 7}}).a}))},65474:function(e,t,n){var r=n(47489);e.exports=Object("z").propertyIsEnumerable(0)?Object:function(e){return"String"==r(e)?e.split(""):Object(e)}},92566:function(e,t,n){var r=n(64502),i=n(23032)("iterator"),o=Array.prototype;e.ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49801	142.250.184.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	675	OUT	GET /recaptcha/api.js?render=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:31 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 31 Oct 2024 02:41:31 GMT Date: Thu, 31 Oct 2024 02:41:31 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:31 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-31 02:41:31 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-31 02:41:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49805	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	408	OUT	GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:31 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9270 Connection: close Date: Sun, 22 Sep 2024 07:45:31 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Fri, 20 Sep 2024 16:09:56 GMT ETag: "00e9c65cbba11c07c4bf4a6e2727b8ea" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: s5qtRJFv7hDXMk2uMHhT5A4n.cM7M8To Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1b412557b82dda96e078541f9ee8dfb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: tOaLhpCpLwgl9_yAU-UmnCT4H2iclQq-knpFti6BvHLPSJIj8ifwIA== Age: 3351361
2024-10-31 02:41:31 UTC	9270	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 34 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 69 2c 65 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 61 62 6c 65 64 29 3f 6e 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[464],{9254:function(t,n,i){function e(t,n){var i,e;return"boolean"==typeof(null==n?void 0:n.enabled)?n.enabled:null===(e=null===(i=null==t?void 0:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49808	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	587	OUT	GET /next-integrations/actions/google-analytics-4-web/2c69bee66ca16e286c8a.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:32 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 201240 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 22 Oct 2024 11:56:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iKn0ksK_erB4L2mttifyUVWY0rXSnqDu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 04:22:42 GMT ETag: "20d5c4b1bd8ff4a9ef6d20ab75983251" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: Z94AMj6bgou0QO5mZBU3YvS9Jh7yTyN59RkXGrs5IqOcHNT9S6N1zA== Age: 80330
2024-10-31 02:41:32 UTC	15696	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 37 39 34 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 3a 74 2c 41 62 6f 72 74 53 69 67 6e 61 6c 3a 72 7d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 3b 65 2e 65 78 70 6f 72 74 73 3d 74 2c 65 2e 65 78 70 6f 72 74 73 2e 41 62 6f 72 74 53 69 67 6e 61 6c 3d 72 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 74 7d 2c 31 32 39 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6f 3d 72 28 36 31 35 30 29 2c 6e 3d 72 28 36 Data Ascii: (()=>{var e,t,r={7948:e=>{"use strict";const{AbortController:t,AbortSignal:r}="undefined"!=typeof self?self:"undefined"!=typeof window?window:void 0;e.exports=t,e.exports.AbortSignal=r,e.exports.default=t},1291:(e,t,r)=>{"use strict";const o=r(6150),n=r(6
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 28 73 2c 61 2c 69 2c 63 2c 75 2c 64 2c 6c 29 7d 7d 74 2e 6b 65 79 77 6f 72 64 73 3d 7b 61 64 64 69 74 69 6f 6e 61 6c 49 74 65 6d 73 3a 21 30 2c 69 74 65 6d 73 3a 21 30 2c 63 6f 6e 74 61 69 6e 73 3a 21 30 2c 61 64 64 69 74 69 6f 6e 61 6c 50 72 6f 70 65 72 74 69 65 73 3a 21 30 2c 70 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 21 30 2c 6e 6f 74 3a 21 30 2c 69 66 3a 21 30 2c 74 68 65 6e 3a 21 30 2c 65 6c 73 65 3a 21 30 7d 2c 74 2e 61 72 72 61 79 4b 65 79 77 6f 72 64 73 3d 7b 69 74 65 6d 73 3a 21 30 2c 61 6c 6c 4f 66 3a 21 30 2c 61 6e 79 4f 66 3a 21 30 2c 6f 6e 65 4f 66 3a 21 30 7d 2c 74 2e 70 72 6f 70 73 4b 65 79 77 6f 72 64 73 3d 7b 24 64 65 66 73 3a 21 30 2c 64 65 66 69 6e 69 74 69 6f 6e 73 3a 21 30 2c 70 72 6f 70 65 72 74 69 65 73 3a 21 30 2c 70 61 74 74 65 72 Data Ascii: (s,a,i,c,u,d,l)}}t.keywords={additionalItems:!0,items:!0,contains:!0,additionalProperties:!0,propertyNames:!0,not:!0,if:!0,then:!0,else:!0},t.arrayKeywords={items:!0,allOf:!0,anyOf:!0,oneOf:!0},t.propsKeywords={$defs:!0,definitions:!0,properties:!0,patter
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 5d 2c 74 29 7d 7d 6e 26 26 28 72 2e 68 65 61 64 65 72 73 3d 73 29 7d 72 2e 71 75 65 72 79 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 66 3d 30 2c 68 3d 6f 2e 6c 65 6e 67 74 68 3b 66 3c 68 3b 2b 2b 66 29 7b 76 61 72 20 6d 3d 6f 5b 66 5d 2e 73 70 6c 69 74 28 22 40 22 29 3b 69 66 28 6d 5b 30 5d 3d 63 65 28 6d 5b 30 5d 29 2c 74 2e 75 6e 69 63 6f 64 65 53 75 70 70 6f 72 74 29 6d 5b 31 5d 3d 63 65 28 6d 5b 31 5d 2c 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 65 6c 73 65 20 74 72 79 7b 6d 5b 31 5d 3d 55 2e 74 6f 41 53 43 49 49 28 63 65 28 6d 5b 31 5d 2c 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 2e 65 72 72 6f 72 3d 72 2e 65 72 72 6f 72 7c 7c 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 27 73 20 64 6f 6d 61 69 6e Data Ascii: ],t)}}n&&(r.headers=s)}r.query=void 0;for(var f=0,h=o.length;f<h;++f){var m=o[f].split("@");if(m[0]=ce(m[0]),t.unicodeSupport)m[1]=ce(m[1],t).toLowerCase();else try{m[1]=U.toASCII(ce(m[1],t).toLowerCase())}catch(e){r.error=r.error\|\|"Email address's domain
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 28 5c 2e 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 29 7b 33 7d 29 29 7c 3a 29 29 7c 28 28 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 3a 29 7b 31 7d 28 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 31 2c 36 7d 29 7c 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 30 2c 34 7d 3a 28 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 28 5c 2e 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 29 7b 33 7d 29 29 7c 3a 29 29 7c 28 3a 28 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 31 2c 37 7d 29 7c 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 Data Ascii: 1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(([0-9a-f]{1,4}:){1}(((:[0-9a-f]{1,4}){1,6})\|((:[0-9a-f]{1,4}){0,4}:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(:(((:[0-9a-f]{1,4}){1,7})\|((:[0-9a-f]{1,4})
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 5f 43 6f 64 65 26 26 6e 2e 5f 69 74 65 6d 73 2e 73 6f 6d 65 28 28 65 3d 3e 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 4e 61 6d 65 26 26 31 3d 3d 3d 74 5b 65 2e 73 74 72 5d 26 26 76 6f 69 64 20 30 21 3d 3d 72 5b 65 2e 73 74 72 5d 29 29 3f 6e 65 77 20 6f 2e 5f 43 6f 64 65 28 65 2e 5f 69 74 65 6d 73 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 4e 61 6d 65 26 26 28 74 3d 73 28 74 29 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 5f 43 6f 64 65 3f 65 2e 70 75 73 68 28 2e 2e 2e 74 2e 5f 69 74 65 6d 73 29 3a 65 2e 70 75 73 68 28 74 29 2c 65 29 29 2c 5b 5d 29 29 3a 65 3b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 6f 6e 73 74 20 6f 3d 72 5b 65 2e 73 74 72 5d 3b 72 65 74 75 72 6e 20 76 6f Data Ascii: _Code&&n._items.some((e=>e instanceof o.Name&&1===t[e.str]&&void 0!==r[e.str]))?new o._Code(e._items.reduce(((e,t)=>(t instanceof o.Name&&(t=s(t)),t instanceof o._Code?e.push(...t._items):e.push(t),e)),[])):e;var n;function s(e){const o=r[e.str];return vo
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 64 79 6e 61 6d 69 63 41 6e 63 68 6f 72 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 65 29 7b 69 66 28 63 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 63 6f 6e 73 74 20 72 3d 65 5b 74 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 73 6f 6d 65 28 75 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 75 28 72 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 6c 65 74 20 74 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 72 20 69 6e 20 65 29 7b 69 66 28 22 24 72 65 66 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 31 2f 30 3b 69 66 28 74 2b 2b 2c 21 69 2e 68 61 73 28 72 29 26 26 28 22 6f Data Ascii: dynamicAnchor"]);function u(e){for(const t in e){if(c.has(t))return!0;const r=e[t];if(Array.isArray(r)&&r.some(u))return!0;if("object"==typeof r&&u(r))return!0}return!1}function d(e){let t=0;for(const r in e){if("$ref"===r)return 1/0;if(t++,!i.has(r)&&("o
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 69 6e 65 64 60 29 29 29 2c 74 2e 69 66 28 64 2e 5f 60 24 7b 65 2e 65 76 61 6c 75 61 74 65 64 7d 2e 64 79 6e 61 6d 69 63 49 74 65 6d 73 60 2c 28 28 29 3d 3e 74 2e 61 73 73 69 67 6e 28 64 2e 5f 60 24 7b 65 2e 65 76 61 6c 75 61 74 65 64 7d 2e 69 74 65 6d 73 60 2c 64 2e 5f 60 75 6e 64 65 66 69 6e 65 64 60 29 29 29 7d 28 65 29 2c 77 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 67 65 6e 3a 74 2c 73 63 68 65 6d 61 45 6e 76 3a 72 2c 76 61 6c 69 64 61 74 65 4e 61 6d 65 3a 6f 2c 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 3a 6e 2c 6f 70 74 73 3a 73 7d 3d 65 3b 72 2e 24 61 73 79 6e 63 3f 74 2e 69 66 28 64 2e 5f 60 24 7b 6c 2e 64 65 66 61 75 6c 74 2e 65 72 72 6f 72 73 7d 20 3d 3d 3d 20 30 60 2c 28 28 29 3d 3e 74 2e 72 65 74 75 72 6e 28 6c 2e 64 Data Ascii: ined`))),t.if(d._`${e.evaluated}.dynamicItems`,(()=>t.assign(d._`${e.evaluated}.items`,d._`undefined`)))}(e),w(e),function(e){const{gen:t,schemaEnv:r,validateName:o,ValidationError:n,opts:s}=e;r.$async?t.if(d._`${l.default.errors} === 0`,(()=>t.return(l.d
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 72 65 66 73 2c 65 29 2c 74 68 69 73 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 73 63 68 65 6d 61 73 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 72 65 66 73 29 2c 74 68 69 73 2e 5f 63 61 63 68 65 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 7b 63 6f 6e 73 74 20 74 3d 77 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 68 69 73 2e 5f 63 61 63 68 65 2e 64 65 6c 65 74 65 28 74 2e 73 63 Data Ascii: moveAllSchemas(this.refs,e),this;switch(typeof e){case"undefined":return this._removeAllSchemas(this.schemas),this._removeAllSchemas(this.refs),this._cache.clear(),this;case"string":{const t=w.call(this,e);return"object"==typeof t&&this._cache.delete(t.sc
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 73 63 68 65 6d 61 3a 72 2c 70 61 72 65 6e 74 53 63 68 65 6d 61 3a 73 2c 69 74 3a 61 7d 3d 65 3b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 61 6a 76 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 65 72 72 6f 72 22 29 3b 69 66 28 61 2e 6f 70 74 73 2e 64 69 73 63 72 69 6d 69 6e 61 74 6f 72 26 26 73 2e 64 69 73 63 72 69 6d 69 6e 61 74 6f 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 72 2c 63 3d 74 2e 6c 65 74 28 22 76 61 6c 69 64 22 2c 21 31 29 2c 75 3d 74 2e 6c 65 74 28 22 70 61 73 73 69 6e 67 22 2c 6e 75 6c 6c 29 2c 64 3d 74 2e 6e 61 6d 65 28 22 5f 76 61 6c 69 64 22 29 3b 65 2e 73 65 74 50 61 72 61 6d 73 28 7b 70 61 73 73 69 6e 67 3a 75 7d 29 2c 74 2e 62 6c 6f 63 6b 28 28 66 75 6e Data Ascii: schema:r,parentSchema:s,it:a}=e;if(!Array.isArray(r))throw new Error("ajv implementation error");if(a.opts.discriminator&&s.discriminator)return;const i=r,c=t.let("valid",!1),u=t.let("passing",null),d=t.name("_valid");e.setParams({passing:u}),t.block((fun
2024-10-31 02:41:32 UTC	16384	IN	Data Raw: 6e 67 74 68 20 24 7b 73 7d 20 24 7b 6e 7d 60 29 7d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 39 30 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 39 31 34 33 29 2c 6e 3d 72 28 32 34 39 33 29 2c 73 3d 72 28 31 35 38 29 2c 61 3d 7b 6b 65 79 77 6f 72 64 3a 5b 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 6d 69 6e 4c 65 6e 67 74 68 22 5d 2c 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 73 63 68 65 6d 61 54 79 70 65 3a 22 6e 75 6d 62 65 72 22 2c 24 64 61 74 61 3a 21 30 2c 65 72 72 6f 72 3a 7b 6d 65 73 73 61 67 65 28 7b 6b 65 79 77 6f 72 64 3a 65 2c 73 63 68 65 6d 61 Data Ascii: ngth ${s} ${n}`)}};t.default=n},905:(e,t,r)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});const o=r(9143),n=r(2493),s=r(158),a={keyword:["maxLength","minLength"],type:"string",schemaType:"number",$data:!0,error:{message({keyword:e,schema

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49810	142.250.181.226	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	1283	OUT	GET /pagead/viewthroughconversion/740117353/?random=1730342490526&cv=11&fst=1730342490526&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-31 02:41:32 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlJzcsiy84J6puogBcb0NA--bKdaL2LbujrQFTKF5nMfRRLP4rUni2fMa6u; expires=Sat, 31-Oct-2026 02:41:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:32 UTC	367	IN	Data Raw: 31 32 61 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12a4(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 Data Ascii: b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];re
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 2b 2b 29 69 66 28 4c 3d 4c 5b 4b 5b 4d 5d 5d 2c 4c 3d 3d 6e 75 6c 6c 29 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d Data Ascii: ++)if(L=L[K[M]],L==null){H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 77 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 Data Ascii: tch==="function"){var I=w(Object,"assign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba
2024-10-31 02:41:32 UTC	279	IN	Data Raw: 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 30 39 41 37 38 42 6d 71 65 34 58 5a 37 73 56 42 43 43 6d 34 70 36 73 30 71 4b 35 5f 30 52 4e 52 44 41 67 4d 41 71 58 5a 65 47 50 41 6d 31 65 35 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 33 32 35 33 32 32 39 37 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 Data Ascii: 117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7d09A78Bmqe4XZ7sVBCCm4p6s0qK5_0RNRDAgMAqXZeGPAm1e5\x26random\x3d1325322971\x26rmt_tld\x3d0\x2
2024-10-31 02:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49809	142.250.184.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	1373	OUT	GET /pagead/1p-user-list/871543968/?random=1730342488859&cv=11&fst=1730340000000&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dsamckPcHhCS_tFXCSVKmC_ZvbVeNuQ&random=1790013140&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49811	142.250.185.194	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:31 UTC	1407	OUT	GET /td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-31 02:41:32 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlU6SHxAB6sPqniClNbhETUQGY3Pmm-K3Yy2sET3xLebAgWyN7PzYWtWhcc; expires=Sat, 31-Oct-2026 02:41:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:32 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-31 02:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49816	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	776	OUT	GET /api/features HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:32 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 47 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342492&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=83cWHnIYkwGw5gKX3sHj%2FYNvlcNrHFeUMz8TqK8mhew%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342492&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=83cWHnIYkwGw5gKX3sHj%2FYNvlcNrHFeUMz8TqK8mhew%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:32 GMT; SameSite=Lax; secure Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:32 GMT; SameSite=Lax; secure Etag: W/"a260f3b020f77db474bc285869e02a6a" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: da411891-d5f8-4fa2-9a32-639e95644c72 X-Runtime: 0.012684 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur
2024-10-31 02:41:32 UTC	266	IN	Data Raw: 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 30 34 39 35 66 64 38 32 31 34 36 39 65 2d 44 46 57 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 39 37 31 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 35 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 39 33 34 31 34 33 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 30 30 38 63 63 31 35 66 30 36 32 65 66 63 61 26 74 73 3d 32 Data Ascii: cf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8db0495fd821469e-DFWserver-timing: cfL4;desc="?proto=TCP&rtt=971&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1354&delivery_rate=2934143&cwnd=251&unsent_bytes=0&cid=3008cc15f062efca&ts=2
2024-10-31 02:41:32 UTC	47	IN	Data Raw: 5b 22 70 65 72 73 6f 6e 61 6c 69 73 65 64 5f 73 65 61 72 63 68 22 2c 22 72 65 66 65 72 72 61 6c 73 22 2c 22 72 69 70 61 76 69 64 65 6f 22 5d Data Ascii: ["personalised_search","referrals","ripavideo"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	405	OUT	GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:32 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1559 Connection: close Date: Tue, 17 Sep 2024 01:13:08 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Mon, 16 Sep 2024 16:03:18 GMT ETag: "3867b2388b619ff7fddc29ef359fc9aa" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable x-amz-version-id: u16VcQlfwBtHRZyWZ3J5lA.kF3ts0Fc8 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e7e7960d7731a7583cedd8f1ff1aca38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: ogMzwxjXefogTAZ5EAbpF3BO5FfHVvwoeDOSDGgrSLVEe4R82dzZtA== Age: 3806905
2024-10-31 02:41:32 UTC	1559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 73 65 67 6d 65 6e 74 5f 61 6e 61 6c 79 74 69 63 73 5f 6e 65 78 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 33 5d 2c 7b 39 32 35 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 65 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6e 61 62 6c 65 64 29 3f 65 2e 65 6e 61 62 6c 65 64 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e Data Ascii: "use strict";(self.webpackChunk_segment_analytics_next=self.webpackChunk_segment_analytics_next\|\|[]).push([[493],{9254:function(n,e,t){function i(n,e){var t,i;return"boolean"==typeof(null==e?void 0:e.enabled)?e.enabled:null===(i=null===(t=null==n?void 0:n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49814	142.250.74.194	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	1109	OUT	GET /pagead/viewthroughconversion/871543968/?random=1730342488859&cv=11&fst=1730342488859&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-31 02:41:32 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlvyOnLvwP83BXQiWFI40K9zv3dz4IaJdxrXFjRIYltQDh6psvQbGRF-AIt; expires=Sat, 31-Oct-2026 02:41:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:32 UTC	367	IN	Data Raw: 31 32 61 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12a5(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 Data Ascii: b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];re
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 2b 2b 29 69 66 28 4c 3d 4c 5b 4b 5b 4d 5d 5d 2c 4c 3d 3d 6e 75 6c 6c 29 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d Data Ascii: ++)if(L=L[K[M]],L==null){H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=
2024-10-31 02:41:32 UTC	1378	IN	Data Raw: 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 77 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 Data Ascii: tch==="function"){var I=w(Object,"assign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba
2024-10-31 02:41:32 UTC	280	IN	Data Raw: 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 56 6b 53 71 32 32 47 42 39 63 66 34 6e 68 58 5f 6a 38 45 51 42 69 56 50 48 75 35 49 4e 57 6b 41 73 4e 50 51 7a 4f 58 53 4a 68 51 46 66 4f 43 55 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 33 31 38 35 31 33 32 37 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 Data Ascii: 3B117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7dVkSq22GB9cf4nhX_j8EQBiVPHu5INWkAsNPQzOXSJhQFfOCU\x26random\x3d318513271\x26rmt_tld\x3d0\x
2024-10-31 02:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	715	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:32 UTC	858	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 02:41:32 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2FpGB2fIPq0YRd4yABFzNNvVo4x84IEEr99cnQ355FcSu57aWBbrxauVXT3clIzVdgzYYpx3W9x4BnbnIHB1SnWtFXhxDjEgqzXIfLiyXDi2c8eLFMu%2Bg%2B4C98vJsCTCQa0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0496178e81449-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1293&delivery_rate=1989010&cwnd=249&unsent_bytes=0&cid=f019e90c3e69e04c&ts=141&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49817	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	888	OUT	POST /ahoy/events HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 744 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryH7IVZTVAAkDLopHV Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/adventures/28758-marom-waterfalls Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:32 UTC	744	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 37 49 56 5a 54 56 41 41 6b 44 4c 6f 70 48 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 76 69 73 69 74 5f 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 63 66 63 63 63 37 65 2d 36 31 33 33 2d 34 30 64 31 2d 61 32 39 66 2d 35 33 66 39 61 61 30 34 32 61 32 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 37 49 56 5a 54 56 41 41 6b 44 4c 6f 70 48 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 76 69 73 69 74 6f 72 5f 74 6f 6b 65 6e 22 0d 0a 0d 0a 35 38 33 31 37 37 37 65 2d 35 32 31 31 2d 34 32 30 66 2d 61 62 62 31 Data Ascii: ------WebKitFormBoundaryH7IVZTVAAkDLopHVContent-Disposition: form-data; name="visit_token"9cfccc7e-6133-40d1-a29f-53f9aa042a23------WebKitFormBoundaryH7IVZTVAAkDLopHVContent-Disposition: form-data; name="visitor_token"5831777e-5211-420f-abb1
2024-10-31 02:41:32 UTC	1187	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342492&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=83cWHnIYkwGw5gKX3sHj%2FYNvlcNrHFeUMz8TqK8mhew%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342492&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=83cWHnIYkwGw5gKX3sHj%2FYNvlcNrHFeUMz8TqK8mhew%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Etag: W/"44136fa355b3678a1146ad16f7e8649e" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: a9d13334-af92-4883-b1f0-5d727972a8f9 X-Runtime: 0.027613 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8db04961cdc5479e-DFW
2024-10-31 02:41:32 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49815	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	449	OUT	GET /user/89268/avatar/thumb_lg-3af33225542adb6c76b6afe0ca6cca15.jpeg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:32 UTC	1055	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:32 GMT Content-Type: image/jpeg Content-Length: 12007 Connection: close Cache-Control: public, max-age=864000 Cf-Bgj: h2pri Content-Disposition: inline; filename="image_processing20210615-4-1qa0o9j.jpeg"; filename*=UTF-8''image_processing20210615-4-1qa0o9j.jpeg ETag: "4ee08a7c6854d186c00f1c0a571b1006" Last-Modified: Tue, 15 Jun 2021 05:29:11 GMT x-amz-id-2: +9Yr8gni4z1wZyPBbfaSTUyl7YyK+GiUqcY8yk07cQQ6EByxLtFo9zjJc/wZYOJmN4manhDpT7QwqNp9lSc3bfoflHANgzb5574it0UTUnY= x-amz-request-id: DH8F2TNYVE9YEMHS x-amz-version-id: 4PtFXFIqIMpgTbo7lyu8w2rwPPjd5dnt CF-Cache-Status: HIT Age: 592381 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8jW7KoRrgUAaoczTQd2H8uUs2rsAgM%2BdwDF68L2KjoU6BinaAGz0%2BOga0XQYoa7BAon3PQBSsjseF7tBGewKepvdjmuo%2BruOoWi5VNaJ7rI6cCYmapKdX8%2BfjMSi%2FnX7SpxH4w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db049622ef3e58d-DFW
2024-10-31 02:41:32 UTC	314	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 b4 00 00 00 03 a0 04 00 01 00 00 00 b4 00 00 00 00 00 00 00 ff ed 00 36 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 19 1c 02 67 00 14 48 45 7a 72 4d 69 59 4d 56 5a 7a 74 47 73 48 5a 78 30 70 6d 00 ff db 00 43 00 08 06 Data Ascii: ExifII*V^(ifHH021001006Photoshop 3.08BIMgHEzrMiYMVZztGsHZx0pmC
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 Data Ascii: 342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: c1 4d bc 77 53 ce 3d 7b 66 bc cc 49 6d 7c a5 12 20 2e 15 71 19 20 e1 5b 39 18 07 ea 7f 2a d2 d2 b5 09 6f ee 1f 4d 94 c2 27 04 46 98 73 f3 0f e2 e0 d0 9b 0b 23 b0 bd d1 a6 d4 2e 9a e6 39 52 3d c0 06 47 07 82 06 38 e3 a7 14 53 34 ab ab 7b 7b 15 85 e4 da c8 48 c3 b7 23 eb cd 14 ed 11 5e 46 86 b3 ae 6a 8f 6e 83 4a b3 77 05 f1 22 86 02 46 5f 51 9e 00 f5 ae 4a 4b f4 f3 d6 2d 4e d6 d2 2b f8 c1 0a a8 e4 90 0f b9 38 1d 06 6a ec 57 73 5e e9 2f 24 13 bc 4c d9 32 19 0e f0 0f f7 31 90 47 d4 f1 5c 85 de 94 d2 81 25 cd d3 3b 7d df 97 91 8e c3 9c d5 39 39 3b 92 a2 a2 ac 8b 6f ab 47 67 7e 25 98 2c f6 e3 e5 60 3a 28 1d 3d bb d6 96 8d 6b 6b ac ea 6f 36 e0 2d 21 00 aa 44 db 3a 9e 37 63 20 8e bd 87 5a e6 5b 4b 09 1b b4 66 70 ee 4e 77 2e 54 8f eb 4b a4 44 34 db c1 34 ae 61 63 Data Ascii: MwS={fIm\| .q [9*oM'Fs#.9R=G8S4{{H#^FjnJw"F_QJK-N+8jWs^/$L21G\%;}99;oGg~%,`:(=kko6-!D:7c Z[KfpNw.TKD44ac
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 46 7a f5 fa f7 a7 84 b5 b6 9c 04 86 04 24 15 0c 14 60 8e 84 03 d8 8e 06 33 5a 0f 0e d5 52 db 62 60 39 7c 80 07 e2 7a 71 58 d7 d6 b2 da f9 be 44 51 b1 97 0c eb 20 ca bf 39 ce 3d 78 ea 38 a1 82 f3 19 75 04 71 c8 90 89 ee 52 36 71 be 30 78 24 9e 4e 7b 71 e9 5d 92 da e9 d7 51 04 b1 d4 5e d2 5c ed 85 9c 96 50 38 ca 32 67 07 9f 61 d6 b9 39 63 69 e2 58 a2 1b 63 71 bd 09 ea ab 81 c0 f5 19 fa 62 9f 60 f2 c1 6f 15 92 b3 33 03 b5 43 82 72 e3 a6 18 73 9a 9b 97 63 a9 d4 4e a5 a6 69 ca d3 22 79 5b c9 9a 5b 39 00 e8 38 72 a4 70 46 31 c1 3f 4a af 6d a1 e9 9a a0 17 8c d3 c3 3b 2a bb 05 03 69 27 1f 32 fa af 39 03 f0 ae 7b 52 ba d4 97 cc 86 6f 30 aa 92 15 54 96 65 c8 e3 bf d4 f2 2a 7d 19 9e 1d 2f ce 86 e5 1a e0 02 8f 6e e0 ed ce 78 ed e9 8e 46 3b d3 b9 36 3a 63 e0 d8 72 b7 Data Ascii: Fz$`3ZRb`9\|zqXDQ 9=x8uqR6q0x$N{q]Q^\P82ga9ciXcqb`o3CrscNi"y[[98rpF1?Jm;i'29{Ro0Te}/nxF;6:cr
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 0d d8 e3 20 8f eb 45 96 e3 d4 17 44 d5 2d b6 25 be bd 0b 46 08 6d b7 36 99 2a 7a 1d a5 48 f6 e2 b1 35 8b 0d 6e d6 1d f3 eb 76 f7 52 ac 6c 63 89 23 31 33 8e f8 1d 3d 3a 8c 72 3d 6b 6a 66 8f 53 b2 38 d4 24 b2 7b 77 56 33 08 94 b7 d3 1d 08 f9 87 3d b1 ef 58 37 52 4e 61 9e c6 0b db 8b a7 b7 8a 45 8e fa 49 02 ef 04 0c a1 db d4 1c 11 d2 86 d0 92 66 06 97 35 dc 96 4e 96 ba a5 d2 22 aa c8 62 98 82 ae 09 e3 9c 67 8f eb 5d 7d bd c4 97 9a 66 e5 b1 54 b8 39 4f 95 c3 aa 8c 0d de b8 19 1c 67 a5 71 30 68 f2 cd 6e a7 c9 62 a3 28 51 01 61 c7 5f ad 76 cb 79 a9 e9 f7 16 33 5c 49 6c 62 99 02 ab 47 20 8f 04 e0 80 e4 0f 6e f9 c5 21 98 9f 62 b9 88 17 5b 67 11 c6 72 f8 0b b4 e3 bf af e5 d2 ba ed 33 c5 16 28 af 6b 0c 70 c5 70 32 44 00 fc f9 1d 7f 1e 3a 71 5b 76 cb a7 6b 48 97 73 Data Ascii: ED-%Fm6*zH5nvRlc#13=:r=kjfS8${wV3=X7RNaEIf5N"bg]}fT9Ogq0hnb(Qa_vy3\IlbG n!b[gr3(kpp2D:q[vkHs
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: b2 97 4d d7 b4 ab 75 9b 64 8c dd 0c 64 a1 46 1e 84 60 83 5c 2f 88 fc 3f 26 8f 73 e6 c4 8f 2c 0d ff 00 2d 72 49 23 b0 3e e2 8b 15 b9 6c 9f 11 c2 02 c4 ca 57 19 ca b3 0c fb f7 fd 0e 28 ac cb 2f 15 5f 5b db f9 7e 72 b6 0f fc b4 90 ab 0f a8 1f e7 9a 28 ba 26 c7 ac 47 19 9f 7f ee d9 70 40 6c 80 3b 7b 53 5b 4f cb b1 55 50 0f 60 6a 46 b6 8e 56 59 76 b4 2d dd e3 7d 8d 9f a8 e0 fe 35 68 07 00 7c f9 1e ac 2a 8a 20 8a da 48 b3 b4 ed cf 51 ba ac 2e 5a 3c 4a a3 9e a0 f4 a5 52 ec 49 1b 42 8f 63 9a 79 04 f4 2b ef 91 40 8a a6 15 dd 88 9c a9 c7 08 4f 15 95 ab 68 b6 3a 82 b8 ba 47 85 e5 89 a1 37 36 f9 8e 41 91 8e 71 c3 60 74 24 71 da b6 27 81 c2 e6 30 24 20 f0 a4 0f d3 35 14 76 45 b2 6e 84 6c c4 9f ba 0f 4e c3 34 34 9e 8c 16 9b 1e 34 fa 6e a7 e1 ad 62 3d 32 3b 7b 63 1c ea Data Ascii: MuddF`\/?&s,-rI#>lW(/_[~r(&Gp@l;{S[OUP`jFVYv-}5h\|* HQ.Z<JRIBcy+@Oh:G76Aq`t$q'0$ 5vEnlN444nb=2;{c
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 57 e5 e7 0c 33 d4 60 f5 af 40 b2 d3 2d b4 d7 9a 58 bf 74 26 3c a6 ff 00 dd a9 ff 00 64 1e 99 f4 f6 ae 2b c6 5a 50 b1 ba 17 16 df 25 bd db 66 48 13 0a ab 20 18 df 8e 99 a8 b5 b5 28 ea e2 2b ae 68 81 08 89 5d 93 85 49 03 aa 1e c7 8a f3 cd 4b 49 9a 09 e4 13 a2 ab 06 c1 55 c9 1f 89 35 b3 e1 fd 5a 69 6f 92 49 ae be cb 0a c7 e5 ba 2c 6a a1 70 78 39 c7 23 03 d8 f5 c5 5e f1 76 a1 6e 6c 6d dd 6e 96 5e 09 0a bd 4f 4e 7f 51 4e f7 42 68 e0 20 46 b4 bc 58 ed db 67 9c de 5f 3f 77 e6 e3 9c f4 1c e6 ba 35 b4 c8 b5 d6 e2 bb 4f 91 13 ce 42 8d 18 28 5b 97 f9 71 95 e3 9f a7 35 cc de 5c 79 6e 64 45 2d b1 b9 07 8f 7a e8 b4 2b 80 7c fb 2b 83 14 9a 7c ce 5a 24 93 71 30 64 6e 38 00 67 05 73 ec 0d 08 96 76 36 d7 37 42 09 7e ca b1 bc f1 46 5e 37 8d 8e c7 8f b6 32 30 73 83 c8 f4 ad Data Ascii: W3`@-Xt&<d+ZP%fH (+h]IKIU5ZioI,jpx9#^vnlmn^ONQNBh FXg_?w5OB([q5\yndE-z+\|+\|Z$q0dn8gsv67B~F^720s
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 9d c8 6a c7 45 79 7f 6f 6b 15 bd e3 34 f1 83 82 50 01 84 f5 2d c1 20 0f 51 eb 54 6c a4 5d 72 29 23 b9 b7 81 45 c6 ed db 5f 2f 19 5c ed 38 c7 39 1c e7 3d ea d4 b6 3e 7e 9a b1 44 d1 25 dc 6d f2 b4 69 b7 77 07 03 82 3b 1f d2 a3 b0 6b 85 9a 34 29 fb c5 cb 8d ce 11 88 2d 82 a7 d4 0c f4 f6 e0 d3 77 1a 31 ee 7c 0a 24 62 eb 73 18 75 3b 91 b6 10 73 5c f5 ce 8e 7c c6 8c cc f7 12 0f e2 84 60 0f 60 05 7a 9b 74 e7 19 ef e9 5e 73 7b e2 39 ed 75 0b d1 09 f2 ed 5e 43 17 99 1e dc c6 31 8c e4 1f 5c 1c e7 d6 a5 a5 70 e8 3a d3 4b 16 9a 7b b6 a1 a6 35 ac 3b 42 19 ae 10 10 4b 1c 6e f5 ef 9e 71 f8 d5 cd 1e e5 4d 97 f6 74 b3 c4 09 91 e2 f3 56 43 95 60 31 f3 01 d7 83 f2 f6 ed ef 5b 7a 36 a9 16 b1 a5 a1 66 f3 b8 02 40 3a 6e c7 2a 47 f9 fc 8d 73 9a 87 87 85 bc bf da da 61 9e 2b 62 Data Ascii: jEyok4P- QTl]r)#E_/\89=>~D%miw;k4)-w1\|$bsu;s\\|``zt^s{9u^C1\p:K{5;BKnqMtVC`1[z6f@:n*Gsa+b
2024-10-31 02:41:32 UTC	1369	IN	Data Raw: 39 b6 b7 95 b3 25 aa cb c4 67 38 ca 73 f3 29 27 a7 6f a5 4d 17 85 b5 cd 53 49 97 6c 70 cb 0c ea 63 6c a2 12 c3 be 32 78 fe 86 bb 8d 2e d2 7d 42 08 a4 d6 6d 51 66 43 e6 79 40 82 23 6e 85 49 1d 71 fa d7 44 88 88 a1 55 55 47 a0 18 14 b9 6e ee 55 da 56 3e 74 ba f0 c6 a1 a3 4e db 3e d1 13 29 e7 69 64 23 de b3 24 d2 ee 2e 26 77 79 a7 67 65 00 b6 f3 92 07 00 67 bd 7d 29 a8 e9 76 fa 9c 1e 5c ca 37 0f b9 20 19 2b ff 00 d6 f6 ae 36 fb c1 77 51 3b 35 bc 49 28 f5 41 9f cc 75 a7 66 41 e5 d6 f0 5f c1 19 45 26 45 6c 67 39 dd c1 ec c3 07 da b5 ed e7 bc 4b 8b 79 23 b0 79 41 67 df 19 b9 d8 0a 95 2b f2 b6 de 1b 9e f9 15 b3 79 6d 36 93 77 18 b8 89 a2 8c bf 29 2c 67 27 8c 65 4f f4 ae 9a dc 25 bd c5 a4 fa 74 10 bc 2d 93 e6 4b 82 d9 23 8e 49 01 78 1d 81 23 3c d4 35 ae a6 aa f6 Data Ascii: 9%g8s)'oMSIlpcl2x.}BmQfCy@#nIqDUUGnUV>tN>)id#$.&wygeg})v\7 +6wQ;5I(AufA_E&Elg9Ky#yAg+ym6w),g'eO%t-K#Ix#<5
2024-10-31 02:41:32 UTC	741	IN	Data Raw: 4d 63 fb 65 24 8e da e9 7e ca b0 90 27 44 dd 2d b3 13 f7 81 07 21 08 18 27 83 c7 7a cc b0 8f c3 fe 29 b7 8e 68 ad bc 8b a0 76 cb 00 0a bf 36 39 2a b8 c6 0e 0e 70 2b 43 49 f0 bd d6 99 78 45 a9 59 ec a5 f9 64 b7 9d 48 d8 30 46 55 f1 83 c9 39 5c 0c 8e d4 c9 03 a0 69 66 09 a4 91 e5 86 72 04 37 71 a4 e1 e3 56 2f cb 2b 31 1b 79 39 2a 79 20 d7 4f a2 cb 30 d3 e0 89 62 80 c6 a8 be 5b ac 99 0f 1e 38 e8 38 3e dd 3d ea 3b eb 4b 58 74 5b 98 ee 2d 92 68 fc 9f de 20 4c 87 c2 e0 60 1f 4e df 4a c5 f0 96 a3 73 0e 8b 04 5e 42 47 1c 00 46 9b f2 a2 45 ea 42 b1 c8 63 8e 46 38 34 0c ec a3 66 60 41 4d b8 f7 cd 73 fe 24 d7 e4 d3 99 21 b6 31 b4 b8 25 c3 02 76 8e d5 d1 06 46 45 65 39 52 32 2b 96 f1 6e 9e 66 54 bb 41 90 a3 63 e0 74 f4 3f d2 9b 03 c9 75 d6 93 51 d4 da e2 ea 79 64 94 Data Ascii: Mce$~'D-!'z)hv69p+CIxEYdH0FU9\ifr7qV/+1y9y O0b[88>=;KXt[-h L`NJs^BGFEBcF84f`AMs$!1%vFEe9R2+nfTAct?uQyd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49819	172.67.75.209	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	680	OUT	GET /photo/420570/image/hero-8d27dc9e6aaf5f3808809c4dfc0889d2.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:34 UTC	1061	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: image/jpeg Content-Length: 326984 Connection: close x-amz-id-2: yaiATCXFnXSiRvCy3RND8qtJQI0AlM6Nk4NVOQuZf0ea0Q5yxCEwNtdf6ilD3nZXo0ckqPAa1+yaVEwXdpdfNNGEmqIiL0NdSCPZQXt7M1Q= x-amz-request-id: 65K01KQF0XSMZJD1 Last-Modified: Sun, 19 Mar 2023 03:16:41 GMT ETag: "c70f6e06b2397048ebbf029f6eb2d5e7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=864000 Content-Disposition: inline; filename="image_processing20230319-2-xa38le.jpg"; filename*=UTF-8''image_processing20230319-2-xa38le.jpg x-amz-version-id: 3M4KnOq5AapGtVyUsESQUYvYjjkZgWa1 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeUml4bUyqhKuLOxdBp%2F6SHcTouZjYr9KTChhKjz3RcPe1zuo2JwFUG8vrU5Ef75%2BseoYz%2F5GwKg7vuAGOq92SQWtQOZhDFY2pQGIQARmtRppPRUGl7gdbC%2FpudVpsNLC3J8q2o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db049654e49e5ad-DFW
2024-10-31 02:41:34 UTC	308	IN	Data Raw: ff d8 ff e1 4f 51 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 39 3a 33 32 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: OQExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:39:32DANIELLE NIEUWENDYK
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 04 00 00 00 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 32 31 00 00 92 92 02 00 03 00 00 00 32 31 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 8b 02 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 00 00 00 00 00 02 a4 03 00 01 00 00 00 00 00 00 00 03 a4 03 00 01 00 00 Data Ascii: 0231L`t\|21210100
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 87 25 80 dc 4a 3f 66 a3 8f c6 32 b2 09 fa 52 83 1e 5b d6 15 24 bb 6d 38 1b 77 62 e9 0b 48 28 c0 9a d1 19 4d 5a 9d 3f d5 f8 b2 5e 2c 4f 54 10 a3 a4 6a d2 36 a1 0c 90 5a db c1 38 f8 22 01 47 a6 b5 34 2c 51 8d 19 e8 7b 9f f2 b1 cb 0d b7 3b 2c 5e 9b 77 ab 35 96 96 f0 29 0c f5 53 37 00 15 b9 fd a2 e5 45 11 3e d5 18 2e 62 44 5b 60 1b b1 d4 fc c4 bb b6 96 d3 d7 98 c6 86 5a c8 f2 2b 33 18 b9 01 55 20 8f 87 8a f4 e3 f1 f2 cb 65 87 88 6c cb e9 48 2e 75 ed 1f f4 a4 c6 29 ae 6f 96 5b 8e 6c e0 24 70 b5 76 56 54 6a 3d 55 4f a6 39 37 fb 2c be 30 3c 3b ec c3 88 04 fa 79 ae a6 f2 e0 6b 54 02 14 57 5b 64 45 58 d8 20 96 8d cc 92 4d 42 06 e5 c5 bf 65 78 e0 d8 16 44 d8 b6 1e 35 6b fb 29 55 16 55 f5 15 9f d3 68 8b 29 8d cb 15 20 1a d0 86 a7 6c b3 84 16 a2 53 5b 19 22 bd 8a 28 Data Ascii: %J?f2R[$m8wbH(MZ?^,OTj6Z8"G4,Q{;,^w5)S7E>.bD[`Z+3U elH.u)o[l$pvVTj=UO97,0<;ykTW[dEX MBexD5k)UUh) lS["(
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 56 2d 70 41 0a f2 33 7c 4d e9 83 fb bf e5 c8 9c 49 b4 de f7 cf 77 e6 fb eb d6 37 5c 0c 2c 59 56 64 ac ac a0 53 79 3f 6b 95 5b e1 f8 72 a8 69 f6 a2 93 26 45 6f e5 f9 75 48 5a e8 27 fb 90 bd 86 4b 96 b4 8c b2 23 2b 30 20 d4 12 43 ee 39 6c c8 d9 51 c9 c3 b7 40 90 2d 23 b0 6b 6b 6b 75 b6 d7 12 18 e6 9d 8a dc 70 ac d7 a8 79 54 12 37 58 f9 0f 85 17 e3 f8 b8 b7 1c ba 42 f7 8f 26 34 dc 96 e1 ad 8d bd 85 e9 6b 6b e9 4c 7e 91 0b eb 8a 72 46 8e 48 dd 57 d3 28 3e 15 93 fc bc 06 5d e3 70 a1 32 bb bf b0 f2 e4 e1 05 a2 47 77 19 58 5a 44 93 d6 27 9a d4 95 3c b6 66 fd bf f8 96 42 10 32 e6 c8 90 ed 4f 5c d3 2e 20 5b 1b 7f 46 fd 98 c6 1b 91 31 c8 ce 37 2d f0 af 11 c5 ab c7 f9 79 7f ad 92 10 3c f9 28 3d c9 2e a9 e6 5b c1 04 4d 14 30 43 6d 14 86 b0 c5 33 b5 5c 54 53 8d 78 a8 Data Ascii: V-pA3\|MIw7\,YVdSy?k[ri&EouHZ'K#+0 C9lQ@-#kkkupyT7XB&4kkL~rFHW(>]p2GwXZD'<fB2O\. [F17-y<(=.[M0Cm3\TSx
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 24 62 ec fa 71 28 e2 51 14 16 a7 4f 84 d3 29 e1 23 92 42 a5 fc b6 31 24 49 6a 19 c9 53 ea 4b 2f c2 d5 3d 80 14 a0 5e 98 22 09 e6 9a 5d a7 dd db c4 90 cf 3c 7e b2 da c8 ae 21 24 80 c0 54 81 5e df 16 f9 1c 90 26 c0 fe 26 51 34 88 d2 b5 5d 42 4d 6e 0b d7 b8 fd f2 ba a0 04 55 56 3e 44 f0 0b 4a 53 7e 23 19 40 46 34 02 8d de b2 9a ad e2 01 1a 3a ac 8c 80 5b 20 00 a4 44 af 20 02 8e ea 87 73 fc dc 73 5c 06 f6 dd 19 70 f2 2a 7a e4 fa 84 2b 69 a6 c1 7e 24 b8 31 b3 5d 3a 46 1d 89 92 84 f1 e4 09 5d be 1f e6 c9 80 07 44 43 8a 47 bc a4 b2 ea 9a 0d 9e 8e b6 b7 91 c9 f5 88 cc 92 c7 14 2b f1 09 25 6e 25 09 f8 be 22 07 8e 5a 22 4b 22 3a 10 92 7d 5e ca f2 eb fd 0e d5 d9 fd 36 f5 44 80 b1 3c 4d 46 e7 fc 9c 36 40 dc b1 e1 be 8a d7 be 48 bd b8 d1 0d d4 28 e2 46 06 46 61 f6 00 Data Ascii: $bq(QO)#B1$IjSK/=^"]<~!$T^&&Q4]BMnUV>DJS~#@F4:[ D ss\p*z+i~$1]:F]DCG+%n%"Z"K":}^6D<MF6@H(FFa
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 07 b5 83 e0 86 67 44 42 ab 5e 25 6b b7 ee c2 8d ab f1 f2 c8 dd b1 94 24 0e cb 34 fb 69 2f 60 88 5b 28 b7 b5 69 04 92 5f 12 a0 49 53 bf 0a f2 6e 54 3f ea e0 25 06 03 92 55 a8 7a 30 fa c9 6d 7b 0f a9 73 2a 83 70 89 c5 4a b0 af 20 db 27 f3 74 ff 00 2b e1 c9 70 db 38 c2 a2 87 5d 0b 5f 1a 84 57 76 aa 92 2c a3 87 d6 27 71 f0 8a d0 8a ad 09 25 fa 7f b2 c6 8d 6e a3 1e fc d0 da cf 92 fe b1 ab 47 7c c8 90 18 92 8d 65 cc 08 b6 dd e4 1c e8 b5 6a f2 63 96 03 2a aa 53 8c 13 76 95 41 f9 7f a7 5c 5a 9b 35 bd b7 8a 62 c0 ca 39 ab 92 aa dc 98 06 5d b8 b3 70 5e 2c bf 0e 1e 39 5f 26 bf 0f 98 4d 2e 74 8d 2a db 41 ba b4 7b 34 69 d2 34 9a 35 84 33 09 4a 12 81 23 dd 57 e2 2c a9 fe 4a e5 43 8a ed 9f 87 40 bc 9e 1d 35 e4 bd 9a 06 b7 9e 39 a2 53 24 b1 33 50 a4 6b 4a 92 40 fb 2a 0f Data Ascii: gDB^%k$4i/`[(i_ISnT?%Uz0m{spJ 't+p8]_Wv,'q%nG\|ejcSvA\Z5b9]p^,9_&M.tA{4i453J#W,JC@59S$3PkJ@
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: ef 42 5d b6 bb 16 ad 2e 99 a7 ea 36 c8 f2 40 ad 6c 1a 1a 12 92 ee 4c 75 62 3e 2e 14 5e 3f ec b2 42 ab 93 12 49 3c d4 60 f2 d6 a5 af 2d cd be a6 c2 d5 be 04 b5 b8 84 11 03 4a 85 be 09 00 ea db ed fe 4e 4c 11 1d c3 5c 87 17 37 9d 6a 3a 64 f6 b7 b2 59 98 be 28 99 95 8a b5 41 e2 68 68 4d 33 20 4b 6b 71 cc 77 a4 03 a2 23 8a f2 09 ca 85 c8 a5 29 f7 ef 93 05 ac 84 54 1a 8d fb cb 28 89 16 43 24 46 26 01 7a 47 d4 91 e1 f3 c8 98 80 9e 32 9d 79 66 e6 7f ae 08 dc d5 91 d5 56 80 73 ab 30 ad 3f 52 e4 65 54 cf 19 66 ba f5 ae bd ab 5d db 7a 7c 8c 11 f2 5b 61 f6 42 92 28 e1 da 9f 6d 68 39 72 fb 39 89 19 39 92 83 2c f2 94 17 2a b6 7a 5b b0 90 ff 00 a4 24 ac 37 f5 10 c6 5c 16 ed f0 1f 87 f9 b9 65 46 fc 53 ee 6c a1 e1 7c 58 e7 9d 3c df ac 69 cf 61 6b 67 33 24 b3 43 e9 c8 bc Data Ascii: B].6@lLub>.^?BI<`-JNL\7j:dY(AhhM3 Kkqw#)T(C$F&zG2yfVs0?ReTf]z\|[aB(mh9r99,*z[$7\eFSl\|X<iakg3$C
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: cc e1 18 40 46 e4 52 84 f8 63 92 04 0b ef 46 39 82 6b b9 2b d4 fc fd 63 2a 48 ba 7b 5c 5a 6a 82 46 47 9e 09 de 13 23 a7 da 62 a4 bc 72 f2 db f6 39 65 90 c6 6a cb 5c f2 0b a0 8f fd 3b e5 db 00 cd a9 58 df de 5d 10 a9 73 3c ad 23 ab c8 ca 09 f4 d6 62 02 ff 00 aa bf ea e4 bc 16 27 30 40 c9 e6 dd 05 6d df f4 6f 96 41 b6 88 ac 89 2c c1 a8 1d 0d 56 a6 30 d1 a3 6d f0 8f da c9 78 3e 6c 4e 6f 25 f1 fe 6d eb 71 14 8e d6 f9 e3 45 24 b9 78 51 81 1d 90 28 1d 32 27 08 65 e2 a5 b7 bf 9b 9a 9d d5 fa 45 77 69 69 7d 67 07 d8 79 6d d8 38 7f f7 e2 f1 60 51 bb 6d 83 c0 88 0b e3 14 66 97 f9 95 65 fa 4a 19 5e c5 e2 94 90 a5 a3 b8 66 e4 a3 7e 3c 67 12 71 ff 00 62 f8 0e 1b 65 e2 b2 38 bf 37 fc a0 2e e4 b8 bd 80 ac d4 0a ed e8 bb b0 23 60 dc 80 6a 9c 87 80 6a 99 f8 d1 65 da 6f 98 Data Ascii: @FRcF9k+c*H{\ZjFG#br9ej\;X]s<#b'0@moA,V0mx>lNo%mqE$xQ(2'eEwii}gym8`QmfeJ^f~<gqbe87.#`jjeo
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 12 bf 55 93 7e 43 6e ae 4a 53 24 27 15 30 28 cd 19 ae 1a 68 63 d3 f5 0b 58 8c 65 7d 38 75 17 f4 1c 71 dc 2f a8 13 d3 6f a1 b0 ec 51 55 d5 1b ac eb 9e 6a b7 57 92 5b da c4 77 1e 85 c7 a9 0d 2a 01 54 a3 b9 3b 9a 7c 2b 86 31 0b 29 14 a2 4d 7f cc b3 34 57 4b 71 77 0c 51 f1 22 65 32 24 48 a8 7a 72 0a 13 ef 6c 3c 01 89 99 4e a3 fc c9 d7 e3 04 47 a9 19 17 8d 1a 39 61 57 a8 f9 2a 9d b2 1e 08 ee 65 e2 2b 2f e6 7e a0 6d a5 8e 45 b6 b9 8e 78 bd 26 51 ca df 92 91 46 0a 50 fc 0d fe 52 8e 59 5f e5 62 4f 26 5e 2b ff d0 e4 7a 5f 93 3c a9 ac 41 36 ae fa ac 5a 15 8b a8 16 d6 29 21 b9 91 5d 8d 14 ca f2 53 87 2e f1 0e 7f eb e6 21 c8 46 d5 6e 60 c5 13 bd d2 51 60 3c ad 67 77 7b 69 aa bc d7 2b 13 18 ad f5 3b 40 3d 30 00 fe f3 d2 62 19 aa 7f ca ff 00 63 93 36 79 30 04 0e 6a d7 Data Ascii: U~CnJS$'0(hcXe}8uq/oQUjW[wT;\|+1)M4WKqwQ"e2$Hzrl<NG9aWe+/~mEx&QFPRY_bO&^+z_<A6Z)!]S.!Fn`Q`<gw{i+;@=0bc6y0j
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: c5 76 c0 72 94 8c 41 7d a7 97 bc bd 65 2b 3d 8d a4 16 f2 48 79 c8 62 55 8d 58 9d be 2e 14 0d ff 00 03 89 cd 23 d5 46 18 f7 26 8a 8b 4a f0 21 6b f0 8f ed c1 c6 cb 81 4e 44 b5 59 00 70 2a 7a 06 02 9b fc c7 5c 3c 65 07 18 2b d0 5b 7d 8a 15 51 d8 6c 36 f6 c7 8c a0 63 a4 af 5f d4 bc bf a3 c2 b7 37 56 a0 5b f3 a5 c5 c2 22 f1 8c 05 2d ea 48 4d 3e 11 4c 20 c8 f2 52 23 1d ca 59 a9 f9 0b c9 5a e4 62 f2 4b 38 66 77 01 96 e2 2a c4 c5 5b 7f b7 1f 12 70 8c f2 08 38 22 58 a5 c7 e5 16 89 c2 71 a6 6a 17 16 d3 d3 f7 11 5c 0e 69 51 fb 3c e8 ac 41 ff 00 29 b2 7e 2d b4 cb 15 72 61 5f f2 ad bc e4 cf 27 a9 63 c8 8f 87 9c 53 46 41 34 fd 9d fa 7d 19 33 90 06 bf 0c 94 c1 ff 00 29 35 71 6e d7 12 00 6e 36 f4 6d f9 80 69 40 68 ec 4d 05 2a d8 3f 31 d1 1f 97 93 14 be f2 9f 99 34 e8 a4 Data Ascii: vrA}e+=HybUX.#F&J!kNDYpz\<e+[}Ql6c_7V["-HM>L R#YZbK8fw[p8"Xqj\iQ<A)~-ra_'cSFA4}3)5qnn6mi@hM*?14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	172.67.75.209	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:32 UTC	682	OUT	GET /photo/420571/image/medium-912d8fc4a4929952c4df709665c834b1.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:34 UTC	1057	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: image/jpeg Content-Length: 135408 Connection: close x-amz-id-2: dxjtpORg7uOtIwBCY+6mDNmlTlxHN+8aJl9j00FKX5DZQhNOyKu8Qq41+AaqZnMmzuG/I46sble4uV/md3Nd/4+6dQ9YrWKq3pQf3EwHaMU= x-amz-request-id: 65K8QHADA3X9BW6A Last-Modified: Sun, 19 Mar 2023 03:16:43 GMT ETag: "ee8bdde00db2e8d972bdb328125d0d23" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=864000 Content-Disposition: inline; filename="image_processing20230319-2-7u5w4y.jpg"; filename*=UTF-8''image_processing20230319-2-7u5w4y.jpg x-amz-version-id: i_u2mMksDxqFRldbzqGVF0T5fdu9KROl CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2B4URW90ExgfEqLYGZeHXyLWbdnqcPqSPcAu2PjENCEwXp6nlyHXmdu2QV7nLocp5zbmyM7VpzRAZTudkMUgpwJVqdiGEMo2XXsKdsdDKrOlTwY7xF4EIZ0CRX0G0Ytrpxvm%2BRc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04965ad0247fd-DFW
2024-10-31 02:41:34 UTC	312	IN	Data Raw: ff d8 ff e1 47 f8 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 37 3a 34 31 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: GExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:37:41DANIELLE NIEUWENDYK
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 34 37 00 00 92 92 02 00 03 00 00 00 34 37 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 6c 02 00 00 03 a0 04 00 01 00 00 00 d3 01 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 00 00 00 00 00 02 a4 03 00 01 00 00 00 00 00 00 00 03 a4 03 00 01 00 00 00 00 00 00 Data Ascii: 0231L`t\|47470100l
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: ab 4d f1 02 4f c5 b7 8f 4c 98 ee 4a ac 71 dc 48 39 33 92 05 18 8d ce c0 52 bf 46 02 42 ab 35 dd cd b4 82 39 52 17 41 55 64 01 58 10 77 35 23 c3 b6 0a 05 69 03 c2 2e 5b 92 01 3f 70 ed d7 26 95 68 ad 59 5c 29 1d 7f 6e b4 05 7b d2 a3 05 a4 26 5e ac 8d 67 54 8d 16 d6 a1 28 14 72 2d 4e b5 fb 5d 32 2c ad 01 24 a0 2a 33 29 29 bf a7 ca 84 80 0d 29 5a 6f 92 62 5a 64 f5 21 69 79 77 3b 9e a4 f6 f6 c5 51 36 96 17 2d 04 f7 22 86 08 45 1a b4 de a2 94 1f 2c 04 ab 35 f2 f4 6a ba 62 d2 06 63 04 62 79 04 7f 11 af 2d 8d 07 c4 cd e0 07 f2 e4 09 54 be e2 4d 3a 7b d8 56 08 de 64 8d 00 92 39 d2 8c 1b 96 e8 28 7e 25 a1 a9 65 e5 c5 b0 13 4d 91 08 9f 30 dd bc 6a 23 b3 8d a1 a4 60 44 12 bf 00 00 02 b5 3c 97 ad 72 30 67 34 9d 65 9c 2a c7 1c 92 24 73 d1 26 8e 78 cc aa c0 f5 28 69 b3 Data Ascii: MOLJqH93RFB59RAUdXw5#i.[?p&hY\)n{&^gT(r-N]2,$3)))ZobZd!iyw;Q6-"E,5jbcby-TM:{Vd9(~%eM0j#`D<r0g4e$s&x(i
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 5e 54 e8 c0 56 94 c0 64 91 15 5b 6d 1e 48 6f 15 65 43 5e a9 ef e3 91 33 d9 90 82 6f 71 a7 5a 43 7b 04 44 45 23 35 24 60 59 54 05 0b 52 0d 69 d0 ff 00 c1 60 21 20 ab c7 69 a2 c5 25 d5 c4 53 c7 1d cb a0 48 63 f8 79 09 d8 fc 45 7a f1 f8 7e 2f f6 58 ee bb 25 de 60 6b 50 c5 e0 56 75 50 14 5d d4 90 64 a1 6e 3b 8d 8f d9 ef 92 8d b1 2c 6e 48 6e 0a f2 91 59 01 de a4 50 1a 9c b2 d8 52 81 52 bb 1e b8 aa 26 da 38 11 5e 69 77 29 b2 c6 db 06 27 c0 fb 60 25 53 5b 5b 8e 72 15 8d 80 25 f9 7b 0a 0d 87 cb 05 28 65 29 a8 59 e8 ba 7c 32 59 46 a3 55 48 c7 a6 ac 8a c0 83 f6 9d ab de 9e 3f b5 90 3c d9 85 fa 26 ab 7d 77 7b 26 af 74 77 b3 54 76 20 70 2c 64 24 04 a0 a7 d9 ca f2 90 28 77 96 ec 40 9b 3f cd 0c e3 52 f3 56 b7 a4 2a 5c db df 47 35 cd cb 15 8e 19 6a 62 8e 25 8c 1a ba ab Data Ascii: ^TVd[mHoeC^3oqZC{DE#5$`YTRi`! i%SHcyEz~/X%`kPVuP]dn;,nHnYPRR&8^iw)'`%S[[r%{(e)Y\|2YFUH?<&}w{&twTv p,d$(w@?RV*\G5jb%
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: b0 40 01 00 50 fc 4b d2 94 e8 70 5a 40 44 59 ea 50 41 63 21 9e 6e 76 ca c2 38 94 ad 00 8a 40 1e a1 c9 e3 5e 5f ec b0 25 2e b9 d4 74 e4 96 48 96 45 97 a1 4f 4b e3 ad 40 34 a8 af 2c 09 51 b8 d5 de 3d 3e 5d 3f d4 2f 6b 75 41 22 83 52 8a 4f 2a a0 3f b6 4f 4c 20 b1 31 51 b4 bb b5 d3 d8 7d 5e da 79 ee 26 21 a0 47 8e 8c 78 91 5a 6c 7f d9 60 20 b3 1b 22 65 d4 05 9c b7 4f aa db cf 00 ba 95 64 89 07 1e 49 55 dc 32 82 68 bb 54 63 c2 4f 25 b0 39 a1 25 6b 3d 46 27 4b 68 16 eb 8d 64 7e 5c 97 e1 1b f5 03 97 dd 8d 10 b6 0a 61 0e 8d 70 fa 7d b5 c5 85 b3 cb 3d ba 06 b7 68 e3 02 95 1d 0b 30 e2 76 6f 8b 96 46 e9 24 5a 16 ee fe e1 d9 6c a7 9e 2b 35 4e 30 4f 1d 79 5c b3 00 3b 02 55 7b 6f cb 24 18 90 9b 79 7f 40 9e 16 b9 d5 27 96 92 cb fb ab 6b 72 0f a8 a1 7a 93 b0 f1 e3 b7 f9 Data Ascii: @PKpZ@DYPAc!nv8@^_%.tHEOK@4,Q=>]?/kuA"RO*?OL 1Q}^y&!GxZl` "eOdIU2hTcO%9%k=F'Khd~\ap}=h0voF$Zl+5N0Oy\;U{o$y@'krz
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 49 63 9f 93 14 a2 95 28 a4 d3 8f 3e eb c7 2c 8c 29 ae 53 b4 86 cb 55 6b 58 b8 a5 ba 11 35 39 82 ec 6a 53 a9 2a 0f 7c 98 60 57 5e eb 8b 32 c8 9f 54 0a 1d 40 09 c8 95 af ed 13 b0 fa 06 15 54 d0 75 75 82 da 5b 7b 89 c0 1d 61 8e 45 6e 05 bd d9 4d 57 fe 07 02 a0 ae d5 19 67 9e 52 dc ce c5 ea 8d 11 7e ca bc 7a ff 00 9f 2c 09 40 47 2c 8a ac 11 d5 79 8e 2c 08 ed f7 61 21 8a 75 e5 e9 ac ed 2f c5 d4 ad fb e5 8f 8c 21 59 42 87 a8 a3 13 b9 fc 32 26 d9 00 c8 f4 ab 4b 8b 88 ad 12 67 76 63 57 95 8e ec 56 95 e4 7b d3 2b 97 52 db 03 c8 75 4c 3c be f0 d9 69 e2 f6 9c 60 59 8c af 18 3f 0b 18 4f c3 50 7e 12 19 94 64 66 7d 40 32 80 f4 92 c5 22 d4 1a 6d 51 12 4f ee de 42 5c 0d 85 5b 76 cb 40 6a 25 35 b6 f5 db 58 fd fb f2 b3 32 72 70 00 66 58 54 fc 5c 43 6d c9 87 c2 32 44 d0 62 Data Ascii: Ic(>,)SUkX59jS*\|`W^2T@Tuu[{aEnMWgR~z,@G,y,a!u/!YB2&KgvcWV{+RuL<i`Y?OP~df}@2"mQOB\[v@j%5X2rpfXT\Cm2Db
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: da 93 7f a4 c2 de b3 34 8d d3 e2 62 c3 e9 e4 70 5a 2c a0 24 b5 5a 03 c7 e1 f0 ed 86 d1 6b 4c 2b 4a 50 50 f6 c1 69 05 a1 0a af d9 01 46 1b 45 af 0b b7 f5 c1 68 6c 0d f7 c5 36 db 28 a0 a7 6c 0b 6d 01 be 2a de c0 f7 a6 2b 6b 58 56 b8 aa d0 bf 7e 15 5a cb 8a 54 8a 62 ab 0a 77 c2 ab 59 45 31 55 27 4d ab 85 29 af 97 ee 15 20 bb b7 70 a6 23 c2 79 14 b7 16 65 43 42 a9 d9 9f e2 ad 30 48 32 89 55 bc 32 dd 5c db da c0 39 96 a1 8d 7b 1a f4 27 fd 88 c8 00 cc 97 a0 36 ab 34 b6 56 9e ae 9f 0a 45 02 86 91 97 d4 a2 3a af d9 3c 96 87 7e 3f 0d 72 47 66 3c d0 7e 5f f2 b8 f3 9f 98 5a 0f 56 4f 42 15 f5 6f ae 54 83 41 5f d8 34 3c ab 4a 32 d7 e1 c6 31 d9 13 93 e8 71 69 e5 dd 2f 49 67 9a bf 56 b6 0b 44 56 35 67 0a 14 73 0b fd f4 8c 02 aa ae 5a d7 b3 ca fc cb e6 28 7c c3 ac 44 63 Data Ascii: 4bpZ,$ZkL+JPPiFEhl6(lm*+kXV~ZTbwYE1U'M) p#yeCB0H2U2\9{'64VE:<~?rGf<~_ZVOBoTA_4<J21qi/IgVDV5gsZ(\|Dc
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 9e e6 15 b9 58 fd 54 8d d9 9a 39 39 fd 81 45 58 d5 77 ed cf ec ff 00 c1 61 d9 1b b3 7d 2b c8 b1 5b 69 8a 2f 2e 0a 6a 12 fe f1 ae 63 fe f1 1f 73 b7 5f 85 2b f0 a9 f8 70 19 32 11 4c 2c f4 d4 d3 dd 55 ef 9a ee 9f 61 1c 0e bf cc 49 15 e5 f2 6c 16 90 11 17 36 7a 8d c7 ef ac d6 3e 64 fe e8 4a 4e db 6f 41 41 df 15 49 b5 ef 26 43 79 59 6f ad e2 9c 15 ac 95 15 7a af 75 7f b5 fe 7f 0e 10 54 86 1f 63 f9 79 a7 5e 0b b7 24 c3 68 64 6e 56 c9 2c ae 9c e8 28 c3 91 43 40 07 f2 b6 1b 60 03 ff d1 e1 33 69 d2 22 2b fa 49 0a 15 ab 84 93 d4 93 e6 ca c7 92 57 01 0c 38 91 30 43 6b 30 09 72 ff 00 57 45 0a 22 53 c9 9c 82 77 61 5a 22 6d bf c6 f1 a6 04 2c 78 60 49 4a 29 69 23 52 7f 78 0a b0 61 5a 57 f9 45 3e 79 12 13 68 88 96 d4 de 72 92 72 c8 c8 42 11 c4 1a 0d a8 4b fc 34 51 f6 b9 Data Ascii: XT99EXwa}+[i/.jcs_+p2L,UaIl6z>dJNoAAI&CyYozuTcy^$hdnV,(C@`3i"+IW80Ck0rWE"SwaZ"m,x`IJ)i#RxaZWE>yhrrBK4Q
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: d9 ba 72 5c 7d cb 6b 44 6e 90 ad c4 ac 1e 54 3c 22 56 a3 24 80 a9 25 59 53 f7 9b 93 fe ae 34 a1 7d b6 9b 79 2b a4 36 f6 d0 ac d3 2b ca dc c3 46 81 3b d2 84 b0 45 1b ef c5 7f 97 04 8d 06 50 8f 11 a6 7d e5 bd 2b 46 d2 6e 3f 45 6a 71 2d 8e aa 68 4d e5 6b 0c aa dd 83 31 e4 9d 68 1a bf cb cb 30 a7 22 77 76 b8 e1 10 2a 91 fa d5 a4 11 3b e9 7a d4 71 cb 1b c3 2c b6 ba 84 48 a2 7a 74 45 a2 0e 6d 25 68 9f 03 b7 a9 fc b8 c3 29 12 08 cb 84 4a 25 e6 97 f3 c7 13 a3 47 a4 2c 12 a5 69 2c c1 a6 46 24 d4 86 f5 15 2a 57 f9 ab 99 c5 d4 a0 ec 3f 48 4f 2f d6 52 26 78 d6 40 c5 95 68 53 6a 72 5d c6 c0 7b b6 22 d2 69 3e b7 f2 96 b9 aa 23 bf d4 96 05 94 82 2e ee 5c 7a 8c 40 02 a1 37 25 7e 79 09 65 88 6d 86 9e 72 dd 7d e7 e5 96 ae 8c af 65 25 bc 84 82 25 6e 45 58 d4 50 d1 58 15 c8 Data Ascii: r\}kDnT<"V$%YS4}y+6+F;EP}+Fn?Ejq-hMk1h0"wv;zq,HztEm%h)J%G,i,F$W?HO/R&x@hSjr]{"i>#.\z@7%~yemr}e%%nEXPX
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 62 c2 f1 e0 74 84 71 41 21 92 29 2b 20 e2 24 f4 cd 53 e9 fd 96 c1 c4 9e 02 94 43 e4 79 f5 4b 2b 8f ab c6 cb 6e cc 2b 3b 81 5e 6a bf b2 54 00 cd d6 a7 e1 e5 80 c8 32 8c 4a 0f 52 fc b9 9e 07 59 10 bc a9 b0 f9 1f 70 06 45 97 24 c3 f2 ef ca 96 ed 0d fd f4 ca d5 59 04 31 33 76 e0 c6 a4 11 ee 32 32 95 26 31 b6 4d 7f e5 4d 32 fe 54 37 0b 23 98 be c9 e4 53 73 fe ad 2b 8d a7 85 83 f9 cb cb 57 fa 78 f5 d6 76 b9 b0 dc 20 24 f3 88 13 f6 59 81 e5 c2 bd 2b 89 91 a5 11 0c 63 d2 e5 2c 73 24 d3 c7 2a 00 01 32 13 4a 74 a3 0f 88 6f 95 f8 ad a3 08 21 ff d4 80 c5 65 a4 4d 21 b0 16 57 10 ca 79 4b 04 b6 be 8d ca dc c8 bb 86 52 03 c8 cd db 91 f4 e3 c3 4d 2a f2 a5 8b 88 a6 ba e6 65 8c 32 ad ba 3c 7f 13 d3 75 08 56 8e f4 fb 46 38 e4 e3 fe fe c5 08 6b 21 a5 5e ba dd 42 3d 3b 78 09 Data Ascii: btqA!)+ $SCyK+n+;^jT2JRYpE$Y13v22&1MM2T7#Ss+Wxv $Y+c,s$2Jto!eM!WyKRMe2<uVF8k!^B=;x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	172.67.75.209	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:33 UTC	682	OUT	GET /photo/420572/image/medium-ebcdf96c54690bcd5e78702c61a2d484.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:34 UTC	1069	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: image/jpeg Content-Length: 138160 Connection: close x-amz-id-2: QGL+fhXAybS+U2ae8iHShlFAsjS8oNFLpW2cILZV5eW9T6DRjP691gc8OSu0x1kuHQzRgNILl+Tvw+iy7zCr7Xoj65FqwjHomJa5lvKYKgM= x-amz-request-id: 65K5YG1GHSQ8X2RX Last-Modified: Sun, 19 Mar 2023 03:16:43 GMT ETag: "43619d499e13545739a706bc88f43f33" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=864000 Content-Disposition: inline; filename="image_processing20230319-2-gahkl5.jpg"; filename*=UTF-8''image_processing20230319-2-gahkl5.jpg x-amz-version-id: ep_K_wMQGOad25gw2CNoO_EW4bQiL9Y. CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Yhs%2Brj51FV%2FYMj71NKybVEIX%2BCmvt7mRBsWREbLjc2wqxvqvJeCWwGPJejN%2FVbaa0na%2F2%2Fut%2BW1OiaOf%2BqvnWhbaselri0AyECgmGg24iNDCz2oc69CFXoKu1OQP3iys2Wan7s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04965eac9460b-DFW
2024-10-31 02:41:34 UTC	300	IN	Data Raw: ff d8 ff e1 4f be 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 36 3a 30 35 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: OExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:36:05DANIELLE NIEUWENDYK
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 90 01 00 00 00 90 07 00 04 00 00 00 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 37 34 00 00 92 92 02 00 03 00 00 00 37 34 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 6c 02 00 00 03 a0 04 00 01 00 00 00 d3 01 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 00 00 00 00 00 02 a4 03 00 01 00 00 00 00 00 00 Data Ascii: 0231L`t\|74740100l
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: ef fb bf f8 2f 87 12 98 9a 4f b5 6f 3d 6b 16 f7 da a6 9e cf 34 fa 5d f4 eb 71 2d a6 af 1a cb 3a b1 1c b9 aa fd 98 9d d4 f2 fd da af 1f 87 8f d9 c4 05 ba 29 74 be 5c f5 6f 2e 2d 74 ee 3a 9d ec a9 14 f6 f0 d8 3b 4e 22 f5 da bc 39 50 f3 f4 81 45 95 9b 87 06 ff 00 65 85 6b b9 6c 1e 59 bb 6d 66 0b 0d 5d 26 d3 ee 6e 44 c6 e0 cb 0b 27 a4 50 1e 2e 54 84 56 8d 88 1f 12 b7 0f e6 7c 16 b5 ba 8d f7 96 ef ec 34 f8 b5 59 47 fb 8f b8 b8 96 de d6 e8 50 72 68 6b 5e 4a 09 f4 c9 1f 10 df f9 b0 5d a0 86 47 e7 0f 2c 6b 36 1a 17 92 74 3b 98 e4 5d 4f 53 8a 5b cb 7b 59 18 fc 09 7d 38 5b 75 e1 fb 0e f5 2c fb 72 fb 3f cb 84 06 44 72 0f b8 f4 2d 37 cb 7f 96 ff 00 97 b6 f6 b2 3c 76 5a 46 87 69 ca ea 73 b0 2c a3 94 b2 35 3e d3 c9 21 66 ff 00 29 9b 26 c4 ee 53 6f 2d ea 97 fa b6 93 0e Data Ascii: /Oo=k4]q-:)t\o.-t:;N"9PEeklYmf]&nD'P.TV\|4YGPrhk^J]G,k6t;]OS[{Y}8[u,r?Dr-7<vZFis,5>!f)&So-
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 6a 03 5c 4f c2 85 6e 25 77 1c 5b 93 0e 48 ce 8d cb ed 22 7e db 49 6c 73 2f 5c 7f ca db 2b c6 0f ae 6b da d6 ae c8 7f 74 af 7a f6 71 a0 db e1 f4 ec 05 a2 38 f8 7f dd 8a f8 54 cc 74 0c 8b 4b f2 de 8f a5 9a d9 c2 c1 c0 21 64 96 59 66 60 0f 60 d2 b3 90 be c3 16 26 56 80 f3 c7 97 ee 35 cd 22 3b 38 19 91 d2 e2 19 b9 23 b4 6c 3d 37 0c 7e 24 2a dc 78 86 56 4f db fb 3f 67 23 21 6b 16 3b a4 f9 2e 2d 4e e2 ee ea f1 5a d7 eb a9 68 f7 70 46 d5 43 24 0e 25 5f 84 83 1f ab 14 c9 2a 48 cb f6 e3 65 e7 f6 57 22 22 c8 95 7d 4b f2 4f f2 f3 51 9a e6 5b 8b 06 ad d3 48 f2 22 48 e8 a1 e5 40 8e ea 14 8a 33 05 1b e2 71 82 8e 26 23 f9 d3 e4 bf 32 ea 3a 55 91 d2 45 c4 8b a4 5b 4f 02 b0 90 c4 85 da 10 4c f2 d1 c1 95 7f 60 2a 84 93 d4 e5 f1 37 d9 64 85 79 ff 00 e5 85 e7 93 b5 ad 52 5b Data Ascii: j\On%w[H"~Ils/\+ktzq8TtK!dYf``&V5";8#l=7~$xVO?g#!k;.-NZhpFC$%_HeW""}KOQ[H"H@3q&#2:UE[OL`*7dyR[
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: ec 2c 24 52 c1 6d ff 00 2f 7c f1 a5 44 ba 6c ba 52 5f dd cf 72 82 0b 19 5c 3a cb 75 1f ef 19 dc c7 f6 ed e0 81 15 64 49 19 39 a4 98 47 34 52 37 4a fc c2 b5 f2 9e b1 3e 8f 34 4f ac 43 76 ed 1d c4 2c 61 b9 78 1d 88 32 c7 69 20 3c 62 b5 91 1b 87 08 f9 7d 99 31 5e 48 3f cc ff 00 cc ed 37 5d 7b cb 6d 2e de 5b 7d 32 f9 23 30 41 78 a8 4c 25 14 a1 a2 ab 3d 39 f3 3f 17 2f 87 fd 6c af 8a ce c9 b6 fc b7 e5 ff 00 31 f9 a2 ef fc 55 7b 0b 45 e5 6b 70 b0 cc f2 4c 15 bf 75 01 55 94 18 90 c8 53 d4 4e 5c e3 4e 4d f6 7e 2f 8b 0c a3 63 75 0f 64 fc b4 d5 2d ad ff 00 31 0f 96 ae 6c ed 5e de 08 d2 3b 3b a8 a3 f5 d5 9a 28 39 3a fa ce 03 c2 49 f8 b8 b7 2f ee fe d6 47 1f d4 42 c8 9a 67 d1 3e 91 a4 5f dd 4f 71 6e f3 cc d7 04 fd 6c 35 5f f7 8e 0a 2b 50 aa 27 1a 8e 3c f8 72 ff 00 2d Data Ascii: ,$Rm/\|DlR_r\:udI9G4R7J>4OCv,ax2i <b}1^H?7]{m.[}2#0AxL%=9?/l1U{EkpLuUSN\NM~/cud-1l^;;(9:I/GBg>_Oqnl5_+P'<r-
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 88 e6 f5 2f 2b 47 e4 df f0 fe bd e5 4b cb 18 af ae 6c 26 b9 bd d3 ef 64 99 e2 2f fe ea 84 b2 38 50 89 c1 b9 b4 7f 6b e1 f5 38 e5 72 2c c3 c7 2e 20 7b 7b 89 6d dc 86 78 5d a3 76 53 c9 49 42 41 20 f7 1b 65 ad 6d 25 14 86 3b f8 0c 0a b9 62 2c bc c9 dd 8d 14 77 f9 fc b1 b4 a3 f4 fd 3f 52 bd 8a 55 b5 b7 92 68 e3 56 92 56 8a 32 dc 55 05 59 98 8f b2 a2 9d 4e 56 48 bf 35 08 9d 32 c2 f9 ed ee 6e e0 0e c9 6a 9e bc c5 3a 85 56 0a 5f 96 c5 78 f2 fb 4a 7e 1c 8c 8e f4 9a 7b f7 fc e2 ff 00 96 f5 1b cd 72 7f 32 c3 1d d4 72 c7 13 c3 0d fc f1 f2 89 d4 b0 0c 89 2b 1e bf 07 06 3c 5b 18 03 6c 81 d9 03 ff 00 39 8d e7 6f d2 3e 69 d2 fc a5 04 a3 ea fa 44 5f 59 bf 0a 55 80 b9 b8 14 55 6a 7c 4a d1 44 2b 4f f8 b7 2f 2c 1e 77 f9 09 6f a7 c9 f9 99 61 71 71 61 79 ab 4b 64 24 b9 b0 d3 Data Ascii: /+GKl&d/8Pk8r,. {{mx]vSIBA em%;b,w?RUhVV2UYNVH52nj:V_xJ~{r2r+<[l9o>iD_YUUj\|JD+O/,woaqqayKd$
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: d2 6d 7d 9e 9f 65 65 10 86 d2 dd 20 88 56 89 1a 85 1b 92 c7 a7 b9 27 14 22 06 2a c6 fc ef a7 58 36 8f 71 79 36 9d 3e a3 22 af 06 b7 b6 34 91 e3 6d 8a d4 ee b1 fe dc 9c 3f 97 23 20 c8 17 c2 3f 99 3a 95 cd c6 b0 f6 2d 0b c1 1d a4 97 32 aa 34 86 50 4d ec df 59 2c bc 95 7d 3f 85 d1 36 f8 5f 87 3f da c8 c4 84 16 2d 6b 7d 3d b1 2d 11 0a fb 55 a8 0f d9 20 8d 8f c2 77 1d c6 13 1b 56 77 65 e7 fb cb fd 2e 6b 4b f8 17 54 ba ba 69 0c 91 dc aa b4 4e c4 13 1f 18 a3 55 7f dd 93 ea 22 f3 fe f9 9a 4e 19 54 ec 1d 99 02 8f b0 d3 ad ec 7c a7 ab 15 b2 9f 5a b8 68 44 ec aa d1 db 41 69 1b 21 40 f7 0b 1b 7a d2 46 24 0c 56 26 6e 2f f6 dd 79 fc 59 30 41 54 82 d7 4d f3 37 98 ac 25 92 38 24 96 7d 2b d0 d2 e0 fa b2 72 85 15 81 50 af 1a 03 c0 32 a9 ac df b4 d8 48 40 fb 9f ff d5 80 5d Data Ascii: m}ee V'"*X6qy6>"4m?# ?:-24PMY,}?6_?-k}=-U wVwe.kKTiNU"NT\|ZhDAi!@zF$V&n/yY0ATM7%8$}+rP2H@]
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 93 89 d9 84 86 ea 3e 5e 9a cd 75 08 be b9 24 91 42 a5 99 9a 30 0b 1f 84 d1 68 c4 0d cd 06 09 26 29 63 d0 b9 3d 01 35 a7 86 48 31 7b 47 91 3c c1 a8 e8 fe 58 ba d1 ec b9 69 8b a9 5b 43 fe 9a a6 1e 6c e2 5e 0c d2 3b f3 2b 04 80 b0 e1 19 82 44 ff 00 7e 7e da 57 6d 87 93 cb b5 2d 34 e9 e6 49 51 97 d1 17 32 db 98 38 b8 04 44 76 70 5a ab c1 c1 ff 00 7e 33 64 b9 b0 56 d5 4a 4c a9 7e 55 a1 1a 82 97 8f 90 0a 19 94 f1 66 43 f6 4a f2 05 7f c9 c8 6e 92 9c da 79 e6 4d 0d ae a2 d2 24 69 60 36 69 05 89 77 63 0a 73 50 2e 0b db b0 e2 c6 5f e5 6f b3 f0 b6 4e 94 96 1b 6e 91 7a d1 89 b6 88 10 5e b5 dd 47 51 b5 0e fd 36 c9 5a 19 7e a5 e7 ad 6f 5e d5 a2 10 da 89 a1 86 3f 43 4a d1 e3 88 c9 6f 6c a9 18 48 da 1b 6f 8d 4c b1 aa ff 00 79 20 95 bf 9b e1 e3 c0 6e cb 8a de b5 e5 2d 4f Data Ascii: >^u$B0h&)c=5H1{G<Xi[Cl^;+D~~Wm-4IQ28DvpZ~3dVJL~UfCJnyM$i`6iwcsP._oNnz^GQ6Z~o^?CJolHoLy n-O
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: cb 69 2c 66 ee 31 ef 11 67 49 17 e4 ce d8 a5 26 7f f9 c4 0f 38 83 48 7c fa 5e 3e dc e1 b8 4a 7d 0b 39 18 aa f8 7f e7 0e 3c c5 1b 72 1e 7e 92 37 26 ac 63 b5 94 12 7b 1a fd 66 b8 ae c8 f9 3f e7 12 35 f9 ed 78 dd 7e 62 5f cd 76 3e c4 8d 1c ad 18 1e 1c 1a 72 df f0 f8 ae c9 25 a7 fc e1 66 b5 77 0c b2 eb 5e 6d 8d 6f 79 b2 c5 e9 db bd c2 98 d5 8f 06 67 92 44 6e 4c bb b2 0f b1 fc ef f6 b1 54 8f cb 5f 92 3f f3 90 de 56 f3 45 df 97 fc b9 7e 74 9b 3b d5 79 1b 5a 8e 52 2c a7 4b 72 02 96 e2 b2 bc 52 9f 57 e1 47 45 76 f8 f8 b3 a2 72 c5 59 55 a7 fc e3 f7 fc e4 2d dd dc 91 ea bf 98 4f 6d 6c e0 c8 67 b7 bb bc 94 99 18 80 57 d3 fd c5 3e 1d fe d6 2b c4 5d a9 ff 00 ce 26 f9 e2 fd ed e2 d4 ff 00 30 2e 35 4b 25 6e 72 2d c2 4e e5 29 bf c0 b2 4f 22 ef d3 95 3e 1f e5 c0 55 65 c7 Data Ascii: i,f1gI&8H\|^>J}9<r~7&c{f?5x~b_v>r%fw^moygDnLT_?VE~t;yZR,KrRWGEvrYU-OmlgW>+]&0.5K%nr-N)O">Ue
2024-10-31 02:41:34 UTC	1369	IN	Data Raw: 4d 24 0b 7b 9f f8 4b c8 be 5a fc be bc b9 8e 0f ac 9d 61 66 b6 4b e9 5a 25 b8 b6 00 55 51 a6 53 c5 79 1e 54 5f ef 5f e0 8b d2 e7 c3 2a dc b3 da 9e 2d e7 2b 0f 2f d8 6a 91 db 68 97 33 5c db 2c 2b eb 1b a4 68 e6 59 49 24 ab 2b 2a 53 e1 2b d3 2c 0c 0a 49 10 25 d0 2e ee 58 05 1e 26 bb 61 2a 1f 4f 7e 43 79 ea f7 cb e9 36 93 6d 63 fa 46 e7 55 94 4b 04 72 48 a9 23 34 48 a8 63 8e 46 3c 3f bb 4f 86 3f 87 8e 63 8c 84 16 47 77 b5 68 bf 9c 1a 0e af af c9 a0 c5 65 74 75 08 24 58 6e 82 c7 c9 61 76 15 a4 95 a3 2d 3f 68 f1 ff 00 89 65 c3 26 f5 4c 69 9d f0 8f f9 46 4d 0e 34 ec 31 57 73 50 3c 31 55 9e a1 3d 3a 61 56 85 6b bf 4c 55 77 ee cf 6c 0a ef 45 09 a8 ae 15 54 58 d4 76 c0 ab c2 a8 c5 5d 45 c5 5a e2 b8 ab 5c 4f 6c 55 c1 0f be 2a ee 18 aa e0 31 57 9f fe 70 7e 64 4b e4 Data Ascii: M${KZafKZ%UQSyT__-+/jh3\,+hYI$+S+,I%.X&aO~Cy6mcFUKrH#4HcF<?O?cGwhetu$Xnav-?he&LiFM41WsP<1U=:aVkLUwlETXv]EZ\OlU1Wp~dK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49824	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:33 UTC	733	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: www.riparide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:33 UTC	650	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8016 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ygi6Kl0wbXIVg88Xx5gzr9KpJDZYNOcAv73GXFNhxPHN7OaTxJvySg0%2F1zRiSgq%2B%2BVJle30jF1e8wxniH8Cs8EpeotpBYR4kF1Trd0bp98wrilO8hMJ%2BNHUrbtyPoHG49gM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0496679aea916-DFW
2024-10-31 02:41:33 UTC	719	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6f 2c 73 2c 7a 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 65 2c 66 29 7b 66 6f 72 28 55 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 32 31 31 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 55 28 31 32 39 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 55 28 31 38 35 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 31 33 37 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 55 28 31 35 37 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 55 28 32 31 32 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 30 38 29 29 2f 37 2b 2d 70 61 72 73 65 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,o,s,z,A){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=-parseInt(U(211))/1+parseInt(U(129))/2*(parseInt(U(185))/3)+-parseInt(U(137))/4+parseInt(U(157))/5+parseInt(U(212))/6+-parseInt(U(208))/7+-parse
2024-10-31 02:41:33 UTC	1369	IN	Data Raw: 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 59 28 32 30 35 29 5d 5b 59 28 31 35 30 29 5d 5b 59 28 32 31 39 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 59 28 32 30 35 29 5d 5b 59 28 31 35 30 29 5d 5b 59 28 32 31 39 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 59 28 31 37 32 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 59 28 31 37 35 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 59 28 31 37 32 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 31 26 54 7c 4f 3c 3c 31 2e 36 32 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 59 28 31 37 35 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d Data Ascii: ,S=J+R,Object[Y(205)][Y(150)][Y(219)](H,S))J=S;else{if(Object[Y(205)][Y(150)][Y(219)](I,J)){if(256>J[Y(172)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(175)](F(O)),O=0):P++,G++);for(T=J[Y(172)](0),G=0;8>G;O=1&T\|O<<1.62,P==E-1?(P=0,N[Y(175)](F(O)),O=0):P++,T>>=
2024-10-31 02:41:33 UTC	1369	IN	Data Raw: 5a 28 32 33 30 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 5a 2c 44 5b 61 30 28 31 37 32 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 31 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 31 3d 57 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 31 28 31 33 39 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f Data Ascii: Z(230)],32768,function(E,a0){return a0=Z,D[a0(172)](E)})},'i':function(D,E,F,a1,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a1=W,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=Math[a1(139)](2,2),M=1;R!=M;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?
2024-10-31 02:41:33 UTC	1369	IN	Data Raw: 5d 5b 61 61 28 31 36 30 29 5d 26 26 28 49 3d 49 5b 61 61 28 31 38 34 29 5d 28 44 5b 61 61 28 32 30 39 29 5d 5b 61 61 28 31 36 30 29 5d 28 45 29 29 29 2c 49 3d 44 5b 61 61 28 32 30 31 29 5d 5b 61 61 28 32 31 38 29 5d 26 26 44 5b 61 61 28 31 39 34 29 5d 3f 44 5b 61 61 28 32 30 31 29 5d 5b 61 61 28 32 31 38 29 5d 28 6e 65 77 20 44 5b 28 61 61 28 31 39 34 29 29 5d 28 49 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 61 62 2c 50 29 7b 66 6f 72 28 61 62 3d 61 61 2c 4f 5b 61 62 28 31 35 36 29 5d 28 29 2c 50 3d 30 3b 50 3c 4f 5b 61 62 28 32 33 30 29 5d 3b 4f 5b 50 2b 31 5d 3d 3d 3d 4f 5b 50 5d 3f 4f 5b 61 62 28 32 32 32 29 5d 28 50 2b 31 2c 31 29 3a 50 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4f 7d 28 49 29 2c 4a 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 Data Ascii: ][aa(160)]&&(I=I[aa(184)](D[aa(209)][aa(160)](E))),I=D[aa(201)][aa(218)]&&D[aa(194)]?D[aa(201)][aa(218)](new D[(aa(194))](I)):function(O,ab,P){for(ab=aa,O[ab(156)](),P=0;P<O[ab(230)];O[P+1]===O[P]?O[ab(222)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'
2024-10-31 02:41:33 UTC	1369	IN	Data Raw: 28 32 30 31 29 5d 5b 61 37 28 31 37 33 29 5d 28 44 5b 45 5d 29 3f 27 61 27 3a 44 5b 45 5d 3d 3d 3d 65 5b 61 37 28 32 30 31 29 5d 3f 27 43 27 3a 21 30 3d 3d 3d 44 5b 45 5d 3f 27 54 27 3a 44 5b 45 5d 3d 3d 3d 21 31 3f 27 46 27 3a 28 46 3d 74 79 70 65 6f 66 20 44 5b 45 5d 2c 61 37 28 31 34 30 29 3d 3d 46 3f 76 28 65 2c 44 5b 45 5d 29 3f 27 4e 27 3a 27 66 27 3a 73 5b 46 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 64 2c 66 2c 44 2c 45 2c 46 2c 47 29 7b 61 64 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 3d 69 5b 61 64 28 32 32 35 29 5d 28 61 64 28 31 35 33 29 29 2c 66 5b 61 64 28 32 31 33 29 5d 3d 61 64 28 31 36 39 29 2c 66 5b 61 64 28 32 32 37 29 5d 3d 27 2d 31 27 2c 69 5b 61 64 28 31 33 33 29 5d 5b 61 64 28 31 34 34 29 5d 28 66 29 2c 44 3d 66 Data Ascii: (201)][a7(173)](D[E])?'a':D[E]===e[a7(201)]?'C':!0===D[E]?'T':D[E]===!1?'F':(F=typeof D[E],a7(140)==F?v(e,D[E])?'N':'f':s[F]\|\|'?')}function B(ad,f,D,E,F,G){ad=V;try{return f=i[ad(225)](ad(153)),f[ad(213)]=ad(169),f[ad(227)]='-1',i[ad(133)][ad(144)](f),D=f
2024-10-31 02:41:33 UTC	1369	IN	Data Raw: 32 32 31 29 5d 28 27 2b 27 2c 61 35 28 31 37 39 29 29 2c 4a 5b 61 35 28 31 36 35 29 5d 28 27 76 5f 27 2b 48 2e 72 2b 27 3d 27 2b 4f 29 7d 63 61 74 63 68 28 50 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 63 2c 61 38 2c 64 29 7b 66 6f 72 28 61 38 3d 56 2c 64 3d 5b 5d 3b 63 21 3d 3d 6e 75 6c 6c 3b 64 3d 64 5b 61 38 28 31 38 34 29 5d 28 4f 62 6a 65 63 74 5b 61 38 28 31 37 38 29 5d 28 63 29 29 2c 63 3d 4f 62 6a 65 63 74 5b 61 38 28 31 36 36 29 5d 28 63 29 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 76 28 63 2c 64 2c 61 36 29 7b 72 65 74 75 72 6e 20 61 36 3d 56 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 36 28 31 33 38 29 5d 26 26 30 3c 63 5b 61 36 28 31 33 38 29 5d 5b 61 36 28 32 30 35 29 5d 5b 61 36 28 31 36 31 29 5d 5b 61 36 28 32 31 Data Ascii: 221)]('+',a5(179)),J[a5(165)]('v_'+H.r+'='+O)}catch(P){}}function y(c,a8,d){for(a8=V,d=[];c!==null;d=d[a8(184)](Object[a8(178)](c)),c=Object[a8(166)](c));return d}function v(c,d,a6){return a6=V,d instanceof c[a6(138)]&&0<c[a6(138)][a6(205)][a6(161)][a6(21
2024-10-31 02:41:33 UTC	452	IN	Data Raw: 6e 67 2c 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 2c 2f 30 2e 36 38 30 30 35 38 38 31 31 38 30 34 37 38 34 31 3a 31 37 33 30 33 34 30 36 34 31 3a 64 73 78 43 45 4c 64 54 33 69 63 67 31 55 51 32 6d 4d 74 5f 57 4c 6c 49 7a 63 6c 53 36 44 50 46 31 4b 43 39 65 5f 36 2d 78 48 49 2f 2c 63 68 61 72 41 74 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 62 69 6e 64 2c 69 66 72 61 6d 65 2c 73 79 6d 62 6f 6c 2c 6e 61 76 69 67 61 74 6f 72 2c 73 6f 72 74 2c 31 37 38 39 37 30 30 73 46 4f 59 72 58 2c 63 68 6c 41 70 69 41 43 43 48 2c 6f 6e 74 69 6d 65 6f 75 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 74 6f 53 74 72 69 6e 67 2c 65 72 72 6f 72 2c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 2c Data Ascii: ng,__CF$cv$params,/0.6800588118047841:1730340641:dsxCELdT3icg1UQ2mMt_WLlIzclS6DPF1KC9e_6-xHI/,charAt,hasOwnProperty,chlApiRumWidgetAgeMs,bind,iframe,symbol,navigator,sort,1789700sFOYrX,chlApiACCH,ontimeout,getOwnPropertyNames,toString,error,[native code],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49823	142.250.184.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:33 UTC	1389	OUT	GET /pagead/1p-user-list/740117353/?random=1730342490526&cv=11&fst=1730340000000&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d09A78Bmqe4XZ7sVBCCm4p6s0qK5_0RNRDAgMAqXZeGPAm1e5&random=1325322971&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49825	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	568	OUT	GET /next-integrations/actions/845/449cd4534726259c2a8c.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:34 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28277 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 22 Oct 2024 11:56:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: dJSBuCPSj5P4WvkiUufPg1lklIhA8uEz Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 02:42:22 GMT ETag: "4e4e40c0ccc652a7cc4cef7c2146c1f5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e0bc02299b03254b2a35b8c930f005c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: OkYJmgtf9pZS0k9aISDxEKynsZsapKBK-9_weviiRSQgCEFH2M2QRw== Age: 86353
2024-10-31 02:41:34 UTC	15697	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 35 5d 2c 7b 31 32 39 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 72 28 36 31 35 30 29 2c 6f 3d 72 28 36 30 38 36 29 3b 63 6c 61 73 73 20 61 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 69 6e 70 75 74 20 74 6f 20 62 65 20 61 6e 20 41 72 72 61 79 2c 20 67 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 Data Ascii: (self.webpackChunkDestination=self.webpackChunkDestination\|\|[]).push([[845],{1291:(e,t,r)=>{"use strict";const n=r(6150),o=r(6086);class a extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e
2024-10-31 02:41:34 UTC	12580	IN	Data Raw: 6f 73 69 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 7d 7d 63 6f 6e 73 74 20 67 3d 22 2d 31 22 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 22 5c 72 22 3d 3d 3d 65 7c 7c 22 5c 6e 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 22 20 22 3d 3d 3d 65 7c 7c 22 5c 74 22 3d 3d 3d 65 7c 7c 22 5c 6e 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 6d 61 74 63 68 28 2f 5b 61 2d 7a 5d 2f 69 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 67 26 26 28 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 26 26 69 73 46 69 6e 69 74 65 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 29 7d 66 75 6e 63 74 Data Ascii: osition(){return this.position}}const g="-1";function w(e){return"\r"===e\|\|"\n"===e}function b(e){return" "===e\|\|"\t"===e\|\|"\n"===e}function E(e){return!!e.match(/[a-z]/i)}function x(e){return e!==g&&(!isNaN(parseFloat(e))&&isFinite(parseInt(e,10)))}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49832	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	535	OUT	GET /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	855	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:35 UTC	1531	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 33 31 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 Data Ascii: 31b2<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><met
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 70 61 72 69 64 65 20 68 65 6c 70 73 20 79 6f 75 20 70 6c 61 6e 20 61 6e 64 20 62 6f 6f 6b 20 79 6f 75 72 20 6e 65 78 74 20 65 73 63 61 70 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 53 74 6f 72 79 74 65 6c 6c 65 72 20 74 72 61 76 65 6c 20 67 75 69 64 65 73 2e 20 54 68 65 73 65 20 67 75 69 64 65 73 2c 20 63 61 6c 6c 65 64 20 52 69 70 61 72 69 64 65 20 53 74 6f 72 69 65 73 2c 20 63 6f 6d 65 20 70 61 63 6b 65 64 20 77 69 74 68 20 75 6e 69 71 75 65 20 73 74 61 79 73 2c 20 6c 6f 63 61 6c 20 61 64 76 65 6e 74 75 72 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 20 76 69 62 65 73 2e 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 6f 6e 74 Data Ascii: paride helps you plan and book your next escape through our Storyteller travel guides. These guides, called Riparide Stories, come packed with unique stays, local adventures and social vibes...." name="description" /><link rel="preload" href="/assets/font
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 69 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 20 74 72 75 65 2c 0a 20 20 70 61 79 6c 6f 61 64 Data Ascii: ipt defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, captureUnhandledRejections: true, payload
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 72 6e 20 72 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6f 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6f 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 65 29 7d 2c 6f 2e 70 3d 22 22 2c 6f 28 6f 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: rn r[e]}.bind(null,t));return n},o.n=function(r){var e=r&&r.__esModule?function(){return r.default}:function(){return r};return o.d(e,"a",e),e},o.o=function(r,e){return Object.prototype.hasOwnProperty.call(r,e)},o.p="",o(o.s=0)}([function(r,e,o){"use stri
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 21 31 2c 69 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 73 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 64 3d 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 22 2c 69 2e 73 72 63 3d 6e 2e 72 6f 6c 6c 62 61 72 4a 73 55 72 6c 2c 6f 7c 7c 28 69 2e 61 73 79 6e 63 3d 21 30 29 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 6c 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: !1,i=e.createElement("script"),s=e.getElementsByTagName("script")[0],d=s.parentNode;i.crossOrigin="",i.src=n.rollbarJsUrl,o\|\|(i.async=!0),i.onload=i.onreadystatechange=a((function(){if(!(l\|\|this.readyState&&"loaded"!==this.readyState&&"complete"!==this.re
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 73 2c 68 61 6e 64 6c 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 2c 63 61 70 74 75 72 65 45 76 65 6e 74 2c 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 70 74 75 72 65 4c 6f 61 64 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 30 3b 66 3c 70 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 69 2e 70 72 6f 74 6f 74 79 70 65 5b 70 5b 66 5d 5d 3d 75 28 70 5b 66 5d 29 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 53 68 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 72 29 7b 76 61 72 20 6f 3d 65 2e 67 6c 6f 62 61 6c 41 6c 69 61 73 7c 7c 22 52 6f 6c 6c 62 61 72 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 3b 72 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 Data Ascii: s,handleUnhandledRejection,captureEvent,captureDomContentLoaded,captureLoad".split(","),f=0;f<p.length;++f)i.prototype[p[f]]=u(p[f]);r.exports={setupShim:function(r,e){if(r){var o=e.globalAlias\|\|"Rollbar";if("object"==typeof r[o])return r[o];r._rollbarShi
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 6e 79 6d 6f 75 73 45 72 72 6f 72 73 28 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 6e 28 72 2c 65 2c 74 2c 6f 29 7d 3b 6f 26 26 28 61 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f 6e 45 72 72 6f 72 3d 74 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 61 7d 7d 2c 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 26 26 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 26 26 72 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: nymousErrors();var a=function(){var o=Array.prototype.slice.call(arguments,0);n(r,e,t,o)};o&&(a._rollbarOldOnError=t),r.onerror=a}},captureUnhandledRejections:function(r,e,o){if(r){"function"==typeof r._rollbarURH&&r._rollbarURH.belongsToShim&&r.removeEve
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 6e 74 53 6f 75 72 63 65 2c 46 69 6c 65 52 65 61 64 65 72 2c 48 54 4d 4c 55 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 2c 49 44 42 44 61 74 61 62 61 73 65 2c 49 44 42 52 65 71 75 65 73 74 2c 49 44 42 54 72 61 6e 73 61 63 74 69 6f 6e 2c 4b 65 79 4f 70 65 72 61 74 69 6f 6e 2c 4d 65 64 69 61 43 6f 6e 74 72 6f 6c 6c 65 72 2c 4d 65 73 73 61 67 65 50 6f 72 74 2c 4d 6f 64 61 6c 57 69 6e 64 6f 77 2c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 53 56 47 45 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 2c 53 63 72 65 65 6e 2c 54 65 78 74 54 72 61 63 6b 2c 54 65 78 74 54 72 61 63 6b 43 75 65 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 2c 57 65 62 53 6f 63 6b 65 74 2c 57 65 62 53 6f 63 6b 65 74 57 6f 72 6b 65 72 2c 57 6f 72 6b 65 72 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 58 Data Ascii: ntSource,FileReader,HTMLUnknownElement,IDBDatabase,IDBRequest,IDBTransaction,KeyOperation,MediaController,MessagePort,ModalWindow,Notification,SVGElementInstance,Screen,TextTrack,TextTrackCue,TextTrackList,WebSocket,WebSocketWorker,Worker,XMLHttpRequest,X
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 72 29 7d 2c 69 3d 30 3b 6f 3d 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 5b 69 2b 2b 5d 3b 29 6e 7c 7c 28 6e 3d 6f 2e 68 61 6e 64 6c 65 72 29 2c 6f 2e 68 61 6e 64 6c 65 72 2e 5f 73 77 61 70 41 6e 64 50 72 6f 63 65 73 73 4d 65 73 73 61 67 65 73 28 6c 2c 6f 2e 6d 65 73 73 61 67 65 73 29 3b 77 69 6e 64 6f 77 5b 74 5d 3d 6e 2c 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 7d 7d 7d 7d 5d 29 3b 0a 2f 2f 20 45 6e 64 20 52 6f 6c 6c 62 61 72 20 53 6e 69 70 70 65 74 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 3e 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: on(r){return new a(r)},i=0;o=window._rollbarShims[i++];)n\|\|(n=o.handler),o.handler._swapAndProcessMessages(l,o.messages);window[t]=n,window._rollbarInitialized=!0}}}}]);// End Rollbar Snippet</script>... Google Tag Manager --><script defer>(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49833	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	549	OUT	GET /api/user/current_user HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:34 UTC	1363	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-store Vary: * Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:34 GMT; SameSite=Lax; secure Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:34 GMT; SameSite=Lax; secure Etag: W/"74234e98afe7498fb5daf1f36ac2d78a" X-Request-Id: f1214e7b-037b-4c19-86dd-d9cf02bdfb92 X-Runtime: 0.008252 Strict-Transport-Security: max-age=63072000; includeSubDomains Via: 1.1 vegur cf-cache-status: DYNAMIC
2024-10-31 02:41:34 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 30 34 39 37 30 37 38 65 32 36 62 35 31 2d 44 46 57 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8db0497078e26b51-DFW
2024-10-31 02:41:34 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49840	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	540	OUT	GET /api/features HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	1354	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 47 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342494&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=aEN3WNAafaj%2BB7qBIaQWZpkdrbEaJMOMfh0umenBBnw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Vary: Accept Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:34 GMT; SameSite=Lax; secure Set-Cookie: ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; path=/; expires=Thu, 31 Oct 2024 06:41:34 GMT; SameSite=Lax; secure Etag: W/"a260f3b020f77db474bc285869e02a6a" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: ac8e1f5e-e011-403f-bf0b-269f3d0a351b X-Runtime: 0.011568 Strict-Transport-Security: max-age=63072000; includeSubDomains
2024-10-31 02:41:35 UTC	94	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 76 65 67 75 72 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 62 30 34 39 37 30 61 64 39 33 65 39 61 64 2d 44 46 57 0d 0a 0d 0a Data Ascii: Via: 1.1 vegurcf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8db04970ad93e9ad-DFW
2024-10-31 02:41:35 UTC	47	IN	Data Raw: 5b 22 70 65 72 73 6f 6e 61 6c 69 73 65 64 5f 73 65 61 72 63 68 22 2c 22 72 65 66 65 72 72 61 6c 73 22 2c 22 72 69 70 61 76 69 64 65 6f 22 5d Data Ascii: ["personalised_search","referrals","ripavideo"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	808	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8db04915592c4756 HTTP/1.1 Host: www.riparide.com Connection: keep-alive Content-Length: 15819 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:34 UTC	15819	OUT	Data Raw: 7b 22 77 70 22 3a 22 34 39 4a 58 41 79 45 4f 41 54 4a 41 56 50 49 45 76 45 51 70 66 58 79 43 70 6f 6e 70 35 73 35 37 37 79 4f 45 64 6c 70 4e 36 43 42 36 69 4a 70 30 4e 47 46 49 36 54 45 62 70 56 76 4a 2d 75 39 39 70 6f 55 37 70 78 70 37 43 37 4a 45 70 53 37 45 2b 49 48 58 55 54 39 6a 24 32 58 4e 36 65 39 6e 6f 61 62 51 50 2d 38 58 2b 65 41 74 6e 59 45 61 6c 4e 55 35 70 41 4a 4a 5a 35 30 79 6a 75 70 52 2d 75 69 68 6a 70 68 58 50 30 70 79 74 4a 70 35 58 79 79 58 65 56 58 35 70 45 36 70 66 54 67 70 45 59 6a 70 4c 72 4f 6f 2d 39 47 45 6f 55 75 4a 70 79 72 6a 70 79 49 46 66 70 46 79 70 45 6a 53 69 4b 4a 32 62 6e 43 79 2d 79 45 68 2b 6e 39 6c 41 65 4d 31 68 4e 70 73 58 79 35 6d 6b 39 70 4f 67 39 36 50 69 4e 33 53 2d 70 46 31 68 55 65 73 6f 58 70 4b 55 73 69 35 Data Ascii: {"wp":"49JXAyEOATJAVPIEvEQpfXyCponp5s577yOEdlpN6CB6iJp0NGFI6TEbpVvJ-u99poU7pxp7C7JEpS7E+IHXUT9j$2XN6e9noabQP-8X+eAtnYEalNU5pAJJZ50yjupR-uihjphXP0pytJp5XyyXeVX5pE6pfTgpEYjpLrOo-9GEoUuJpyrjpyIFfpFypEjSiKJ2bnCy-yEh+n9lAeM1hNpsXy5mk9pOg96PiN3S-pF1hUesoXpKUsi5
2024-10-31 02:41:35 UTC	1252	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:35 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.riparide.com; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=.JpIzERqclJrkMB4Jpgj.YfH33x4fIVvCk6XGiu7OtU-1730342495-1.2.1.1-zGgmkpTJaeDCXP_OoGaWBFs0M.loVe7K_2knN6k5gHG4rVfPC8d.BTidl7QTicTGyzozTmzxqTt0JNAdpleHQpqsEv_Jphen7zNKxaWNzfA72HvB1xHyHA4cy86J2.LQFkCrvj5cb0UzTP8vf8cIHdZUjCZblYu6KJPEDNLLJzawwPKDhEcrmLn.yu12HNq4V932WCTrJNem3sNGhOF82i60LqWYS5PA3rIx2Vf.vZwNbPqrFnDXGOv5vZfVwuLWH1Vwd9EpKVZNq7HlhbGBrjrJFzVGCLf2tP2kW_eK1OwUUgt7U6vVzBsHQ4zLcOb9jNhHdPjyTtf2sMEXWJtfcEkgZ9l8e.FkMzEtpf3GTvTqiipH.WwmmfCcIs.E1Ij8; Path=/; Expires=Fri, 31-Oct-25 02:41:35 GMT; Domain=.riparide.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csLLbDypNjRVYFBrcG7NVH599aS7mT2bDYm%2FqTYs%2F%2FN19mGMoh2WuTGdfxxuoVy7qnIc62fcFQFZijRmhvO922swU2PYmcbOy82nk1D8Hyh22IU5cg9pmbK7iAGMjtI9Vys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04971ae992e69-DFW
2024-10-31 02:41:35 UTC	193	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 34 32 26 73 65 6e 74 3d 38 26 72 65 63 76 3d 32 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 32 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 32 34 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 31 30 37 38 37 26 63 77 6e 64 3d 32 35 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 35 33 38 61 64 39 33 61 63 65 62 31 30 33 38 26 74 73 3d 32 34 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1642&sent=8&recv=21&lost=0&retrans=0&sent_bytes=2829&recv_bytes=17249&delivery_rate=2110787&cwnd=251&unsent_bytes=0&cid=f538ad93aceb1038&ts=244&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49843	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:34 UTC	411	OUT	GET /next-integrations/actions/google-analytics-4-web/2c69bee66ca16e286c8a.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:35 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 201240 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 22 Oct 2024 11:56:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: iKn0ksK_erB4L2mttifyUVWY0rXSnqDu Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 04:22:42 GMT ETag: "20d5c4b1bd8ff4a9ef6d20ab75983251" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baa5702f7bd64fcbae1e3bd950d9a244.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: wOs8ogY_jOOXGg3zskjhCKfHsHZRtooNJ9Fsmft707U6-NitV0hMAA== Age: 80334
2024-10-31 02:41:35 UTC	15696	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 37 39 34 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 3a 74 2c 41 62 6f 72 74 53 69 67 6e 61 6c 3a 72 7d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 3b 65 2e 65 78 70 6f 72 74 73 3d 74 2c 65 2e 65 78 70 6f 72 74 73 2e 41 62 6f 72 74 53 69 67 6e 61 6c 3d 72 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 74 7d 2c 31 32 39 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6f 3d 72 28 36 31 35 30 29 2c 6e 3d 72 28 36 Data Ascii: (()=>{var e,t,r={7948:e=>{"use strict";const{AbortController:t,AbortSignal:r}="undefined"!=typeof self?self:"undefined"!=typeof window?window:void 0;e.exports=t,e.exports.AbortSignal=r,e.exports.default=t},1291:(e,t,r)=>{"use strict";const o=r(6150),n=r(6
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 28 73 2c 61 2c 69 2c 63 2c 75 2c 64 2c 6c 29 7d 7d 74 2e 6b 65 79 77 6f 72 64 73 3d 7b 61 64 64 69 74 69 6f 6e 61 6c 49 74 65 6d 73 3a 21 30 2c 69 74 65 6d 73 3a 21 30 2c 63 6f 6e 74 61 69 6e 73 3a 21 30 2c 61 64 64 69 74 69 6f 6e 61 6c 50 72 6f 70 65 72 74 69 65 73 3a 21 30 2c 70 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 21 30 2c 6e 6f 74 3a 21 30 2c 69 66 3a 21 30 2c 74 68 65 6e 3a 21 30 2c 65 6c 73 65 3a 21 30 7d 2c 74 2e 61 72 72 61 79 4b 65 79 77 6f 72 64 73 3d 7b 69 74 65 6d 73 3a 21 30 2c 61 6c 6c 4f 66 3a 21 30 2c 61 6e 79 4f 66 3a 21 30 2c 6f 6e 65 4f 66 3a 21 30 7d 2c 74 2e 70 72 6f 70 73 4b 65 79 77 6f 72 64 73 3d 7b 24 64 65 66 73 3a 21 30 2c 64 65 66 69 6e 69 74 69 6f 6e 73 3a 21 30 2c 70 72 6f 70 65 72 74 69 65 73 3a 21 30 2c 70 61 74 74 65 72 Data Ascii: (s,a,i,c,u,d,l)}}t.keywords={additionalItems:!0,items:!0,contains:!0,additionalProperties:!0,propertyNames:!0,not:!0,if:!0,then:!0,else:!0},t.arrayKeywords={items:!0,allOf:!0,anyOf:!0,oneOf:!0},t.propsKeywords={$defs:!0,definitions:!0,properties:!0,patter
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 5d 2c 74 29 7d 7d 6e 26 26 28 72 2e 68 65 61 64 65 72 73 3d 73 29 7d 72 2e 71 75 65 72 79 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 66 3d 30 2c 68 3d 6f 2e 6c 65 6e 67 74 68 3b 66 3c 68 3b 2b 2b 66 29 7b 76 61 72 20 6d 3d 6f 5b 66 5d 2e 73 70 6c 69 74 28 22 40 22 29 3b 69 66 28 6d 5b 30 5d 3d 63 65 28 6d 5b 30 5d 29 2c 74 2e 75 6e 69 63 6f 64 65 53 75 70 70 6f 72 74 29 6d 5b 31 5d 3d 63 65 28 6d 5b 31 5d 2c 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 65 6c 73 65 20 74 72 79 7b 6d 5b 31 5d 3d 55 2e 74 6f 41 53 43 49 49 28 63 65 28 6d 5b 31 5d 2c 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 2e 65 72 72 6f 72 3d 72 2e 65 72 72 6f 72 7c 7c 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 27 73 20 64 6f 6d 61 69 6e Data Ascii: ],t)}}n&&(r.headers=s)}r.query=void 0;for(var f=0,h=o.length;f<h;++f){var m=o[f].split("@");if(m[0]=ce(m[0]),t.unicodeSupport)m[1]=ce(m[1],t).toLowerCase();else try{m[1]=U.toASCII(ce(m[1],t).toLowerCase())}catch(e){r.error=r.error\|\|"Email address's domain
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 28 5c 2e 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 29 7b 33 7d 29 29 7c 3a 29 29 7c 28 28 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 3a 29 7b 31 7d 28 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 31 2c 36 7d 29 7c 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 30 2c 34 7d 3a 28 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 28 5c 2e 28 32 35 5b 30 2d 35 5d 7c 32 5b 30 2d 34 5d 5c 64 7c 31 5c 64 5c 64 7c 5b 31 2d 39 5d 3f 5c 64 29 29 7b 33 7d 29 29 7c 3a 29 29 7c 28 3a 28 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 7b 31 2c 37 7d 29 7c 28 28 3a 5b 30 2d 39 61 2d 66 5d 7b 31 2c 34 7d 29 Data Ascii: 1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(([0-9a-f]{1,4}:){1}(((:[0-9a-f]{1,4}){1,6})\|((:[0-9a-f]{1,4}){0,4}:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(:(((:[0-9a-f]{1,4}){1,7})\|((:[0-9a-f]{1,4})
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 5f 43 6f 64 65 26 26 6e 2e 5f 69 74 65 6d 73 2e 73 6f 6d 65 28 28 65 3d 3e 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 4e 61 6d 65 26 26 31 3d 3d 3d 74 5b 65 2e 73 74 72 5d 26 26 76 6f 69 64 20 30 21 3d 3d 72 5b 65 2e 73 74 72 5d 29 29 3f 6e 65 77 20 6f 2e 5f 43 6f 64 65 28 65 2e 5f 69 74 65 6d 73 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 4e 61 6d 65 26 26 28 74 3d 73 28 74 29 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 5f 43 6f 64 65 3f 65 2e 70 75 73 68 28 2e 2e 2e 74 2e 5f 69 74 65 6d 73 29 3a 65 2e 70 75 73 68 28 74 29 2c 65 29 29 2c 5b 5d 29 29 3a 65 3b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 63 6f 6e 73 74 20 6f 3d 72 5b 65 2e 73 74 72 5d 3b 72 65 74 75 72 6e 20 76 6f Data Ascii: _Code&&n._items.some((e=>e instanceof o.Name&&1===t[e.str]&&void 0!==r[e.str]))?new o._Code(e._items.reduce(((e,t)=>(t instanceof o.Name&&(t=s(t)),t instanceof o._Code?e.push(...t._items):e.push(t),e)),[])):e;var n;function s(e){const o=r[e.str];return vo
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 64 79 6e 61 6d 69 63 41 6e 63 68 6f 72 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 65 29 7b 69 66 28 63 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 63 6f 6e 73 74 20 72 3d 65 5b 74 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 26 26 72 2e 73 6f 6d 65 28 75 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 75 28 72 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 6c 65 74 20 74 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 72 20 69 6e 20 65 29 7b 69 66 28 22 24 72 65 66 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 31 2f 30 3b 69 66 28 74 2b 2b 2c 21 69 2e 68 61 73 28 72 29 26 26 28 22 6f Data Ascii: dynamicAnchor"]);function u(e){for(const t in e){if(c.has(t))return!0;const r=e[t];if(Array.isArray(r)&&r.some(u))return!0;if("object"==typeof r&&u(r))return!0}return!1}function d(e){let t=0;for(const r in e){if("$ref"===r)return 1/0;if(t++,!i.has(r)&&("o
2024-10-31 02:41:35 UTC	16384	IN	Data Raw: 69 6e 65 64 60 29 29 29 2c 74 2e 69 66 28 64 2e 5f 60 24 7b 65 2e 65 76 61 6c 75 61 74 65 64 7d 2e 64 79 6e 61 6d 69 63 49 74 65 6d 73 60 2c 28 28 29 3d 3e 74 2e 61 73 73 69 67 6e 28 64 2e 5f 60 24 7b 65 2e 65 76 61 6c 75 61 74 65 64 7d 2e 69 74 65 6d 73 60 2c 64 2e 5f 60 75 6e 64 65 66 69 6e 65 64 60 29 29 29 7d 28 65 29 2c 77 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 67 65 6e 3a 74 2c 73 63 68 65 6d 61 45 6e 76 3a 72 2c 76 61 6c 69 64 61 74 65 4e 61 6d 65 3a 6f 2c 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 3a 6e 2c 6f 70 74 73 3a 73 7d 3d 65 3b 72 2e 24 61 73 79 6e 63 3f 74 2e 69 66 28 64 2e 5f 60 24 7b 6c 2e 64 65 66 61 75 6c 74 2e 65 72 72 6f 72 73 7d 20 3d 3d 3d 20 30 60 2c 28 28 29 3d 3e 74 2e 72 65 74 75 72 6e 28 6c 2e 64 Data Ascii: ined`))),t.if(d._`${e.evaluated}.dynamicItems`,(()=>t.assign(d._`${e.evaluated}.items`,d._`undefined`)))}(e),w(e),function(e){const{gen:t,schemaEnv:r,validateName:o,ValidationError:n,opts:s}=e;r.$async?t.if(d._`${l.default.errors} === 0`,(()=>t.return(l.d
2024-10-31 02:41:36 UTC	16384	IN	Data Raw: 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 72 65 66 73 2c 65 29 2c 74 68 69 73 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 73 63 68 65 6d 61 73 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 41 6c 6c 53 63 68 65 6d 61 73 28 74 68 69 73 2e 72 65 66 73 29 2c 74 68 69 73 2e 5f 63 61 63 68 65 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 3b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 7b 63 6f 6e 73 74 20 74 3d 77 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 68 69 73 2e 5f 63 61 63 68 65 2e 64 65 6c 65 74 65 28 74 2e 73 63 Data Ascii: moveAllSchemas(this.refs,e),this;switch(typeof e){case"undefined":return this._removeAllSchemas(this.schemas),this._removeAllSchemas(this.refs),this._cache.clear(),this;case"string":{const t=w.call(this,e);return"object"==typeof t&&this._cache.delete(t.sc
2024-10-31 02:41:36 UTC	16384	IN	Data Raw: 73 63 68 65 6d 61 3a 72 2c 70 61 72 65 6e 74 53 63 68 65 6d 61 3a 73 2c 69 74 3a 61 7d 3d 65 3b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 61 6a 76 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 65 72 72 6f 72 22 29 3b 69 66 28 61 2e 6f 70 74 73 2e 64 69 73 63 72 69 6d 69 6e 61 74 6f 72 26 26 73 2e 64 69 73 63 72 69 6d 69 6e 61 74 6f 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 72 2c 63 3d 74 2e 6c 65 74 28 22 76 61 6c 69 64 22 2c 21 31 29 2c 75 3d 74 2e 6c 65 74 28 22 70 61 73 73 69 6e 67 22 2c 6e 75 6c 6c 29 2c 64 3d 74 2e 6e 61 6d 65 28 22 5f 76 61 6c 69 64 22 29 3b 65 2e 73 65 74 50 61 72 61 6d 73 28 7b 70 61 73 73 69 6e 67 3a 75 7d 29 2c 74 2e 62 6c 6f 63 6b 28 28 66 75 6e Data Ascii: schema:r,parentSchema:s,it:a}=e;if(!Array.isArray(r))throw new Error("ajv implementation error");if(a.opts.discriminator&&s.discriminator)return;const i=r,c=t.let("valid",!1),u=t.let("passing",null),d=t.name("_valid");e.setParams({passing:u}),t.block((fun
2024-10-31 02:41:36 UTC	16384	IN	Data Raw: 6e 67 74 68 20 24 7b 73 7d 20 24 7b 6e 7d 60 29 7d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 39 30 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 39 31 34 33 29 2c 6e 3d 72 28 32 34 39 33 29 2c 73 3d 72 28 31 35 38 29 2c 61 3d 7b 6b 65 79 77 6f 72 64 3a 5b 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 6d 69 6e 4c 65 6e 67 74 68 22 5d 2c 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 73 63 68 65 6d 61 54 79 70 65 3a 22 6e 75 6d 62 65 72 22 2c 24 64 61 74 61 3a 21 30 2c 65 72 72 6f 72 3a 7b 6d 65 73 73 61 67 65 28 7b 6b 65 79 77 6f 72 64 3a 65 2c 73 63 68 65 6d 61 Data Ascii: ngth ${s} ${n}`)}};t.default=n},905:(e,t,r)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});const o=r(9143),n=r(2493),s=r(158),a={keyword:["maxLength","minLength"],type:"string",schemaType:"number",$data:!0,error:{message({keyword:e,schema

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49838	142.250.185.68	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	499	OUT	GET /recaptcha/api.js?render=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:35 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 31 Oct 2024 02:41:35 GMT Date: Thu, 31 Oct 2024 02:41:35 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:35 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-31 02:41:35 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-31 02:41:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49839	142.250.185.68	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	1137	OUT	GET /pagead/1p-user-list/871543968/?random=1730342488859&cv=11&fst=1730340000000&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dsamckPcHhCS_tFXCSVKmC_ZvbVeNuQ&random=1790013140&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49847	142.250.185.68	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	1153	OUT	GET /pagead/1p-user-list/740117353/?random=1730342490526&cv=11&fst=1730340000000&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d09A78Bmqe4XZ7sVBCCm4p6s0qK5_0RNRDAgMAqXZeGPAm1e5&random=1325322971&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49837	142.250.74.194	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	1145	OUT	GET /pagead/viewthroughconversion/740117353/?random=1730342490526&cv=11&fst=1730342490526&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlvyOnLvwP83BXQiWFI40K9zv3dz4IaJdxrXFjRIYltQDh6psvQbGRF-AIt
2024-10-31 02:41:35 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 02:41:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:35 UTC	675	IN	Data Raw: 31 32 61 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12a4(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-31 02:41:35 UTC	1378	IN	Data Raw: 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 63 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 70 26 26 64 3d 3d 3d 22 65 73 36 22 3f 67 5b 63 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 64 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 74 2c 63 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 64 26 26 28 76 5b 63 5d 3d 3d 3d 76 6f 69 64 20 30 Data Ascii: r c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0
2024-10-31 02:41:35 UTC	1378	IN	Data Raw: 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 52 28 22 53 69 6c 6b 22 29 7d 3b 21 52 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 55 28 29 3b 55 28 29 3b 52 28 22 53 61 66 61 72 69 22 29 26 26 28 55 28 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 Data Ascii: dexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Edge"))\|\|R("Silk")};!R("Android")\|\|U();U();R("Safari")&&(U()\|\|(T()?0:R("Coast"))\|\|(T()?0:R("Opera"))\|\|(T()?0:R("Edge"
2024-10-31 02:41:35 UTC	1349	IN	Data Raw: 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b 30 5d 69 6e 20 59 7c 7c 74 79 70 65 6f 66 20 59 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 59 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 58 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 5a 3b 58 2e 6c 65 6e 67 74 68 26 26 28 5a 3d 58 2e 73 68 69 66 74 28 29 29 3b Data Ascii: con&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[0]in Y\|\|typeof Y.execScript=="undefined"\|\|Y.execScript("var "+X[0]); for(var Z;X.length&&(Z=X.shift());
2024-10-31 02:41:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49845	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	592	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	650	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8114 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRqlapGfp38V5tsYYHlaJq6T73gnSSo2ZIfN0TwkRvR0PNBvVoZD27XxIolPa%2BB%2FQmYLBZopc%2FemqNZAkHkECPIIy32YcZZzAPM%2FMlnTCMHwiKMz0qtqr0LUAqgizITt6JI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04975fd92e98f-DFW
2024-10-31 02:41:35 UTC	719	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 42 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 67 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 35 35 35 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 31 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 34 37 36 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 55 28 34 34 38 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 34 34 37 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 35 35 33 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 34 38 31 29 29 2f 37 2b 70 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,o,s,B){V=b,function(d,e,U,f,g){for(U=b,f=d();!![];)try{if(g=-parseInt(U(555))/1(-parseInt(U(518))/2)+parseInt(U(476))/3(parseInt(U(448))/4)+-parseInt(U(447))/5*(-parseInt(U(553))/6)+parseInt(U(481))/7+p
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 28 34 39 36 29 5d 28 6e 65 77 20 67 5b 28 61 30 28 34 39 39 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 35 34 30 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 35 35 30 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 35 35 36 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 35 35 34 29 5d 5b 61 30 28 34 35 38 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 35 35 30 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6d 28 67 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d 3d 4c 3d 3d 3d 27 73 27 26 26 21 67 5b 61 30 28 34 35 36 29 5d 28 44 5b 4b 5d 29 2c 61 Data Ascii: (496)](new g[(a0(499))](H)):function(N,a1,O){for(a1=a0,N[a1(540)](),O=0;O<N[a1(550)];N[O]===N[O+1]?N[a1(556)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(554)][a0(458)](I),J=0;J<H[a0(550)];K=H[J],L=m(g,D,K),I(L)?(M=L==='s'&&!g[a0(456)](D[K]),a
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 7c 4f 3c 3c 31 2e 34 32 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 30 37 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 35 35 31 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 4f 3c 3c 31 2e 32 39 7c 31 2e 31 35 26 54 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 30 37 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 35 33 35 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d 48 5b 4a 5d 2c 47 3d 30 3b 47 3c 4d 3b 4f Data Ascii: ++);}else{for(T=1,G=0;G<M;O=T\|O<<1.42,E-1==P?(P=0,N[aa(507)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(551)](0),G=0;16>G;O=O<<1.29\|1.15&T,P==E-1?(P=0,N[aa(507)](F(O)),O=0):P++,T>>=1,G++);}K--,0==K&&(K=Math[aa(535)](2,M),M++),delete I[J]}else for(T=H[J],G=0;G<M;O
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 33 35 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 33 35 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d Data Ascii: ,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(535)](2,8),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(535)](2,16),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 34 71 4b 74 39 53 76 6e 63 31 43 65 67 4a 4d 46 4e 6a 70 35 75 72 6d 69 41 59 73 44 61 52 58 79 5a 6c 57 66 6b 48 55 50 4f 56 24 51 42 2d 36 7a 78 54 32 37 77 64 47 62 4c 38 68 49 33 6f 2b 30 45 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 2c 73 6f 75 72 63 65 2c 69 73 4e 61 4e 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 62 69 6e 64 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 62 6f 6f 6c 65 61 6e 2c 63 61 6c 6c 2c 72 65 70 6c 61 63 65 2c 4b 67 55 71 49 35 2c 75 6e 64 65 66 69 6e 65 64 2c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 2c 31 33 32 33 33 35 33 30 45 73 64 64 50 50 2c 73 74 79 6c 65 2c 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 66 72 Data Ascii: 4qKt9Svnc1CegJMFNjp5urmiAYsDaRXyZlWfkHUPOV$QB-6zxT27wdGbL8hI3o+0E,removeChild,__CF$cv$params,source,isNaN,error on cf_chl_props,bind,chlApiRumWidgetAgeMs,appendChild,boolean,call,replace,KgUqI5,undefined,[native code],13233530EsddPP,style,contentWindow,fr
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 47 3d 28 46 3d 7b 7d 2c 46 5b 61 37 28 34 37 35 29 5d 3d 44 2c 46 5b 61 37 28 35 33 37 29 5d 3d 45 2c 46 29 3b 74 72 79 7b 69 66 28 48 3d 68 5b 61 37 28 34 35 34 29 5d 2c 49 3d 61 37 28 35 31 30 29 2b 68 5b 61 37 28 35 32 30 29 5d 5b 61 37 28 35 31 32 29 5d 2b 61 37 28 35 32 36 29 2b 31 2b 61 37 28 34 37 37 29 2b 48 2e 72 2b 61 37 28 34 37 34 29 2c 4a 3d 6e 65 77 20 68 5b 28 61 37 28 35 34 35 29 29 5d 28 29 2c 21 4a 29 72 65 74 75 72 6e 3b 4b 3d 61 37 28 34 37 32 29 2c 4c 3d 7b 7d 2c 4c 5b 61 37 28 34 37 38 29 5d 3d 68 5b 61 37 28 35 32 30 29 5d 5b 61 37 28 34 37 38 29 5d 2c 4c 5b 61 37 28 35 33 33 29 5d 3d 68 5b 61 37 28 35 32 30 29 5d 5b 61 37 28 35 33 33 29 5d 2c 4c 5b 61 37 28 34 35 39 29 5d 3d 68 5b 61 Data Ascii: (.01))return![];G=(F={},F[a7(475)]=D,F[a7(537)]=E,F);try{if(H=h[a7(454)],I=a7(510)+h[a7(520)][a7(512)]+a7(526)+1+a7(477)+H.r+a7(474),J=new h[(a7(545))](),!J)return;K=a7(472),L={},L[a7(478)]=h[a7(520)][a7(478)],L[a7(533)]=h[a7(520)][a7(533)],L[a7(459)]=h[a
2024-10-31 02:41:35 UTC	550	IN	Data Raw: 35 31 36 29 2c 66 29 3a 28 67 3d 69 5b 61 65 28 34 37 39 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b 61 65 28 34 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 61 67 3d 61 65 2c 67 28 29 2c 69 5b 61 67 28 35 34 33 29 5d 21 3d 3d 61 67 28 35 31 37 29 26 26 28 69 5b 61 67 28 34 37 39 29 5d 3d 67 2c 66 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 35 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 28 61 35 3d 56 2c 64 3d 68 5b 61 35 28 34 35 34 29 5d 2c 65 3d 33 36 30 30 2c 64 2e 74 29 26 26 28 66 3d 4d 61 74 68 5b 61 35 28 35 30 35 29 5d 28 2b 61 74 6f 62 28 64 2e 74 29 29 2c 67 3d 4d 61 74 68 5b 61 35 28 35 30 35 29 5d 28 44 61 74 65 5b 61 35 28 35 32 39 29 5d 28 29 2f 31 65 33 29 2c 67 2d 66 3e 65 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 Data Ascii: 516),f):(g=i[ae(479)]\|\|function(){},i[ae(479)]=function(ag){ag=ae,g(),i[ag(543)]!==ag(517)&&(i[ag(479)]=g,f())})}function y(a5,d,e,f,g){if((a5=V,d=h[a5(454)],e=3600,d.t)&&(f=Math[a5(505)](+atob(d.t)),g=Math[a5(505)](Date[a5(529)]()/1e3),g-f>e))return![];r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49857	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	535	OUT	GET /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	863	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 02:41:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342495&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DURGQaUze7apP%2BuW8M8H%2BQ2brLBCiQwRswQvo%2F4uwKw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342495&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=DURGQaUze7apP%2BuW8M8H%2BQ2brLBCiQwRswQvo%2F4uwKw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:35 UTC	1531	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 31 35 36 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 Data Ascii: 156a<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><met
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 70 61 72 69 64 65 20 68 65 6c 70 73 20 79 6f 75 20 70 6c 61 6e 20 61 6e 64 20 62 6f 6f 6b 20 79 6f 75 72 20 6e 65 78 74 20 65 73 63 61 70 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 53 74 6f 72 79 74 65 6c 6c 65 72 20 74 72 61 76 65 6c 20 67 75 69 64 65 73 2e 20 54 68 65 73 65 20 67 75 69 64 65 73 2c 20 63 61 6c 6c 65 64 20 52 69 70 61 72 69 64 65 20 53 74 6f 72 69 65 73 2c 20 63 6f 6d 65 20 70 61 63 6b 65 64 20 77 69 74 68 20 75 6e 69 71 75 65 20 73 74 61 79 73 2c 20 6c 6f 63 61 6c 20 61 64 76 65 6e 74 75 72 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 20 76 69 62 65 73 2e 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 6f 6e 74 Data Ascii: paride helps you plan and book your next escape through our Storyteller travel guides. These guides, called Riparide Stories, come packed with unique stays, local adventures and social vibes...." name="description" /><link rel="preload" href="/assets/font
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 69 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 20 74 72 75 65 2c 0a 20 20 70 61 79 6c 6f 61 64 Data Ascii: ipt defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, captureUnhandledRejections: true, payload
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 72 6e 20 72 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6f 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6f 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 65 29 7d 2c 6f 2e 70 3d 22 22 2c 6f 28 6f 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: rn r[e]}.bind(null,t));return n},o.n=function(r){var e=r&&r.__esModule?function(){return r.default}:function(){return r};return o.d(e,"a",e),e},o.o=function(r,e){return Object.prototype.hasOwnProperty.call(r,e)},o.p="",o(o.s=0)}([function(r,e,o){"use stri
2024-10-31 02:41:35 UTC	14	IN	Data Raw: 21 31 2c 69 3d 65 2e 63 72 65 61 74 0d 0a Data Ascii: !1,i=e.creat
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 31 37 32 61 0d 0a 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 73 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 64 3d 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 22 2c 69 2e 73 72 63 3d 6e 2e 72 6f 6c 6c 62 61 72 4a 73 55 72 6c 2c 6f 7c 7c 28 69 2e 61 73 79 6e 63 3d 21 30 29 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 6c 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 Data Ascii: 172aeElement("script"),s=e.getElementsByTagName("script")[0],d=s.parentNode;i.crossOrigin="",i.src=n.rollbarJsUrl,o\|\|(i.async=!0),i.onload=i.onreadystatechange=a((function(){if(!(l\|\|this.readyState&&"loaded"!==this.readyState&&"complete"!==this.readySta
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 6c 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 2c 63 61 70 74 75 72 65 45 76 65 6e 74 2c 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 70 74 75 72 65 4c 6f 61 64 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 30 3b 66 3c 70 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 69 2e 70 72 6f 74 6f 74 79 70 65 5b 70 5b 66 5d 5d 3d 75 28 70 5b 66 5d 29 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 53 68 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 72 29 7b 76 61 72 20 6f 3d 65 2e 67 6c 6f 62 61 6c 41 6c 69 61 73 7c 7c 22 52 6f 6c 6c 62 61 72 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 3b 72 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 3d 7b 7d 2c Data Ascii: leUnhandledRejection,captureEvent,captureDomContentLoaded,captureLoad".split(","),f=0;f<p.length;++f)i.prototype[p[f]]=u(p[f]);r.exports={setupShim:function(r,e){if(r){var o=e.globalAlias\|\|"Rollbar";if("object"==typeof r[o])return r[o];r._rollbarShims={},
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 45 72 72 6f 72 73 28 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 6e 28 72 2c 65 2c 74 2c 6f 29 7d 3b 6f 26 26 28 61 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f 6e 45 72 72 6f 72 3d 74 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 61 7d 7d 2c 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 26 26 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 26 26 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 Data Ascii: Errors();var a=function(){var o=Array.prototype.slice.call(arguments,0);n(r,e,t,o)};o&&(a._rollbarOldOnError=t),r.onerror=a}},captureUnhandledRejections:function(r,e,o){if(r){"function"==typeof r._rollbarURH&&r._rollbarURH.belongsToShim&&r.removeEventList
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 63 65 2c 46 69 6c 65 52 65 61 64 65 72 2c 48 54 4d 4c 55 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 2c 49 44 42 44 61 74 61 62 61 73 65 2c 49 44 42 52 65 71 75 65 73 74 2c 49 44 42 54 72 61 6e 73 61 63 74 69 6f 6e 2c 4b 65 79 4f 70 65 72 61 74 69 6f 6e 2c 4d 65 64 69 61 43 6f 6e 74 72 6f 6c 6c 65 72 2c 4d 65 73 73 61 67 65 50 6f 72 74 2c 4d 6f 64 61 6c 57 69 6e 64 6f 77 2c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 53 56 47 45 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 2c 53 63 72 65 65 6e 2c 54 65 78 74 54 72 61 63 6b 2c 54 65 78 74 54 72 61 63 6b 43 75 65 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 2c 57 65 62 53 6f 63 6b 65 74 2c 57 65 62 53 6f 63 6b 65 74 57 6f 72 6b 65 72 2c 57 6f 72 6b 65 72 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 58 4d 4c 48 74 74 70 Data Ascii: ce,FileReader,HTMLUnknownElement,IDBDatabase,IDBRequest,IDBTransaction,KeyOperation,MediaController,MessagePort,ModalWindow,Notification,SVGElementInstance,Screen,TextTrack,TextTrackCue,TextTrackList,WebSocket,WebSocketWorker,Worker,XMLHttpRequest,XMLHttp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49848	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	585	OUT	GET /next-integrations/integrations/amplitude/3.3.3/amplitude.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:36 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3181 Connection: close Date: Thu, 31 Oct 2024 02:41:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "41d391d5b119fb8c4fe6edd0c6fc1d21" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: dPEAOL7ExjtccGMMvRthKStk2d2FNhP0 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1277de71b2472d19ca0bfc510db9ec54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: SJ_Ba5tDEV6PC_RIPKgFq3oRWu_JFmMEFvrvagkX_g-5NGCiKMvCpQ==
2024-10-31 02:41:36 UTC	3181	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 5a fb 73 db 36 12 fe fd fe 0a 99 77 a3 90 17 84 7e 24 6d af 52 d8 4c 26 bd a6 ee e5 e1 24 76 3b 37 1a 8d 07 26 61 19 29 05 d0 00 68 47 95 f9 bf df 2e 00 3e 25 c5 6e 6f 26 63 91 78 2e 76 17 df 7e bb cc 2d 17 99 bc 9d 3d a2 cb 22 e7 a6 cc d8 8f ac d0 8f e6 a3 64 34 0b f6 b9 30 6c a1 a8 e1 52 e8 fd 1b 06 23 d5 7e 2a 97 4b 78 8d e9 b7 87 d9 77 17 8c 3e fd 2e 3b ca d8 37 d9 b3 8b 6f bf 8f 3f eb 60 3e bd 1d 2e f9 46 d2 8c 29 bb e8 65 29 52 5c 2e 8c 46 eb 91 62 a6 54 62 e4 c6 c7 cd f0 e3 76 d7 a4 19 cf a2 75 fd 3c 32 a1 81 37 a9 c2 1b aa 46 8a 68 42 13 33 3b 98 93 02 7e 0e e7 a4 84 9f a3 39 49 93 03 92 27 b3 f9 34 7d 4e e3 9c 89 85 b9 9a a6 8f 1f 47 3a a1 b3 74 4e de 5f 7c 66 a9 89 0b 25 8d 34 ab 82 c5 57 54 bf bf 15 27 4a 16 4c Data Ascii: Zs6w~$mRL&$v;7&a)hG.>%no&cx.v~-="d40lR#~*Kxw>.;7o?`>.F)e)R\.FbTbvu<27FhB3;~9I'4}NG:tN_\|f%4WT'JL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49855	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	392	OUT	GET /next-integrations/actions/845/449cd4534726259c2a8c.js HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:36 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28277 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 22 Oct 2024 11:56:11 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: dJSBuCPSj5P4WvkiUufPg1lklIhA8uEz Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 02:42:22 GMT ETag: "4e4e40c0ccc652a7cc4cef7c2146c1f5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 78059242182c195ff7f26013772da09a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 1XpQ32-o7v1JNpMzhJcIjChQxy-BTUxKvOl-nqer0_vo1SsS1BywSA== Age: 86354
2024-10-31 02:41:36 UTC	15697	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 35 5d 2c 7b 31 32 39 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 72 28 36 31 35 30 29 2c 6f 3d 72 28 36 30 38 36 29 3b 63 6c 61 73 73 20 61 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 69 6e 70 75 74 20 74 6f 20 62 65 20 61 6e 20 41 72 72 61 79 2c 20 67 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 Data Ascii: (self.webpackChunkDestination=self.webpackChunkDestination\|\|[]).push([[845],{1291:(e,t,r)=>{"use strict";const n=r(6150),o=r(6086);class a extends Error{constructor(e){if(!Array.isArray(e))throw new TypeError("Expected input to be an Array, got "+typeof e
2024-10-31 02:41:36 UTC	12580	IN	Data Raw: 6f 73 69 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 7d 7d 63 6f 6e 73 74 20 67 3d 22 2d 31 22 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 22 5c 72 22 3d 3d 3d 65 7c 7c 22 5c 6e 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 22 20 22 3d 3d 3d 65 7c 7c 22 5c 74 22 3d 3d 3d 65 7c 7c 22 5c 6e 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 6d 61 74 63 68 28 2f 5b 61 2d 7a 5d 2f 69 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 67 26 26 28 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 26 26 69 73 46 69 6e 69 74 65 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 29 7d 66 75 6e 63 74 Data Ascii: osition(){return this.position}}const g="-1";function w(e){return"\r"===e\|\|"\n"===e}function b(e){return" "===e\|\|"\t"===e\|\|"\n"===e}function E(e){return!!e.match(/[a-z]/i)}function x(e){return e!==g&&(!isNaN(parseFloat(e))&&isFinite(parseInt(e,10)))}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49858	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	581	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8db04915592c4756 HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	500	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 31 Oct 2024 02:41:35 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hmhGv%2BwVx7XPBCDzpTqlgboxxsp02%2FqHr0UOWUzu4SBZHDAFA2mXeDoULxQPEdEmNLsquF7HbYFjpMCiJGzVJPkB8mIsWks9B%2BgDUhCxSAJIWHg%2FX9IamlXIIVl7NboKfeI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04976ce7a6b79-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49859	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	447	OUT	GET /photo/420571/image/medium-912d8fc4a4929952c4df709665c834b1.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:35 UTC	1075	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:35 GMT Content-Type: image/jpeg Content-Length: 135408 Connection: close Cache-Control: public, max-age=864000 Cf-Bgj: h2pri Content-Disposition: inline; filename="image_processing20230319-2-7u5w4y.jpg"; filename*=UTF-8''image_processing20230319-2-7u5w4y.jpg ETag: "ee8bdde00db2e8d972bdb328125d0d23" Last-Modified: Sun, 19 Mar 2023 03:16:43 GMT x-amz-id-2: dxjtpORg7uOtIwBCY+6mDNmlTlxHN+8aJl9j00FKX5DZQhNOyKu8Qq41+AaqZnMmzuG/I46sble4uV/md3Nd/4+6dQ9YrWKq3pQf3EwHaMU= x-amz-request-id: 65K8QHADA3X9BW6A x-amz-server-side-encryption: AES256 x-amz-version-id: i_u2mMksDxqFRldbzqGVF0T5fdu9KROl CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jzc3xQ083lZrybAG9hpku9NTkWV23Ejtnod37qc3jBLXmzuBUJP17ug9GaT8HdvDAWkCKypAmsdP8p3RAxVdungfvHHDNccIlTd8wmQ6lHWlqGVwonRbcTx9nQUHohVGeb2MqYc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db049774d656b3c-DFW
2024-10-31 02:41:35 UTC	294	IN	Data Raw: ff d8 ff e1 47 f8 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 37 3a 34 31 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: GExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:37:41DANIELLE NIEUWENDYK
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 03 00 01 00 00 00 fa 00 00 00 00 90 07 00 04 00 00 00 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 34 37 00 00 92 92 02 00 03 00 00 00 34 37 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 6c 02 00 00 03 a0 04 00 01 00 00 00 d3 01 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 00 00 00 00 00 02 a4 03 00 01 Data Ascii: 0231L`t\|47470100l
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 83 bf 2a ab 0d b6 a0 c8 91 6c 79 a5 57 4b 39 61 73 29 ab 4d f1 02 4f c5 b7 8f 4c 98 ee 4a ac 71 dc 48 39 33 92 05 18 8d ce c0 52 bf 46 02 42 ab 35 dd cd b4 82 39 52 17 41 55 64 01 58 10 77 35 23 c3 b6 0a 05 69 03 c2 2e 5b 92 01 3f 70 ed d7 26 95 68 ad 59 5c 29 1d 7f 6e b4 05 7b d2 a3 05 a4 26 5e ac 8d 67 54 8d 16 d6 a1 28 14 72 2d 4e b5 fb 5d 32 2c ad 01 24 a0 2a 33 29 29 bf a7 ca 84 80 0d 29 5a 6f 92 62 5a 64 f5 21 69 79 77 3b 9e a4 f6 f6 c5 51 36 96 17 2d 04 f7 22 86 08 45 1a b4 de a2 94 1f 2c 04 ab 35 f2 f4 6a ba 62 d2 06 63 04 62 79 04 7f 11 af 2d 8d 07 c4 cd e0 07 f2 e4 09 54 be e2 4d 3a 7b d8 56 08 de 64 8d 00 92 39 d2 8c 1b 96 e8 28 7e 25 a1 a9 65 e5 c5 b0 13 4d 91 08 9f 30 dd bc 6a 23 b3 8d a1 a4 60 44 12 bf 00 00 02 b5 3c 97 ad 72 30 67 34 9d 65 Data Ascii: lyWK9as)MOLJqH93RFB59RAUdXw5#i.[?p&hY\)n{&^gT(r-N]2,$3)))ZobZd!iyw;Q6-"E,5jbcby-TM:{Vd9(~%eM0j#`D<r0g4e
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: ac 80 ed 40 68 77 c0 4a d2 2e 2d 12 59 82 48 bb 44 d5 5e 54 e8 c0 56 94 c0 64 91 15 5b 6d 1e 48 6f 15 65 43 5e a9 ef e3 91 33 d9 90 82 6f 71 a7 5a 43 7b 04 44 45 23 35 24 60 59 54 05 0b 52 0d 69 d0 ff 00 c1 60 21 20 ab c7 69 a2 c5 25 d5 c4 53 c7 1d cb a0 48 63 f8 79 09 d8 fc 45 7a f1 f8 7e 2f f6 58 ee bb 25 de 60 6b 50 c5 e0 56 75 50 14 5d d4 90 64 a1 6e 3b 8d 8f d9 ef 92 8d b1 2c 6e 48 6e 0a f2 91 59 01 de a4 50 1a 9c b2 d8 52 81 52 bb 1e b8 aa 26 da 38 11 5e 69 77 29 b2 c6 db 06 27 c0 fb 60 25 53 5b 5b 8e 72 15 8d 80 25 f9 7b 0a 0d 87 cb 05 28 65 29 a8 59 e8 ba 7c 32 59 46 a3 55 48 c7 a6 ac 8a c0 83 f6 9d ab de 9e 3f b5 90 3c d9 85 fa 26 ab 7d 77 7b 26 af 74 77 b3 54 76 20 70 2c 64 24 04 a0 a7 d9 ca f2 90 28 77 96 ec 40 9b 3f cd 0c e3 52 f3 56 b7 a4 2a Data Ascii: @hwJ.-YHD^TVd[mHoeC^3oqZC{DE#5$`YTRi`! i%SHcyEz~/X%`kPVuP]dn;,nHnYPRR&8^iw)'`%S[[r%{(e)Y\|2YFUH?<&}w{&twTv p,d$(w@?RV*
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: e4 37 c2 84 2d cf 95 ef 25 79 2e b5 6b d6 33 c7 5f ab b0 40 01 00 50 fc 4b d2 94 e8 70 5a 40 44 59 ea 50 41 63 21 9e 6e 76 ca c2 38 94 ad 00 8a 40 1e a1 c9 e3 5e 5f ec b0 25 2e b9 d4 74 e4 96 48 96 45 97 a1 4f 4b e3 ad 40 34 a8 af 2c 09 51 b8 d5 de 3d 3e 5d 3f d4 2f 6b 75 41 22 83 52 8a 4f 2a a0 3f b6 4f 4c 20 b1 31 51 b4 bb b5 d3 d8 7d 5e da 79 ee 26 21 a0 47 8e 8c 78 91 5a 6c 7f d9 60 20 b3 1b 22 65 d4 05 9c b7 4f aa db cf 00 ba 95 64 89 07 1e 49 55 dc 32 82 68 bb 54 63 c2 4f 25 b0 39 a1 25 6b 3d 46 27 4b 68 16 eb 8d 64 7e 5c 97 e1 1b f5 03 97 dd 8d 10 b6 0a 61 0e 8d 70 fa 7d b5 c5 85 b3 cb 3d ba 06 b7 68 e3 02 95 1d 0b 30 e2 76 6f 8b 96 46 e9 24 5a 16 ee fe e1 d9 6c a7 9e 2b 35 4e 30 4f 1d 79 5c b3 00 3b 02 55 7b 6f cb 24 18 90 9b 79 7f 40 9e 16 b9 d5 Data Ascii: 7-%y.k3_@PKpZ@DYPAc!nv8@^_%.tHEOK@4,Q=>]?/kuA"RO*?OL 1Q}^y&!GxZl` "eOdIU2hTcO%9%k=F'Khd~\ap}=h0voF$Zl+5N0Oy\;U{o$y@
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: b9 54 b1 9b d9 b4 64 15 76 c6 7c db e7 8f d3 56 95 86 49 63 9f 93 14 a2 95 28 a4 d3 8f 3e eb c7 2c 8c 29 ae 53 b4 86 cb 55 6b 58 b8 a5 ba 11 35 39 82 ec 6a 53 a9 2a 0f 7c 98 60 57 5e eb 8b 32 c8 9f 54 0a 1d 40 09 c8 95 af ed 13 b0 fa 06 15 54 d0 75 75 82 da 5b 7b 89 c0 1d 61 8e 45 6e 05 bd d9 4d 57 fe 07 02 a0 ae d5 19 67 9e 52 dc ce c5 ea 8d 11 7e ca bc 7a ff 00 9f 2c 09 40 47 2c 8a ac 11 d5 79 8e 2c 08 ed f7 61 21 8a 75 e5 e9 ac ed 2f c5 d4 ad fb e5 8f 8c 21 59 42 87 a8 a3 13 b9 fc 32 26 d9 00 c8 f4 ab 4b 8b 88 ad 12 67 76 63 57 95 8e ec 56 95 e4 7b d3 2b 97 52 db 03 c8 75 4c 3c be f0 d9 69 e2 f6 9c 60 59 8c af 18 3f 0b 18 4f c3 50 7e 12 19 94 64 66 7d 40 32 80 f4 92 c5 22 d4 1a 6d 51 12 4f ee de 42 5c 0d 85 5b 76 cb 40 6a 25 35 b6 f5 db 58 fd fb f2 b3 Data Ascii: Tdv\|VIc(>,)SUkX59jS*\|`W^2T@Tuu[{aEnMWgR~z,@G,y,a!u/!YB2&KgvcWV{+RuL<i`Y?OP~df}@2"mQOB\[v@j%5X
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: 51 a9 4c 93 a2 1a 11 2a 1a 87 ad 5b e5 5a 92 29 86 d8 da 93 7f a4 c2 de b3 34 8d d3 e2 62 c3 e9 e4 70 5a 2c a0 24 b5 5a 03 c7 e1 f0 ed 86 d1 6b 4c 2b 4a 50 50 f6 c1 69 05 a1 0a af d9 01 46 1b 45 af 0b b7 f5 c1 68 6c 0d f7 c5 36 db 28 a0 a7 6c 0b 6d 01 be 2a de c0 f7 a6 2b 6b 58 56 b8 aa d0 bf 7e 15 5a cb 8a 54 8a 62 ab 0a 77 c2 ab 59 45 31 55 27 4d ab 85 29 af 97 ee 15 20 bb b7 70 a6 23 c2 79 14 b7 16 65 43 42 a9 d9 9f e2 ad 30 48 32 89 55 bc 32 dd 5c db da c0 39 96 a1 8d 7b 1a f4 27 fd 88 c8 00 cc 97 a0 36 ab 34 b6 56 9e ae 9f 0a 45 02 86 91 97 d4 a2 3a af d9 3c 96 87 7e 3f 0d 72 47 66 3c d0 7e 5f f2 b8 f3 9f 98 5a 0f 56 4f 42 15 f5 6f ae 54 83 41 5f d8 34 3c ab 4a 32 d7 e1 c6 31 d9 13 93 e8 71 69 e5 dd 2f 49 67 9a bf 56 b6 0b 44 56 35 67 0a 14 73 0b fd Data Ascii: QL[Z)4bpZ,$ZkL+JPPiFEhl6(lm+kXV~ZTbwYE1U'M) p#yeCB0H2U2\9{'64VE:<~?rGf<~_ZVOBoTA_4<J21qi/IgVDV5gs
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: b7 c1 5f e6 5e 3c b0 a0 9e e4 c2 78 bf 37 6e 6e 25 b4 9e e6 15 b9 58 fd 54 8d d9 9a 39 39 fd 81 45 58 d5 77 ed cf ec ff 00 c1 61 d9 1b b3 7d 2b c8 b1 5b 69 8a 2f 2e 0a 6a 12 fe f1 ae 63 fe f1 1f 73 b7 5f 85 2b f0 a9 f8 70 19 32 11 4c 2c f4 d4 d3 dd 55 ef 9a ee 9f 61 1c 0e bf cc 49 15 e5 f2 6c 16 90 11 17 36 7a 8d c7 ef ac d6 3e 64 fe e8 4a 4e db 6f 41 41 df 15 49 b5 ef 26 43 79 59 6f ad e2 9c 15 ac 95 15 7a af 75 7f b5 fe 7f 0e 10 54 86 1f 63 f9 79 a7 5e 0b b7 24 c3 68 64 6e 56 c9 2c ae 9c e8 28 c3 91 43 40 07 f2 b6 1b 60 03 ff d1 e1 33 69 d2 22 2b fa 49 0a 15 ab 84 93 d4 93 e6 ca c7 92 57 01 0c 38 91 30 43 6b 30 09 72 ff 00 57 45 0a 22 53 c9 9c 82 77 61 5a 22 6d bf c6 f1 a6 04 2c 78 60 49 4a 29 69 23 52 7f 78 0a b0 61 5a 57 f9 45 3e 79 12 13 68 88 96 d4 Data Ascii: _^<x7nn%XT99EXwa}+[i/.jcs_+p2L,UaIl6z>dJNoAAI&CyYozuTcy^$hdnV,(C@`3i"+IW80Ck0rWE"SwaZ"m,x`IJ)i#RxaZWE>yh
2024-10-31 02:41:35 UTC	1369	IN	Data Raw: ca 61 d3 5f 9d 95 41 10 98 62 46 8c aa 8f b6 fc 54 72 d9 ba 72 5c 7d cb 6b 44 6e 90 ad c4 ac 1e 54 3c 22 56 a3 24 80 a9 25 59 53 f7 9b 93 fe ae 34 a1 7d b6 9b 79 2b a4 36 f6 d0 ac d3 2b ca dc c3 46 81 3b d2 84 b0 45 1b ef c5 7f 97 04 8d 06 50 8f 11 a6 7d e5 bd 2b 46 d2 6e 3f 45 6a 71 2d 8e aa 68 4d e5 6b 0c aa dd 83 31 e4 9d 68 1a bf cb cb 30 a7 22 77 76 b8 e1 10 2a 91 fa d5 a4 11 3b e9 7a d4 71 cb 1b c3 2c b6 ba 84 48 a2 7a 74 45 a2 0e 6d 25 68 9f 03 b7 a9 fc b8 c3 29 12 08 cb 84 4a 25 e6 97 f3 c7 13 a3 47 a4 2c 12 a5 69 2c c1 a6 46 24 d4 86 f5 15 2a 57 f9 ab 99 c5 d4 a0 ec 3f 48 4f 2f d6 52 26 78 d6 40 c5 95 68 53 6a 72 5d c6 c0 7b b6 22 d2 69 3e b7 f2 96 b9 aa 23 bf d4 96 05 94 82 2e ee 5c 7a 8c 40 02 a1 37 25 7e 79 09 65 88 6d 86 9e 72 dd 7d e7 e5 96 Data Ascii: a_AbFTrr\}kDnT<"V$%YS4}y+6+F;EP}+Fn?Ejq-hMk1h0"wv;zq,HztEm%h)J%G,i,F$W?HO/R&x@hSjr]{"i>#.\z@7%~yemr}
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: ec 0b 33 2a 0a d3 6f b4 dc b0 92 c4 05 6b bf 33 35 cc 62 c2 f1 e0 74 84 71 41 21 92 29 2b 20 e2 24 f4 cd 53 e9 fd 96 c1 c4 9e 02 94 43 e4 79 f5 4b 2b 8f ab c6 cb 6e cc 2b 3b 81 5e 6a bf b2 54 00 cd d6 a7 e1 e5 80 c8 32 8c 4a 0f 52 fc b9 9e 07 59 10 bc a9 b0 f9 1f 70 06 45 97 24 c3 f2 ef ca 96 ed 0d fd f4 ca d5 59 04 31 33 76 e0 c6 a4 11 ee 32 32 95 26 31 b6 4d 7f e5 4d 32 fe 54 37 0b 23 98 be c9 e4 53 73 fe ad 2b 8d a7 85 83 f9 cb cb 57 fa 78 f5 d6 76 b9 b0 dc 20 24 f3 88 13 f6 59 81 e5 c2 bd 2b 89 91 a5 11 0c 63 d2 e5 2c 73 24 d3 c7 2a 00 01 32 13 4a 74 a3 0f 88 6f 95 f8 ad a3 08 21 ff d4 80 c5 65 a4 4d 21 b0 16 57 10 ca 79 4b 04 b6 be 8d ca dc c8 bb 86 52 03 c8 cd db 91 f4 e3 c3 4d 2a f2 a5 8b 88 a6 ba e6 65 8c 32 ad ba 3c 7f 13 d3 75 08 56 8e f4 fb 46 Data Ascii: 3ok35btqA!)+ $SCyK+n+;^jT2JRYpE$Y13v22&1MM2T7#Ss+Wxv $Y+c,s$2Jto!eM!WyKRM*e2<uVF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49856	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:35 UTC	447	OUT	GET /photo/420572/image/medium-ebcdf96c54690bcd5e78702c61a2d484.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:36 UTC	1081	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:36 GMT Content-Type: image/jpeg Content-Length: 138160 Connection: close Cache-Control: public, max-age=864000 Cf-Bgj: h2pri Content-Disposition: inline; filename="image_processing20230319-2-gahkl5.jpg"; filename*=UTF-8''image_processing20230319-2-gahkl5.jpg ETag: "43619d499e13545739a706bc88f43f33" Last-Modified: Sun, 19 Mar 2023 03:16:43 GMT x-amz-id-2: QGL+fhXAybS+U2ae8iHShlFAsjS8oNFLpW2cILZV5eW9T6DRjP691gc8OSu0x1kuHQzRgNILl+Tvw+iy7zCr7Xoj65FqwjHomJa5lvKYKgM= x-amz-request-id: 65K5YG1GHSQ8X2RX x-amz-server-side-encryption: AES256 x-amz-version-id: ep_K_wMQGOad25gw2CNoO_EW4bQiL9Y. CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pKRd3ZW72gRWgS1XRi3Gz5BWB47cpsFo6rckiLc3KOGwfNSKCIGP%2FSquilXBJEZU6rZWcNushQR4rbjgPdLJxA8fZ2B29Bmi%2FNFX65JxBFb3mANA8CKRG9xp%2F95rEpQwiHFiS54%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db049784b684660-DFW
2024-10-31 02:41:36 UTC	288	IN	Data Raw: ff d8 ff e1 4f be 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 36 3a 30 35 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: OExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:36:05DANIELLE NIEUWENDYK
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 03 00 00 00 27 88 03 00 01 00 00 00 90 01 00 00 00 90 07 00 04 00 00 00 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 37 34 00 00 92 92 02 00 03 00 00 00 37 34 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 6c 02 00 00 03 a0 04 00 01 00 00 00 d3 01 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 00 00 00 00 Data Ascii: '0231L`t\|74740100l
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: bc 6e 82 45 9b 98 e0 ea 92 06 59 b8 ef fb bf f8 2f 87 12 98 9a 4f b5 6f 3d 6b 16 f7 da a6 9e cf 34 fa 5d f4 eb 71 2d a6 af 1a cb 3a b1 1c b9 aa fd 98 9d d4 f2 fd da af 1f 87 8f d9 c4 05 ba 29 74 be 5c f5 6f 2e 2d 74 ee 3a 9d ec a9 14 f6 f0 d8 3b 4e 22 f5 da bc 39 50 f3 f4 81 45 95 9b 87 06 ff 00 65 85 6b b9 6c 1e 59 bb 6d 66 0b 0d 5d 26 d3 ee 6e 44 c6 e0 cb 0b 27 a4 50 1e 2e 54 84 56 8d 88 1f 12 b7 0f e6 7c 16 b5 ba 8d f7 96 ef ec 34 f8 b5 59 47 fb 8f b8 b8 96 de d6 e8 50 72 68 6b 5e 4a 09 f4 c9 1f 10 df f9 b0 5d a0 86 47 e7 0f 2c 6b 36 1a 17 92 74 3b 98 e4 5d 4f 53 8a 5b cb 7b 59 18 fc 09 7d 38 5b 75 e1 fb 0e f5 2c fb 72 fb 3f cb 84 06 44 72 0f b8 f4 2d 37 cb 7f 96 ff 00 97 b6 f6 b2 3c 76 5a 46 87 69 ca ea 73 b0 2c a3 94 b2 35 3e d3 c9 21 66 ff 00 29 9b Data Ascii: nEY/Oo=k4]q-:)t\o.-t:;N"9PEeklYmf]&nD'P.TV\|4YGPrhk^J]G,k6t;]OS[{Y}8[u,r?Dr-7<vZFis,5>!f)
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: fc cd a8 c9 e5 bf 25 23 2c 9a 3e 8d 6a 03 5c 4f c2 85 6e 25 77 1c 5b 93 0e 48 ce 8d cb ed 22 7e db 49 6c 73 2f 5c 7f ca db 2b c6 0f ae 6b da d6 ae c8 7f 74 af 7a f6 71 a0 db e1 f4 ec 05 a2 38 f8 7f dd 8a f8 54 cc 74 0c 8b 4b f2 de 8f a5 9a d9 c2 c1 c0 21 64 96 59 66 60 0f 60 d2 b3 90 be c3 16 26 56 80 f3 c7 97 ee 35 cd 22 3b 38 19 91 d2 e2 19 b9 23 b4 6c 3d 37 0c 7e 24 2a dc 78 86 56 4f db fb 3f 67 23 21 6b 16 3b a4 f9 2e 2d 4e e2 ee ea f1 5a d7 eb a9 68 f7 70 46 d5 43 24 0e 25 5f 84 83 1f ab 14 c9 2a 48 cb f6 e3 65 e7 f6 57 22 22 c8 95 7d 4b f2 4f f2 f3 51 9a e6 5b 8b 06 ad d3 48 f2 22 48 e8 a1 e5 40 8e ea 14 8a 33 05 1b e2 71 82 8e 26 23 f9 d3 e4 bf 32 ea 3a 55 91 d2 45 c4 8b a4 5b 4f 02 b0 90 c4 85 da 10 4c f2 d1 c1 95 7f 60 2a 84 93 d4 e5 f1 37 d9 64 Data Ascii: %#,>j\On%w[H"~Ils/\+ktzq8TtK!dYf``&V5";8#l=7~$xVO?g#!k;.-NZhpFC$%_HeW""}KOQ[H"H@3q&#2:UE[OL`*7d
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: d3 8a 66 9e 9e b4 89 cf e3 4e 72 3f ec 2c 24 52 c1 6d ff 00 2f 7c f1 a5 44 ba 6c ba 52 5f dd cf 72 82 0b 19 5c 3a cb 75 1f ef 19 dc c7 f6 ed e0 81 15 64 49 19 39 a4 98 47 34 52 37 4a fc c2 b5 f2 9e b1 3e 8f 34 4f ac 43 76 ed 1d c4 2c 61 b9 78 1d 88 32 c7 69 20 3c 62 b5 91 1b 87 08 f9 7d 99 31 5e 48 3f cc ff 00 cc ed 37 5d 7b cb 6d 2e de 5b 7d 32 f9 23 30 41 78 a8 4c 25 14 a1 a2 ab 3d 39 f3 3f 17 2f 87 fd 6c af 8a ce c9 b6 fc b7 e5 ff 00 31 f9 a2 ef fc 55 7b 0b 45 e5 6b 70 b0 cc f2 4c 15 bf 75 01 55 94 18 90 c8 53 d4 4e 5c e3 4e 4d f6 7e 2f 8b 0c a3 63 75 0f 64 fc b4 d5 2d ad ff 00 31 0f 96 ae 6c ed 5e de 08 d2 3b 3b a8 a3 f5 d5 9a 28 39 3a fa ce 03 c2 49 f8 b8 b7 2f ee fe d6 47 1f d4 42 c8 9a 67 d1 3e 91 a4 5f dd 4f 71 6e f3 cc d7 04 fd 6c 35 5f f7 8e 0a Data Ascii: fNr?,$Rm/\|DlR_r\:udI9G4R7J>4OCv,ax2i <b}1^H?7]{m.[}2#0AxL%=9?/l1U{EkpLuUSN\NM~/cud-1l^;;(9:I/GBg>_Oqnl5_
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 32 54 32 c6 c7 8b 11 c4 31 ef e1 85 88 e6 f5 2f 2b 47 e4 df f0 fe bd e5 4b cb 18 af ae 6c 26 b9 bd d3 ef 64 99 e2 2f fe ea 84 b2 38 50 89 c1 b9 b4 7f 6b e1 f5 38 e5 72 2c c3 c7 2e 20 7b 7b 89 6d dc 86 78 5d a3 76 53 c9 49 42 41 20 f7 1b 65 ad 6d 25 14 86 3b f8 0c 0a b9 62 2c bc c9 dd 8d 14 77 f9 fc b1 b4 a3 f4 fd 3f 52 bd 8a 55 b5 b7 92 68 e3 56 92 56 8a 32 dc 55 05 59 98 8f b2 a2 9d 4e 56 48 bf 35 08 9d 32 c2 f9 ed ee 6e e0 0e c9 6a 9e bc c5 3a 85 56 0a 5f 96 c5 78 f2 fb 4a 7e 1c 8c 8e f4 9a 7b f7 fc e2 ff 00 96 f5 1b cd 72 7f 32 c3 1d d4 72 c7 13 c3 0d fc f1 f2 89 d4 b0 0c 89 2b 1e bf 07 06 3c 5b 18 03 6c 81 d9 03 ff 00 39 8d e7 6f d2 3e 69 d2 fc a5 04 a3 ea fa 44 5f 59 bf 0a 55 80 b9 b8 14 55 6a 7c 4a d1 44 2b 4f f8 b7 2f 2c 1e 77 f9 09 6f a7 c9 f9 99 Data Ascii: 2T21/+GKl&d/8Pk8r,. {{mx]vSIBA em%;b,w?RUhVV2UYNVH52nj:V_xJ~{r2r+<[l9o>iD_YUUj\|JD+O/,wo
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 54 f8 4f 18 db 92 ad 46 fc 6b fb 38 d2 6d 7d 9e 9f 65 65 10 86 d2 dd 20 88 56 89 1a 85 1b 92 c7 a7 b9 27 14 22 06 2a c6 fc ef a7 58 36 8f 71 79 36 9d 3e a3 22 af 06 b7 b6 34 91 e3 6d 8a d4 ee b1 fe dc 9c 3f 97 23 20 c8 17 c2 3f 99 3a 95 cd c6 b0 f6 2d 0b c1 1d a4 97 32 aa 34 86 50 4d ec df 59 2c bc 95 7d 3f 85 d1 36 f8 5f 87 3f da c8 c4 84 16 2d 6b 7d 3d b1 2d 11 0a fb 55 a8 0f d9 20 8d 8f c2 77 1d c6 13 1b 56 77 65 e7 fb cb fd 2e 6b 4b f8 17 54 ba ba 69 0c 91 dc aa b4 4e c4 13 1f 18 a3 55 7f dd 93 ea 22 f3 fe f9 9a 4e 19 54 ec 1d 99 02 8f b0 d3 ad ec 7c a7 ab 15 b2 9f 5a b8 68 44 ec aa d1 db 41 69 1b 21 40 f7 0b 1b 7a d2 46 24 0c 56 26 6e 2f f6 dd 79 fc 59 30 41 54 82 d7 4d f3 37 98 ac 25 92 38 24 96 7d 2b d0 d2 e0 fa b2 72 85 15 81 50 af 1a 03 c0 32 a9 Data Ascii: TOFk8m}ee V'"*X6qy6>"4m?# ?:-24PMY,}?6_?-k}=-U wVwe.kKTiNU"NT\|ZhDAi!@zF$V&n/yY0ATM7%8$}+rP2
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: ef b3 a3 2b 80 c9 24 6e 0a c8 9f b3 93 89 d9 84 86 ea 3e 5e 9a cd 75 08 be b9 24 91 42 a5 99 9a 30 0b 1f 84 d1 68 c4 0d cd 06 09 26 29 63 d0 b9 3d 01 35 a7 86 48 31 7b 47 91 3c c1 a8 e8 fe 58 ba d1 ec b9 69 8b a9 5b 43 fe 9a a6 1e 6c e2 5e 0c d2 3b f3 2b 04 80 b0 e1 19 82 44 ff 00 7e 7e da 57 6d 87 93 cb b5 2d 34 e9 e6 49 51 97 d1 17 32 db 98 38 b8 04 44 76 70 5a ab c1 c1 ff 00 7e 33 64 b9 b0 56 d5 4a 4c a9 7e 55 a1 1a 82 97 8f 90 0a 19 94 f1 66 43 f6 4a f2 05 7f c9 c8 6e 92 9c da 79 e6 4d 0d ae a2 d2 24 69 60 36 69 05 89 77 63 0a 73 50 2e 0b db b0 e2 c6 5f e5 6f b3 f0 b6 4e 94 96 1b 6e 91 7a d1 89 b6 88 10 5e b5 dd 47 51 b5 0e fd 36 c9 5a 19 7e a5 e7 ad 6f 5e d5 a2 10 da 89 a1 86 3f 43 4a d1 e3 88 c9 6f 6c a9 18 48 da 1b 6f 8d 4c b1 aa ff 00 79 20 95 bf Data Ascii: +$n>^u$B0h&)c=5H1{G<Xi[Cl^;+D~~Wm-4IQ28DvpZ~3dVJL~UfCJnyM$i`6iwcsP._oNnz^GQ6Z~o^?CJolHoLy
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 58 d4 75 15 bb f2 c6 ad 26 85 11 6a cb 69 2c 66 ee 31 ef 11 67 49 17 e4 ce d8 a5 26 7f f9 c4 0f 38 83 48 7c fa 5e 3e dc e1 b8 4a 7d 0b 39 18 aa f8 7f e7 0e 3c c5 1b 72 1e 7e 92 37 26 ac 63 b5 94 12 7b 1a fd 66 b8 ae c8 f9 3f e7 12 35 f9 ed 78 dd 7e 62 5f cd 76 3e c4 8d 1c ad 18 1e 1c 1a 72 df f0 f8 ae c9 25 a7 fc e1 66 b5 77 0c b2 eb 5e 6d 8d 6f 79 b2 c5 e9 db bd c2 98 d5 8f 06 67 92 44 6e 4c bb b2 0f b1 fc ef f6 b1 54 8f cb 5f 92 3f f3 90 de 56 f3 45 df 97 fc b9 7e 74 9b 3b d5 79 1b 5a 8e 52 2c a7 4b 72 02 96 e2 b2 bc 52 9f 57 e1 47 45 76 f8 f8 b3 a2 72 c5 59 55 a7 fc e3 f7 fc e4 2d dd dc 91 ea bf 98 4f 6d 6c e0 c8 67 b7 bb bc 94 99 18 80 57 d3 fd c5 3e 1d fe d6 2b c4 5d a9 ff 00 ce 26 f9 e2 fd ed e2 d4 ff 00 30 2e 35 4b 25 6e 72 2d c2 4e e5 29 bf c0 b2 Data Ascii: Xu&ji,f1gI&8H\|^>J}9<r~7&c{f?5x~b_v>r%fw^moygDnLT_?VE~t;yZR,KrRWGEvrYU-OmlgW>+]&0.5K%nr-N)
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 25 0b 71 50 0b 31 00 02 49 e2 bb 62 4d 24 0b 7b 9f f8 4b c8 be 5a fc be bc b9 8e 0f ac 9d 61 66 b6 4b e9 5a 25 b8 b6 00 55 51 a6 53 c5 79 1e 54 5f ef 5f e0 8b d2 e7 c3 2a dc b3 da 9e 2d e7 2b 0f 2f d8 6a 91 db 68 97 33 5c db 2c 2b eb 1b a4 68 e6 59 49 24 ab 2b 2a 53 e1 2b d3 2c 0c 0a 49 10 25 d0 2e ee 58 05 1e 26 bb 61 2a 1f 4f 7e 43 79 ea f7 cb e9 36 93 6d 63 fa 46 e7 55 94 4b 04 72 48 a9 23 34 48 a8 63 8e 46 3c 3f bb 4f 86 3f 87 8e 63 8c 84 16 47 77 b5 68 bf 9c 1a 0e af af c9 a0 c5 65 74 75 08 24 58 6e 82 c7 c9 61 76 15 a4 95 a3 2d 3f 68 f1 ff 00 89 65 c3 26 f5 4c 69 9d f0 8f f9 46 4d 0e 34 ec 31 57 73 50 3c 31 55 9e a1 3d 3a 61 56 85 6b bf 4c 55 77 ee cf 6c 0a ef 45 09 a8 ae 15 54 58 d4 76 c0 ab c2 a8 c5 5d 45 c5 5a e2 b8 ab 5c 4f 6c 55 c1 0f be 2a ee Data Ascii: %qP1IbM${KZafKZ%UQSyT__-+/jh3\,+hYI$+S+,I%.X&aO~Cy6mcFUKrH#4HcF<?O?cGwhetu$Xnav-?he&LiFM41WsP<1U=:aVkLUwlETXv]EZ\OlU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49851	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	579	OUT	GET /next-integrations/integrations/hotjar/1.4.0/hotjar.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:36 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1337 Connection: close Date: Thu, 31 Oct 2024 02:41:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "b0cfd2e8e8967ad708b94773be4834a7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: MZ.YSZERq0A220C3fEMPnFPsX5gFCKd9 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7ff386cc5735ee5d428e6d9e2fdc8b2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 8sX_w-pmkoUrpG0d0C4to-DSduxrmuUVMrctef1nIjREZzLTxgwR2Q==
2024-10-31 02:41:36 UTC	1337	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 6d 6f db 36 10 fe de 5f 21 73 80 2a 22 0c 6d 77 5d ba 59 25 8a ad db 90 0e 7d 19 d6 75 5f 0c 23 a0 a5 73 44 57 26 15 92 4a e6 39 fa ef 3b ea c5 2f 49 0b 14 30 2c 52 3c de 3d f7 dc f1 a1 ee 94 ce cd dd fc 69 61 fc 5a da 5f a1 72 4f 17 91 88 e6 64 ac b4 87 6b 2b bd 32 da 8d 6f 01 cd ec 38 33 9b 0d 4e b9 bc 98 e6 2f 96 20 bf 7f 91 3f cb e1 87 fc f9 f2 e2 27 be 76 64 91 de 9d f8 7b 6b 64 0e b6 f5 b8 aa 75 16 7c 25 34 da 45 16 7c 6d 75 d4 19 f3 ce f6 cd 21 9e d8 1b 7b ba 1b c6 11 24 80 33 63 93 5b 69 23 cb 6a 26 05 cc 27 0b e6 f0 31 5d b0 1c 1f cf 16 6c 25 26 ac 10 f3 45 ba 7a 29 79 09 fa da 17 e9 ea ec 8c d6 42 ce 57 0b f6 61 b9 86 cc f3 ca 1a 6f fc b6 02 5e 48 f7 e1 4e ff 69 4d 05 d6 6f 79 26 cb 32 51 ac a6 71 ac e6 f5 22 Data Ascii: Vmo6_!s*"mw]Y%}u_#sDW&J9;/I0,R<=iaZ_rOdk+2o83N/ ?'vd{kdu\|%4E\|mu!{$3c[i#j&'1]l%&Ez)yBWao^HNiMoy&2Qq"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49852	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	583	OUT	GET /next-integrations/integrations/intercom/3.1.0/intercom.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:36 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1879 Connection: close Date: Thu, 31 Oct 2024 02:41:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "de0a11b95aca20dc7cc5bcec42adc9e4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: WaLj40l3ZG2BEFOf2lZRQmhraY5Uj_59 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d357d5d597708d2b41e0fea397aa2620.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: QgAAkBHUUbSSpHP8wx3PKwK8gJ5vtFCv4VadNwpTsFgPhlvAvdcLfQ==
2024-10-31 02:41:36 UTC	1879	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 57 6d 8f db 36 12 fe de 5f e1 a8 80 23 5d 59 ad 37 e9 25 57 29 bc a2 ed 1d ae 5b 64 b1 87 a6 41 71 67 18 06 2d d1 36 13 59 64 28 6a f7 7c b6 fe fb 3d 43 bd 58 f6 6e 0e 01 16 ab 21 39 33 9c 37 3e 33 7e 50 65 ae 1f e6 cf 55 e9 a4 cd f4 ee 6f d2 54 cf 17 13 3e 99 07 57 b4 b7 b1 c2 29 5d 56 57 f7 12 8c f6 0a 2c 3b 2c 63 f1 ea 3a 7f bd 92 e2 e5 eb fc 45 2e ff 9c 7f b7 7a f5 7d fc a1 0a 16 e9 c3 85 c6 b7 5a e4 d2 7a 9d eb ba cc 48 5b 18 4d 0e 13 2b 5d 6d cb 49 cb 1e f7 dc 37 a7 3b f9 c0 ee a2 43 4f 4f 64 28 b1 d2 36 bc 17 76 52 32 c5 0c 97 f3 d9 82 65 f8 5c 2f 58 8d cf 8b 05 cb f9 8c 15 7c be 48 f3 37 26 2e 64 b9 71 db 34 ff e6 9b 48 71 33 cf 17 ec 6e f5 41 66 2e 36 56 3b ed f6 46 c6 5b 51 dd 3d 94 ff b4 da 48 eb f6 71 26 8a 22 Data Ascii: Wm6_#]Y7%W)[dAqg-6Yd(j\|=CXn!937>3~PeUoT>W)]VW,;,c:E.z}ZzH[M+]mI7;COOd(6vR2e\/X\|H7&.dq4Hq3nAf.6V;F[Q=Hq&"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49849	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	596	OUT	GET /next-integrations/integrations/facebook-pixel/2.11.5/facebook-pixel.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:37 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3273 Connection: close Date: Thu, 31 Oct 2024 02:41:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "a7cd49c834a0851140e3304c91cb34d0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: j4m0DyDSierKPJq1r420lhjLq60dvugM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7fcb41b117930690c299be9cec4a977a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: GxsJl4x_ImL0KRQh0EJ3K4tFkyTyCU9HfFfdWilfubiegN2CnR7P8g==
2024-10-31 02:41:37 UTC	3273	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a 7b 6f 1b 37 12 ff bf 9f 42 de 03 94 5d 94 5d cb e9 eb 2a 65 1b 04 4e da cb 21 69 82 73 d2 e2 a0 0a 06 b5 a4 24 26 2b 72 43 72 ed 28 d2 7e f7 9b 21 f7 29 c9 8e 0d f4 0e 77 87 06 81 c5 c7 70 38 1c ce fc 38 e4 ec b5 90 4c 5d 4f 1f 2c 68 ca e7 4a bd ff 2a 17 1f 79 f6 94 e7 e6 c1 6c 90 0c a6 c1 a9 90 96 2f 35 b5 42 49 73 7a c5 81 5c 9f a6 6a bd 86 6a 4c bf 3b 63 df cf 39 fd fa 7b f6 90 f1 6f d9 37 f3 ef 7e 88 df 99 60 36 b9 3e ca f7 85 a2 8c 6b c7 79 51 c8 14 79 86 d1 60 3b d0 dc 16 5a 0e aa 41 41 7f d0 f3 56 80 60 96 34 e3 78 b4 ad cb 03 1b 5a a8 29 1d 5e 51 3d 10 84 12 93 d8 e9 68 46 72 f8 39 9b 91 14 7e 1e ce 08 4b 46 24 4b a6 b3 09 7b 64 e2 8c cb a5 5d 4d d8 97 5f 46 34 31 53 36 23 af e6 ef 78 6a e3 5c 2b ab ec 26 e7 f1 Data Ascii: Z{o7B]]eN!is$&+rCr(~!)wp88L]O,hJyl/5BIsz\jjL;c9{o7~`6>kyQy`;ZAAV`4xZ)^Q=hFr9~KF$K{d]M_F41S6#xj\+&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49850	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	600	OUT	GET /next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:37 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4743 Connection: close Date: Thu, 31 Oct 2024 02:41:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "6a3ed21f9b6777c0c37e6e248ea22387" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: jiinLnhNKtSMsrpHvOzN4SxprXBvOKZw Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b0954612f115b3d0a0db0a669e45ae8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: sq0BAm0poMzVEMFlEZrx_RJppwcQlw3nxvmJHYLnNF6RMhapcgVfCQ==
2024-10-31 02:41:37 UTC	4743	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5b eb 6f 1b 39 92 ff be 7f 85 dc 07 68 ba 11 4e db ce ed cc ec 4a e1 04 b9 24 97 f3 6e e2 04 93 79 7c 10 04 83 66 d3 32 e3 56 b3 d3 64 db d1 59 fa df af 8a ec 07 fb 61 4b 09 76 16 38 20 88 f9 ac 26 8b f5 f8 55 91 ba 93 59 a2 ee 16 df ad 94 5a a5 e2 7b 96 b1 74 63 24 d7 af 44 ae bf 5b 4e e8 64 11 1c cb cc 88 55 c1 8c 54 99 3e be 15 30 a1 38 e6 6a bd 86 6a cc 7e 3c 4d 7e ba 14 ec 3f 7f 4a 9e 26 e2 87 e4 af 97 3f fe 3d fe a4 83 e5 fc ee 01 ca 6f 15 4b 44 61 69 5f 95 19 47 aa 61 34 b9 9f 14 c2 94 45 36 a9 a6 05 fd 69 67 ed 22 82 25 6d 66 8a e8 be 2e 4f 4c 68 a0 a6 8a f0 96 15 93 8c 30 c2 a9 59 9c 2c 89 86 3f a7 4b 92 c0 9f a7 4b 52 d2 13 b2 a6 8b e5 bc 7c c6 e3 54 64 2b 73 3d 2f 9f 3c 89 18 e5 8b 72 49 de 5f 7e 12 dc c4 79 a1 Data Ascii: [o9hNJ$ny\|f2VdYaKv8 &UYZ{tc$D[NdUT>08jj~<M~?J&?=oKDai_Ga4E6ig"%mf.OLh0Y,?KKR\|Td+s=/<rI_~y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49861	35.190.80.1	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	539	OUT	OPTIONS /report/v4?s=hmhGv%2BwVx7XPBCDzpTqlgboxxsp02%2FqHr0UOWUzu4SBZHDAFA2mXeDoULxQPEdEmNLsquF7HbYFjpMCiJGzVJPkB8mIsWks9B%2BgDUhCxSAJIWHg%2FX9IamlXIIVl7NboKfeI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.riparide.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:36 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 31 Oct 2024 02:41:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49862	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:36 UTC	535	OUT	GET /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:36 UTC	859	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 02:41:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342496&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=tRFmZLcwsPkjYFriXBz%2BzyKqtTul8VQOoQB%2FVPiVXQY%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342496&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=tRFmZLcwsPkjYFriXBz%2BzyKqtTul8VQOoQB%2FVPiVXQY%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:36 UTC	1531	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 31 32 38 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 Data Ascii: 1282<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><met
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 70 61 72 69 64 65 20 68 65 6c 70 73 20 79 6f 75 20 70 6c 61 6e 20 61 6e 64 20 62 6f 6f 6b 20 79 6f 75 72 20 6e 65 78 74 20 65 73 63 61 70 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 53 74 6f 72 79 74 65 6c 6c 65 72 20 74 72 61 76 65 6c 20 67 75 69 64 65 73 2e 20 54 68 65 73 65 20 67 75 69 64 65 73 2c 20 63 61 6c 6c 65 64 20 52 69 70 61 72 69 64 65 20 53 74 6f 72 69 65 73 2c 20 63 6f 6d 65 20 70 61 63 6b 65 64 20 77 69 74 68 20 75 6e 69 71 75 65 20 73 74 61 79 73 2c 20 6c 6f 63 61 6c 20 61 64 76 65 6e 74 75 72 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 20 76 69 62 65 73 2e 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 6f 6e 74 Data Ascii: paride helps you plan and book your next escape through our Storyteller travel guides. These guides, called Riparide Stories, come packed with unique stays, local adventures and social vibes...." name="description" /><link rel="preload" href="/assets/font
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 69 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 20 74 72 75 65 2c 0a 20 20 70 61 79 6c 6f 61 64 Data Ascii: ipt defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, captureUnhandledRejections: true, payload
2024-10-31 02:41:36 UTC	639	IN	Data Raw: 72 6e 20 72 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6f 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6f 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 65 29 7d 2c 6f 2e 70 3d 22 22 2c 6f 28 6f 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: rn r[e]}.bind(null,t));return n},o.n=function(r){var e=r&&r.__esModule?function(){return r.default}:function(){return r};return o.d(e,"a",e),e},o.o=function(r,e){return Object.prototype.hasOwnProperty.call(r,e)},o.p="",o(o.s=0)}([function(r,e,o){"use stri
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 31 66 33 30 0d 0a 67 2e 61 73 79 6e 63 2c 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 2c 6c 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6f 28 32 29 2c 74 3d 6f 28 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 72 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 5b 52 6f 6c 6c 62 61 72 5d 3a 20 49 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 22 2c 72 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 7d 7d 76 61 72 20 6c 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 65 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d Data Ascii: 1f30g.async,_rollbarConfig,l)},function(r,e,o){"use strict";var n=o(2),t=o(3);function a(r){return function(){try{return r.apply(this,arguments)}catch(r){try{console.error("[Rollbar]: Internal error",r)}catch(r){}}}}var l=0;function i(r,e){this.options=
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 2c 73 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 74 72 79 7b 76 61 72 20 6e 3b 69 66 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7c 7c 7b 7d 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 72 2e 5f 69 73 57 72 61 70 29 72 65 74 75 72 6e 20 72 3b 69 66 28 21 72 2e 5f 72 6f 6c 6c 62 61 72 5f 77 72 61 70 70 65 64 26 26 28 72 2e 5f 72 6f 6c 6c 62 61 72 5f 77 72 61 70 70 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 Data Ascii: ,s)},i.prototype.wrap=function(r,e,o){try{var n;if(n="function"==typeof e?e:function(){return e\|\|{}},"function"!=typeof r)return r;if(r._isWrap)return r;if(!r._rollbar_wrapped&&(r._rollbar_wrapped=function(){o&&"function"==typeof o&&o.apply(this,arguments
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 3d 72 2e 70 61 67 65 26 26 21 72 2e 70 61 67 65 29 7d 28 61 29 29 26 26 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 6c 2e 63 61 70 74 75 72 65 4c 6f 61 64 2e 62 69 6e 64 28 6c 29 29 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6c 2e 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2e 62 69 6e 64 28 6c 29 29 29 2c 72 5b 6f 5d 3d 6c 2c 6c 7d 29 29 28 29 7d 7d 2c 52 6f 6c 6c 62 61 72 3a 63 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 65 2c 6f 2c 6e 29 7b 72 2e 5f 72 6f 6c 6c 62 61 72 Data Ascii: =r.page&&!r.page)}(a))&&r.addEventListener&&(r.addEventListener("load",l.captureLoad.bind(l)),r.addEventListener("DOMContentLoaded",l.captureDomContentLoaded.bind(l))),r[o]=l,l}))()}},Rollbar:c}},function(r,e,o){"use strict";function n(r,e,o,n){r._rollbar
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 7d 3b 6e 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 3d 6f 2c 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 3d 6e 2c 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 6e 29 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 26 26 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 6e 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 41 64 64 26 26 6e 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 3b 29 6e 3d Data Ascii: };n.belongsToShim=o,r._rollbarURH=n,r.addEventListener("unhandledrejection",n)}}}},function(r,e,o){"use strict";function n(r,e,o){if(e.hasOwnProperty&&e.hasOwnProperty("addEventListener")){for(var n=e.addEventListener;n._rollbarOldAdd&&n.belongsToShim;)n=
2024-10-31 02:41:36 UTC	1369	IN	Data Raw: 65 62 75 67 2c 69 6e 66 6f 2c 77 61 72 6e 2c 77 61 72 6e 69 6e 67 2c 65 72 72 6f 72 2c 63 72 69 74 69 63 61 6c 2c 67 6c 6f 62 61 6c 2c 63 6f 6e 66 69 67 75 72 65 2c 68 61 6e 64 6c 65 55 6e 63 61 75 67 68 74 45 78 63 65 70 74 69 6f 6e 2c 68 61 6e 64 6c 65 41 6e 6f 6e 79 6d 6f 75 73 45 72 72 6f 72 73 2c 68 61 6e 64 6c 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 2c 5f 63 72 65 61 74 65 49 74 65 6d 2c 77 72 61 70 2c 6c 6f 61 64 46 75 6c 6c 2c 73 68 69 6d 49 64 2c 63 61 70 74 75 72 65 45 76 65 6e 74 2c 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 70 74 75 72 65 4c 6f 61 64 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6e 3d 30 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 72 5b 6f 5b 6e 5d 5d 3d 65 28 6f 5b 6e 5d 29 7d Data Ascii: ebug,info,warn,warning,error,critical,global,configure,handleUncaughtException,handleAnonymousErrors,handleUnhandledRejection,_createItem,wrap,loadFull,shimId,captureEvent,captureDomContentLoaded,captureLoad".split(","),n=0;n<o.length;n++)r[o[n]]=e(o[n])}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49864	35.190.80.1	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:38 UTC	480	OUT	POST /report/v4?s=hmhGv%2BwVx7XPBCDzpTqlgboxxsp02%2FqHr0UOWUzu4SBZHDAFA2mXeDoULxQPEdEmNLsquF7HbYFjpMCiJGzVJPkB8mIsWks9B%2BgDUhCxSAJIWHg%2FX9IamlXIIVl7NboKfeI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 437 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:38 UTC	437	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 35 2e 35 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 63 Data Ascii: [{"age":0,"body":{"elapsed_time":766,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.26.5.52","status_code":405,"type":"http.error"},"type":"network-error","url":"https://www.riparide.com/c
2024-10-31 02:41:38 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 31 Oct 2024 02:41:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49863	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:38 UTC	587	OUT	GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:39 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21911 Connection: close Date: Thu, 31 Oct 2024 02:41:40 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:15 GMT ETag: "c467a63b2e7c3a99be423ace649014d8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: JPDEPREw8gYM0wgzX9n.pVdsRblNlmAD Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 89c822bb1ce1445a7be6d1057088cfbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 6RjOLAnq9NH7HvSFv3yMIfp7MivYIEv_ThaSvuRh6Djq8gxjG9xtYQ==
2024-10-31 02:41:39 UTC	8176	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 69 7b db 38 b2 30 fa fd fe 0a 99 b7 a3 90 11 ac d5 ab 64 46 6f 96 4e 27 3d d9 4e c7 e9 3e 13 45 c9 a1 25 c8 62 22 91 6a 92 b2 e3 58 9a df 7e ab 0a 0b c1 45 b2 32 db 99 fb 3c ef 4c c7 22 41 a0 50 d8 0a 85 42 2d f6 b5 1f 8c c3 eb fa 35 bf 58 78 a3 af bf c6 61 b0 f8 1c 78 73 fe f9 45 90 f0 cb c8 4b fc 30 70 77 c9 b4 5a 0d 86 4e 7d b1 8c a7 f6 60 d0 1c b2 5b ab f6 f8 65 cb ea 4e 96 c1 08 bf db 09 e3 2c 72 6e ad 65 cc 2b 71 12 f9 a3 c4 ea a9 8f 15 f8 ec dc 5e 79 51 85 bb 49 3d 09 df c1 f7 e0 d2 76 7a 11 4f 96 51 50 69 b9 ae cb eb 33 1e 5c 26 d3 be d5 b4 6a bc cb d7 49 9d 7f 5b 84 51 12 bb 69 1d ce ad 2c 91 d4 2f 79 f2 fe fc c9 b3 e5 6c f6 57 ee 45 b6 53 b3 f6 ad 1a 64 91 1f 5e 85 41 32 85 d4 56 fe c3 53 2f e1 b6 03 a9 e7 66 Data Ascii: i{80dFoN'=N>E%b"jX~E2<L"APB-5XxaxsEK0pwZN}`[eN,rne+q^yQI=vzOQPi3\&jI[Qi,/ylWESd^A2VS/f
2024-10-31 02:41:39 UTC	8568	IN	Data Raw: bd da e4 d6 61 f4 15 3d a6 31 20 19 9b 6e fd 19 5e 73 a2 24 56 9e c1 1b 95 07 bd ca 83 86 a3 24 01 01 1e c5 d5 15 66 ee d6 33 e3 23 3f 1a 2c 6d 60 e1 82 ec 71 1e 95 6d 9c a1 bb 84 39 d7 4a b5 04 22 d2 1f 36 45 5d 7a c2 43 97 0d 92 61 4e b1 7e 77 99 0a 9c 86 a9 f9 95 ff 11 19 ed 7b a1 f3 3f 95 fd 0a fa d5 12 1e 90 34 e4 e5 0e a2 96 52 c8 22 63 11 f2 9d c2 b7 bc 6a b2 38 8c 55 3a 5d fa 69 2b 09 57 68 8a bf 2a 2d 43 20 e7 14 2f de 49 8a f5 f6 f8 bf 5f e5 8e 8b 25 d3 45 1e 67 84 ce 56 7f d3 21 99 0b 9d af e5 82 47 9f 5d ce 8c e3 8f 9b 01 60 73 c3 59 d1 ad e1 97 a8 7b 2b 3c 01 01 34 c3 5f 50 cb 74 07 94 f7 1d b4 c6 bb fa ee 96 63 3b 5d 78 29 9c e4 29 db bc a4 ed 19 9e 93 5c 13 31 13 7d a4 26 91 99 62 7a 53 02 2e 13 3a f2 bf 5e 1f ff 57 e9 b9 5b 79 73 eb ed 10 Data Ascii: a=1 n^s$V$f3#?,m`qm9J"6E]zCaN~w{?4R"cj8U:]i+Wh*-C /I_%EgV!G]`sY{+<4_Ptc;]x))\1}&bzS.:^W[ys
2024-10-31 02:41:39 UTC	432	IN	Data Raw: 6d c2 a4 05 6a 97 9c 36 74 93 ae 48 d7 8e 43 b2 df f3 87 ea 2b 7f 74 c7 74 94 84 4c e6 45 9a 93 c6 d5 8b b5 23 ad 75 46 e0 20 1b 60 3b 42 83 24 0d f3 03 95 12 23 a7 45 0b 7e 08 43 f9 70 bf 95 6e 29 22 89 19 79 bc 60 1c c1 8e 96 cf a7 93 0b 4b 41 c7 b4 4c 27 a0 6a 85 fe 94 9f 82 d2 37 51 b1 84 fa 52 52 40 f0 9e 0b 2d a7 d5 3c 68 36 eb 48 f8 94 4c 33 ca 84 5c 36 7f 51 ac dc cf c3 12 33 3d 05 25 de 31 ba b1 6d 64 cb 9d 01 bf b6 5f b7 4b a3 79 b5 78 07 a8 35 3a 5c 62 e4 77 29 80 dd b1 7d f0 00 9d c6 74 8e 0e eb ed c3 07 7e ee 52 5b 06 45 df b3 93 33 c3 6d fe 59 ab 7e f8 80 f7 0d 4f 03 49 83 3b 42 66 d7 a5 d4 11 f7 67 46 22 72 30 eb 8d ba 00 e2 84 20 2e 78 d0 c9 85 32 e8 cc 88 ac dc 18 cd 3b 05 ff fb b0 59 a6 99 8c aa 9d 89 74 9f 8e 7b 85 ca dc 6a 36 cd 18 c2 Data Ascii: mj6tHC+ttLE#uF `;B$#E~Cpn)"y`KAL'j7QRR@-<h6HL3\6Q3=%1md_Kyx5:\bw)}t~R[E3mY~OI;BfgF"r0 .x2;Yt{j6
2024-10-31 02:41:39 UTC	4735	IN	Data Raw: 88 14 16 e9 f0 ea 2a 75 92 4a 31 a0 cd 53 70 73 03 5e ce c7 fa 7a 2d 07 34 f5 2a 8f 13 75 0f 43 af fb f1 6b ef b5 e1 1f 0a 7d 77 04 97 fd 91 bd 74 13 e6 33 ea 72 07 19 d3 25 0b 99 e8 57 f9 1a 30 d5 4f 32 21 62 aa d5 90 b0 84 35 85 28 e5 9d 30 3d 74 7d 55 95 f0 b4 8a a2 4e 58 84 3e 2c c2 31 f9 20 86 2c 61 69 96 10 b2 4c 55 96 a0 34 4b 00 59 e6 2a 4b 54 9a 25 72 70 9d 6b f2 5f c3 8e a3 fe 29 38 6d bc f2 66 15 3f 26 f7 3b 1e fc 0d f6 f9 7c 91 dc 54 c4 62 af 84 e8 6a 02 b2 c0 a9 46 f4 6a 1d df 5c ab 56 88 be 8b 27 c2 d9 e9 ef bf ee 12 69 06 b6 3b ed 6f b1 96 28 8f 8b b5 c4 8c 7a a2 ef f8 b4 67 c8 5d fd 41 16 f2 ad cb 6f cc b7 87 c4 6c 76 53 64 73 61 30 23 3a ff 42 73 af 0e 4e 36 04 4b 32 d5 10 73 c6 09 78 35 af ce 1e 6a d7 c7 4d 40 87 9a 85 9d 20 dc b7 03 60 Data Ascii: uJ1Sps^z-4uCk}wt3r%W0O2!b5(0=t}UNX>,1 ,aiLU4KY*KT%rpk_)8mf?&;\|TbjFj\V'i;o(zg]AolvSdsa0#:BsN6K2sx5jM@ `

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49867	142.250.74.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:39 UTC	951	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD&co=aHR0cHM6Ly93d3cucmlwYXJpZGUuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=oszlgs1pi681 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 31 Oct 2024 02:41:39 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-72K2DDbZ-ok4cF5T5XvtfA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:40 UTC	217	IN	Data Raw: 35 37 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57c8<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 37 32 4b 32 44 44 62 5a 2d 6f 6b 34 63 46 35 54 35 58 76 74 66 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js" nonce="72K2DDbZ-ok4cF5T5XvtfA"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 68 6e 70 6b 70 70 63 76 65 58 6f 77 4d 38 4a 71 4e 39 6c 4f 45 77 36 62 6f 44 61 52 50 53 4d 78 44 75 33 73 57 72 41 56 2d 73 63 75 4f 68 73 65 4b 79 4a 36 47 6b 52 4b 73 6f 34 66 31 4d 30 71 53 33 49 52 50 50 6a 61 77 6b 39 64 48 44 4e 34 33 69 62 65 68 75 56 67 4f 79 4c 35 61 6d 71 37 35 4a 37 56 49 37 6c 47 32 59 47 63 30 70 77 46 4c 4f 49 30 7a 42 51 66 54 68 32 6d 71 69 4e 4f 52 62 55 5a 72 45 55 61 7a 50 76 36 78 51 78 6e 42 2d 4d 41 64 6f 6d 4b 61 39 6f 6a 46 4a 31 76 50 51 76 41 46 4f 30 59 75 37 70 78 5a 2d 51 5f 6b 4c 54 6d 42 6f 5f 47 39 4c 58 79 6e 51 74 36 54 74 30 6a 67 53 54 6a 4b 67 67 51 45 4f 74 44 68 56 53 72 31 67 59 66 6a 34 45 69 66 67 6e 55 4b 48 66 6e 35 70 59 34 30 47 72 72 6b 45 2d 5f 62 34 2d 4e 53 67 58 41 42 69 4a 47 6b 34 32 Data Ascii: hnpkppcveXowM8JqN9lOEw6boDaRPSMxDu3sWrAV-scuOhseKyJ6GkRKso4f1M0qS3IRPPjawk9dHDN43ibehuVgOyL5amq75J7VI7lG2YGc0pwFLOI0zBQfTh2mqiNORbUZrEUazPv6xQxnB-MAdomKa9ojFJ1vPQvAFO0Yu7pxZ-Q_kLTmBo_G9LXynQt6Tt0jgSTjKggQEOtDhVSr1gYfj4EifgnUKHfn5pY40GrrkE-_b4-NSgXABiJGk42
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 6f 76 59 6d 38 34 63 6b 4a 4f 4e 6c 6c 36 57 57 5a 4c 59 6c 70 52 64 56 6c 4d 57 6a 45 32 64 6b 4d 34 4c 31 46 48 62 56 41 34 63 44 52 78 4c 33 70 42 61 44 56 46 52 56 52 4b 53 6b 45 79 51 30 39 47 4e 6b 46 61 53 48 4a 58 57 56 68 68 4d 30 78 43 62 69 39 73 61 6d 31 33 57 48 4a 68 55 6d 68 43 56 6c 59 33 65 47 6c 4d 4d 57 77 31 62 6e 64 73 4d 44 4a 33 56 47 5a 72 63 30 64 57 62 6c 70 6e 55 69 73 30 5a 6d 6c 6a 62 7a 6c 30 56 31 6c 51 53 46 52 55 53 55 4a 44 63 46 51 30 61 48 55 7a 54 31 64 48 54 6a 56 77 56 32 35 68 65 6d 31 33 65 44 4a 4d 59 55 68 73 4b 32 68 70 65 55 31 36 55 56 56 50 65 54 68 74 63 55 5a 5a 64 47 64 77 52 57 59 33 64 6b 73 79 4b 32 64 57 52 6d 59 76 53 45 35 57 57 54 56 71 4b 7a 5a 70 65 45 67 78 65 6d 52 36 55 46 52 70 59 54 52 57 64 Data Ascii: ovYm84ckJONll6WWZLYlpRdVlMWjE2dkM4L1FHbVA4cDRxL3pBaDVFRVRKSkEyQ09GNkFaSHJXWVhhM0xCbi9sam13WHJhUmhCVlY3eGlMMWw1bndsMDJ3VGZrc0dWblpnUis0Zmljbzl0V1lQSFRUSUJDcFQ0aHUzT1dHTjVwV25hem13eDJMYUhsK2hpeU16UVVPeThtcUZZdGdwRWY3dksyK2dWRmYvSE5WWTVqKzZpeEgxemR6UFRpYTRWd
2024-10-31 02:41:40 UTC	1378	IN	Data Raw: 63 57 63 31 62 54 42 71 4d 48 4e 5a 52 33 4d 77 64 54 6c 30 64 48 68 44 55 6e 42 35 4d 7a 4e 6e 59 7a 68 61 61 7a 5a 73 64 45 46 54 63 6e 5a 34 52 57 35 6c 54 54 4e 33 61 7a 4e 70 64 44 68 57 5a 45 70 55 52 47 70 54 56 45 68 30 56 6d 35 6b 5a 54 64 6a 4e 30 45 35 56 57 77 30 55 46 42 6f 65 6b 46 45 5a 55 34 34 61 56 6c 57 65 55 52 44 5a 31 64 59 64 69 39 61 59 56 4e 44 53 31 56 71 4d 32 46 4b 52 47 35 69 5a 6a 52 6c 65 44 6c 79 5a 55 74 5a 52 31 56 53 55 57 35 71 57 48 4a 49 4c 32 77 30 54 54 5a 33 54 55 4a 44 4e 47 6c 44 5a 57 6b 78 4d 7a 46 46 54 6d 6c 4f 59 7a 52 35 54 7a 64 6e 65 47 45 32 4d 79 74 71 65 47 70 74 62 48 42 73 5a 57 78 35 53 46 4d 77 51 32 68 42 52 57 4a 68 56 6d 4a 79 61 57 56 36 52 55 46 4e 52 45 68 47 4b 31 56 57 62 32 52 32 59 30 70 Data Ascii: cWc1bTBqMHNZR3MwdTl0dHhDUnB5MzNnYzhaazZsdEFTcnZ4RW5lTTN3azNpdDhWZEpURGpTVEh0Vm5kZTdjN0E5VWw0UFBoekFEZU44aVlWeURDZ1dYdi9aYVNDS1VqM2FKRG5iZjRleDlyZUtZR1VSUW5qWHJIL2w0TTZ3TUJDNGlDZWkxMzFFTmlOYzR5TzdneGE2MytqeGptbHBsZWx5SFMwQ2hBRWJhVmJyaWV6RUFNREhGK1VWb2R2Y0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49866	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:39 UTC	535	OUT	GET /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:40 UTC	859	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 02:41:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342499&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=rUJUSFd8sYJld%2BFmHB%2BnUmh0d93y7ZQNGGTZLryOimk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342499&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=rUJUSFd8sYJld%2BFmHB%2BnUmh0d93y7ZQNGGTZLryOimk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:40 UTC	1531	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 33 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 Data Ascii: 3ffa<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><met
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 70 61 72 69 64 65 20 68 65 6c 70 73 20 79 6f 75 20 70 6c 61 6e 20 61 6e 64 20 62 6f 6f 6b 20 79 6f 75 72 20 6e 65 78 74 20 65 73 63 61 70 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 53 74 6f 72 79 74 65 6c 6c 65 72 20 74 72 61 76 65 6c 20 67 75 69 64 65 73 2e 20 54 68 65 73 65 20 67 75 69 64 65 73 2c 20 63 61 6c 6c 65 64 20 52 69 70 61 72 69 64 65 20 53 74 6f 72 69 65 73 2c 20 63 6f 6d 65 20 70 61 63 6b 65 64 20 77 69 74 68 20 75 6e 69 71 75 65 20 73 74 61 79 73 2c 20 6c 6f 63 61 6c 20 61 64 76 65 6e 74 75 72 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 20 76 69 62 65 73 2e 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 6f 6e 74 Data Ascii: paride helps you plan and book your next escape through our Storyteller travel guides. These guides, called Riparide Stories, come packed with unique stays, local adventures and social vibes...." name="description" /><link rel="preload" href="/assets/font
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 69 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 20 74 72 75 65 2c 0a 20 20 70 61 79 6c 6f 61 64 Data Ascii: ipt defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, captureUnhandledRejections: true, payload
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 72 6e 20 72 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6f 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 3b 72 65 74 75 72 6e 20 6f 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6f 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 65 29 7d 2c 6f 2e 70 3d 22 22 2c 6f 28 6f 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: rn r[e]}.bind(null,t));return n},o.n=function(r){var e=r&&r.__esModule?function(){return r.default}:function(){return r};return o.d(e,"a",e),e},o.o=function(r,e){return Object.prototype.hasOwnProperty.call(r,e)},o.p="",o(o.s=0)}([function(r,e,o){"use stri
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 21 31 2c 69 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 73 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 64 3d 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 22 2c 69 2e 73 72 63 3d 6e 2e 72 6f 6c 6c 62 61 72 4a 73 55 72 6c 2c 6f 7c 7c 28 69 2e 61 73 79 6e 63 3d 21 30 29 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 6c 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: !1,i=e.createElement("script"),s=e.getElementsByTagName("script")[0],d=s.parentNode;i.crossOrigin="",i.src=n.rollbarJsUrl,o\|\|(i.async=!0),i.onload=i.onreadystatechange=a((function(){if(!(l\|\|this.readyState&&"loaded"!==this.readyState&&"complete"!==this.re
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 73 2c 68 61 6e 64 6c 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 2c 63 61 70 74 75 72 65 45 76 65 6e 74 2c 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 70 74 75 72 65 4c 6f 61 64 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 30 3b 66 3c 70 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 69 2e 70 72 6f 74 6f 74 79 70 65 5b 70 5b 66 5d 5d 3d 75 28 70 5b 66 5d 29 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 53 68 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 72 29 7b 76 61 72 20 6f 3d 65 2e 67 6c 6f 62 61 6c 41 6c 69 61 73 7c 7c 22 52 6f 6c 6c 62 61 72 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 3b 72 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 Data Ascii: s,handleUnhandledRejection,captureEvent,captureDomContentLoaded,captureLoad".split(","),f=0;f<p.length;++f)i.prototype[p[f]]=u(p[f]);r.exports={setupShim:function(r,e){if(r){var o=e.globalAlias\|\|"Rollbar";if("object"==typeof r[o])return r[o];r._rollbarShi
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 6e 79 6d 6f 75 73 45 72 72 6f 72 73 28 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 6e 28 72 2c 65 2c 74 2c 6f 29 7d 3b 6f 26 26 28 61 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f 6e 45 72 72 6f 72 3d 74 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 61 7d 7d 2c 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 26 26 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 26 26 72 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: nymousErrors();var a=function(){var o=Array.prototype.slice.call(arguments,0);n(r,e,t,o)};o&&(a._rollbarOldOnError=t),r.onerror=a}},captureUnhandledRejections:function(r,e,o){if(r){"function"==typeof r._rollbarURH&&r._rollbarURH.belongsToShim&&r.removeEve
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 6e 74 53 6f 75 72 63 65 2c 46 69 6c 65 52 65 61 64 65 72 2c 48 54 4d 4c 55 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 2c 49 44 42 44 61 74 61 62 61 73 65 2c 49 44 42 52 65 71 75 65 73 74 2c 49 44 42 54 72 61 6e 73 61 63 74 69 6f 6e 2c 4b 65 79 4f 70 65 72 61 74 69 6f 6e 2c 4d 65 64 69 61 43 6f 6e 74 72 6f 6c 6c 65 72 2c 4d 65 73 73 61 67 65 50 6f 72 74 2c 4d 6f 64 61 6c 57 69 6e 64 6f 77 2c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 53 56 47 45 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 2c 53 63 72 65 65 6e 2c 54 65 78 74 54 72 61 63 6b 2c 54 65 78 74 54 72 61 63 6b 43 75 65 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 2c 57 65 62 53 6f 63 6b 65 74 2c 57 65 62 53 6f 63 6b 65 74 57 6f 72 6b 65 72 2c 57 6f 72 6b 65 72 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 58 Data Ascii: ntSource,FileReader,HTMLUnknownElement,IDBDatabase,IDBRequest,IDBTransaction,KeyOperation,MediaController,MessagePort,ModalWindow,Notification,SVGElementInstance,Screen,TextTrack,TextTrackCue,TextTrackList,WebSocket,WebSocketWorker,Worker,XMLHttpRequest,X
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 72 29 7d 2c 69 3d 30 3b 6f 3d 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 5b 69 2b 2b 5d 3b 29 6e 7c 7c 28 6e 3d 6f 2e 68 61 6e 64 6c 65 72 29 2c 6f 2e 68 61 6e 64 6c 65 72 2e 5f 73 77 61 70 41 6e 64 50 72 6f 63 65 73 73 4d 65 73 73 61 67 65 73 28 6c 2c 6f 2e 6d 65 73 73 61 67 65 73 29 3b 77 69 6e 64 6f 77 5b 74 5d 3d 6e 2c 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 7d 7d 7d 7d 5d 29 3b 0a 2f 2f 20 45 6e 64 20 52 6f 6c 6c 62 61 72 20 53 6e 69 70 70 65 74 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 3e 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: on(r){return new a(r)},i=0;o=window._rollbarShims[i++];)n\|\|(n=o.handler),o.handler._swapAndProcessMessages(l,o.messages);window[t]=n,window._rollbarInitialized=!0}}}}]);// End Rollbar Snippet</script>... Google Tag Manager --><script defer>(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49872	54.69.251.6	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	597	OUT	POST /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1352 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	1352	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 32 3a 34 31 3a 33 38 2e 35 37 36 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 61 64 76 65 6e 74 75 72 65 73 2f 32 38 37 35 38 2d 6d 61 72 6f 6d 2d 77 61 74 65 72 66 61 6c 6c 73 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 4d 61 72 6f 6d 20 57 61 74 65 72 66 61 6c 6c 73 20 7c 20 52 69 70 61 72 69 64 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 70 61 72 69 64 65 2e 63 6f 6d 2f 61 64 76 65 6e 74 75 72 65 73 2f 32 38 37 35 38 2d 6d 61 72 6f 6d 2d 77 61 74 65 72 66 Data Ascii: {"timestamp":"2024-10-31T02:41:38.576Z","integrations":{},"type":"page","properties":{"path":"/adventures/28758-marom-waterfalls","referrer":"","search":"","title":"Marom Waterfalls \| Riparide","url":"https://www.riparide.com/adventures/28758-marom-waterf
2024-10-31 02:41:40 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:40 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://www.riparide.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:40 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49871	54.69.251.6	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	597	OUT	POST /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1403 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	1403	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 32 3a 34 31 3a 33 38 2e 36 32 35 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 41 6c 6c 22 3a 66 61 6c 73 65 2c 22 49 6e 74 65 72 63 6f 6d 22 3a 7b 22 68 69 64 65 44 65 66 61 75 6c 74 4c 61 75 6e 63 68 65 72 22 3a 74 72 75 65 7d 7d 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 61 64 76 65 6e 74 75 72 65 73 2f 32 38 37 35 38 2d 6d 61 72 6f 6d 2d 77 61 74 65 72 66 61 6c 6c 73 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 4d 61 72 6f 6d 20 57 61 74 65 72 66 61 6c 6c 73 20 7c 20 52 69 70 61 72 69 64 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: {"timestamp":"2024-10-31T02:41:38.625Z","integrations":{"All":false,"Intercom":{"hideDefaultLauncher":true}},"type":"page","properties":{"path":"/adventures/28758-marom-waterfalls","referrer":"","search":"","title":"Marom Waterfalls \| Riparide","url":"htt
2024-10-31 02:41:40 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:40 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://www.riparide.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:40 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49870	54.69.251.6	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	597	OUT	POST /v1/i HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1491 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	1491	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 32 3a 34 31 3a 33 38 2e 36 33 34 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 75 73 65 72 49 64 22 3a 6e 75 6c 6c 2c 22 74 72 61 69 74 73 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 73 65 64 5f 73 65 61 72 63 68 22 3a 74 72 75 65 2c 22 69 6e 76 69 74 65 5f 74 72 61 76 65 6c 5f 63 72 65 77 22 3a 66 61 6c 73 65 2c 22 67 6f 6f 67 6c 65 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 67 75 65 73 74 5f 6c 69 73 74 22 3a 66 61 6c 73 65 2c 22 70 72 6f 6d 6f 74 69 6f 6e 5f 62 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 74 6f 72 79 5f 6f 66 66 65 72 5f 61 76 Data Ascii: {"timestamp":"2024-10-31T02:41:38.634Z","integrations":{},"type":"identify","userId":null,"traits":{"features":{"personalised_search":true,"invite_travel_crew":false,"google_authentication":false,"guest_list":false,"promotion_banner":false,"story_offer_av
2024-10-31 02:41:40 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:40 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://www.riparide.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:40 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49873	142.250.184.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	1062	OUT	POST /ccm/collect?en=user_id_update&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&scrsrc=www.googletagmanager.com&frm=0&rnd=415356647.1730342486&auid=194757565.1730342486&npa=0&ga_uid=G-SHR37QWWNF.b7209060-8e42-4209-ad94-437e7a3f4a21&gtm=45He4au0h2v72703833za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730342498668&tfd=19733&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.riparide.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	569	IN	HTTP/1.1 200 OK Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Thu, 31 Oct 2024 02:41:40 GMT Pragma: no-cache Cache-Control: no-cache, must-revalidate Vary: Origin Vary: X-Origin Vary: Referer Content-Type: text/html Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.riparide.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49876	104.26.4.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	500	OUT	GET /photo/420570/image/hero-8d27dc9e6aaf5f3808809c4dfc0889d2.jpg HTTP/1.1 Host: assets.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.194757565.1730342486; ajs_anonymous_id=b7209060-8e42-4209-ad94-437e7a3f4a21
2024-10-31 02:41:40 UTC	1085	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:40 GMT Content-Type: image/jpeg Content-Length: 326984 Connection: close Cache-Control: public, max-age=864000 Cf-Bgj: h2pri Content-Disposition: inline; filename="image_processing20230319-2-xa38le.jpg"; filename*=UTF-8''image_processing20230319-2-xa38le.jpg ETag: "c70f6e06b2397048ebbf029f6eb2d5e7" Last-Modified: Sun, 19 Mar 2023 03:16:41 GMT x-amz-id-2: yaiATCXFnXSiRvCy3RND8qtJQI0AlM6Nk4NVOQuZf0ea0Q5yxCEwNtdf6ilD3nZXo0ckqPAa1+yaVEwXdpdfNNGEmqIiL0NdSCPZQXt7M1Q= x-amz-request-id: 65K01KQF0XSMZJD1 x-amz-server-side-encryption: AES256 x-amz-version-id: 3M4KnOq5AapGtVyUsESQUYvYjjkZgWa1 CF-Cache-Status: HIT Age: 7 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u6dnTCM%2BvTY%2BXRm8UYGFFybwxuCT5kcqkNBolfQIfFzqOlmOHDdbg3RDaPg0bl5BfyJth1%2F6yw23wWmS05gNQM0GKQEfHd3O%2FfJYgx4GXDe9kB0pDuObfk%2BPn0XxUrwGDNo83xw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db04992ebd0e84f-DFW
2024-10-31 02:41:40 UTC	284	IN	Data Raw: ff d8 ff e1 4f 51 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0d 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 20 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 ca 00 00 00 3b 01 02 00 14 00 00 00 de 00 00 00 69 87 04 00 01 00 00 00 f2 00 00 00 ac 02 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 35 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 00 00 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 33 3a 31 35 20 31 30 3a 33 39 3a 33 32 00 44 41 4e 49 45 4c 4c 45 20 4e 49 45 55 57 45 4e 44 59 4b 00 1b Data Ascii: OQExifII*(1 2;iCanonCanon EOS R5Adobe Lightroom 6.2 (Macintosh)2023:03:15 10:39:32DANIELLE NIEUWENDYK
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 01 00 00 00 03 00 00 00 27 88 03 00 01 00 00 00 64 00 00 00 00 90 07 00 04 00 00 00 30 32 33 31 03 90 02 00 14 00 00 00 4c 02 00 00 04 90 02 00 14 00 00 00 60 02 00 00 01 92 0a 00 01 00 00 00 74 02 00 00 02 92 05 00 01 00 00 00 7c 02 00 00 04 92 0a 00 01 00 00 00 84 02 00 00 05 92 05 00 01 00 00 00 8c 02 00 00 07 92 03 00 01 00 00 00 05 00 00 00 09 92 03 00 01 00 00 00 00 00 00 00 0a 92 05 00 01 00 00 00 94 02 00 00 91 92 02 00 03 00 00 00 32 31 00 00 92 92 02 00 03 00 00 00 32 31 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 14 05 00 00 03 a0 04 00 01 00 00 00 8b 02 00 00 0e a2 05 00 01 00 00 00 9c 02 00 00 0f a2 05 00 01 00 00 00 a4 02 00 00 10 a2 03 00 01 00 00 00 02 00 00 00 01 a4 03 00 01 00 00 Data Ascii: 'd0231L`t\|21210100
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: c5 bf 8a e5 5e 31 3c 83 2a 4c 16 ee c2 ce 70 35 41 0d c1 64 0d 6b 3c 91 87 25 80 dc 4a 3f 66 a3 8f c6 32 b2 09 fa 52 83 1e 5b d6 15 24 bb 6d 38 1b 77 62 e9 0b 48 28 c0 9a d1 19 4d 5a 9d 3f d5 f8 b2 5e 2c 4f 54 10 a3 a4 6a d2 36 a1 0c 90 5a db c1 38 f8 22 01 47 a6 b5 34 2c 51 8d 19 e8 7b 9f f2 b1 cb 0d b7 3b 2c 5e 9b 77 ab 35 96 96 f0 29 0c f5 53 37 00 15 b9 fd a2 e5 45 11 3e d5 18 2e 62 44 5b 60 1b b1 d4 fc c4 bb b6 96 d3 d7 98 c6 86 5a c8 f2 2b 33 18 b9 01 55 20 8f 87 8a f4 e3 f1 f2 cb 65 87 88 6c cb e9 48 2e 75 ed 1f f4 a4 c6 29 ae 6f 96 5b 8e 6c e0 24 70 b5 76 56 54 6a 3d 55 4f a6 39 37 fb 2c be 30 3c 3b ec c3 88 04 fa 79 ae a6 f2 e0 6b 54 02 14 57 5b 64 45 58 d8 20 96 8d cc 92 4d 42 06 e5 c5 bf 65 78 e0 d8 16 44 d8 b6 1e 35 6b fb 29 55 16 55 f5 15 9f Data Ascii: ^1<*Lp5Adk<%J?f2R[$m8wbH(MZ?^,OTj6Z8"G4,Q{;,^w5)S7E>.bD[`Z+3U elH.u)o[l$pvVTj=UO97,0<;ykTW[dEX MBexD5k)UU
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 36 3f 64 75 ca f2 43 8a 87 45 54 8b cc 93 08 be 26 75 9a 19 4d cd bb a8 56 2d 70 41 0a f2 33 7c 4d e9 83 fb bf e5 c8 9c 49 b4 de f7 cf 77 e6 fb eb d6 37 5c 0c 2c 59 56 64 ac ac a0 53 79 3f 6b 95 5b e1 f8 72 a8 69 f6 a2 93 26 45 6f e5 f9 75 48 5a e8 27 fb 90 bd 86 4b 96 b4 8c b2 23 2b 30 20 d4 12 43 ee 39 6c c8 d9 51 c9 c3 b7 40 90 2d 23 b0 6b 6b 6b 75 b6 d7 12 18 e6 9d 8a dc 70 ac d7 a8 79 54 12 37 58 f9 0f 85 17 e3 f8 b8 b7 1c ba 42 f7 8f 26 34 dc 96 e1 ad 8d bd 85 e9 6b 6b e9 4c 7e 91 0b eb 8a 72 46 8e 48 dd 57 d3 28 3e 15 93 fc bc 06 5d e3 70 a1 32 bb bf b0 f2 e4 e1 05 a2 47 77 19 58 5a 44 93 d6 27 9a d4 95 3c b6 66 fd bf f8 96 42 10 32 e6 c8 90 ed 4f 5c d3 2e 20 5b 1b 7f 46 fd 98 c6 1b 91 31 c8 ce 37 2d f0 af 11 c5 ab c7 f9 79 7f ad 92 10 3c f9 28 3d Data Ascii: 6?duCET&uMV-pA3\|MIw7\,YVdSy?k[ri&EouHZ'K#+0 C9lQ@-#kkkupyT7XB&4kkL~rFHW(>]p2GwXZD'<fB2O\. [F17-y<(=
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: dc 6a b4 df a5 72 4a b4 49 20 a5 18 8a 1a 8d fb f4 c3 4a 9a 47 77 6d 77 24 62 ec fa 71 28 e2 51 14 16 a7 4f 84 d3 29 e1 23 92 42 a5 fc b6 31 24 49 6a 19 c9 53 ea 4b 2f c2 d5 3d 80 14 a0 5e 98 22 09 e6 9a 5d a7 dd db c4 90 cf 3c 7e b2 da c8 ae 21 24 80 c0 54 81 5e df 16 f9 1c 90 26 c0 fe 26 51 34 88 d2 b5 5d 42 4d 6e 0b d7 b8 fd f2 ba a0 04 55 56 3e 44 f0 0b 4a 53 7e 23 19 40 46 34 02 8d de b2 9a ad e2 01 1a 3a ac 8c 80 5b 20 00 a4 44 af 20 02 8e ea 87 73 fc dc 73 5c 06 f6 dd 19 70 f2 2a 7a e4 fa 84 2b 69 a6 c1 7e 24 b8 31 b3 5d 3a 46 1d 89 92 84 f1 e4 09 5d be 1f e6 c9 80 07 44 43 8a 47 bc a4 b2 ea 9a 0d 9e 8e b6 b7 91 c9 f5 88 cc 92 c7 14 2b f1 09 25 6e 25 09 f8 be 22 07 8e 5a 22 4b 22 3a 10 92 7d 5e ca f2 eb fd 0e d5 d9 fd 36 f5 44 80 b1 3c 4d 46 e7 fc Data Ascii: jrJI JGwmw$bq(QO)#B1$IjSK/=^"]<~!$T^&&Q4]BMnUV>DJS~#@F4:[ D ss\p*z+i~$1]:F]DCG+%n%"Z"K":}^6D<MF
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 0d 58 af c5 c8 2f c4 ab 46 ca 41 a0 db 2c 57 ef 64 9f 5f 36 d1 5d 5c 2b 07 b5 83 e0 86 67 44 42 ab 5e 25 6b b7 ee c2 8d ab f1 f2 c8 dd b1 94 24 0e cb 34 fb 69 2f 60 88 5b 28 b7 b5 69 04 92 5f 12 a0 49 53 bf 0a f2 6e 54 3f ea e0 25 06 03 92 55 a8 7a 30 fa c9 6d 7b 0f a9 73 2a 83 70 89 c5 4a b0 af 20 db 27 f3 74 ff 00 2b e1 c9 70 db 38 c2 a2 87 5d 0b 5f 1a 84 57 76 aa 92 2c a3 87 d6 27 71 f0 8a d0 8a ad 09 25 fa 7f b2 c6 8d 6e a3 1e fc d0 da cf 92 fe b1 ab 47 7c c8 90 18 92 8d 65 cc 08 b6 dd e4 1c e8 b5 6a f2 63 96 03 2a aa 53 8c 13 76 95 41 f9 7f a7 5c 5a 9b 35 bd b7 8a 62 c0 ca 39 ab 92 aa dc 98 06 5d b8 b3 70 5e 2c bf 0e 1e 39 5f 26 bf 0f 98 4d 2e 74 8d 2a db 41 ba b4 7b 34 69 d2 34 9a 35 84 33 09 4a 12 81 23 dd 57 e2 2c a9 fe 4a e5 43 8a ed 9f 87 40 bc Data Ascii: X/FA,Wd_6]\+gDB^%k$4i/`[(i_ISnT?%Uz0m{spJ 't+p8]_Wv,'q%nG\|ejcSvA\Z5b9]p^,9_&M.t*A{4i453J#W,JC@
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 1b d4 98 c4 a6 63 b9 04 0d f8 ed 50 39 2f c5 f0 ff 00 2e 44 ce b9 33 10 ef 42 5d b6 bb 16 ad 2e 99 a7 ea 36 c8 f2 40 ad 6c 1a 1a 12 92 ee 4c 75 62 3e 2e 14 5e 3f ec b2 42 ab 93 12 49 3c d4 60 f2 d6 a5 af 2d cd be a6 c2 d5 be 04 b5 b8 84 11 03 4a 85 be 09 00 ea db ed fe 4e 4c 11 1d c3 5c 87 17 37 9d 6a 3a 64 f6 b7 b2 59 98 be 28 99 95 8a b5 41 e2 68 68 4d 33 20 4b 6b 71 cc 77 a4 03 a2 23 8a f2 09 ca 85 c8 a5 29 f7 ef 93 05 ac 84 54 1a 8d fb cb 28 89 16 43 24 46 26 01 7a 47 d4 91 e1 f3 c8 98 80 9e 32 9d 79 66 e6 7f ae 08 dc d5 91 d5 56 80 73 ab 30 ad 3f 52 e4 65 54 cf 19 66 ba f5 ae bd ab 5d db 7a 7c 8c 11 f2 5b 61 f6 42 92 28 e1 da 9f 6d 68 39 72 fb 39 89 19 39 92 83 2c f2 94 17 2a b6 7a 5b b0 90 ff 00 a4 24 ac 37 f5 10 c6 5c 16 ed f0 1f 87 f9 b9 65 46 fc Data Ascii: cP9/.D3B].6@lLub>.^?BI<`-JNL\7j:dY(AhhM3 Kkqw#)T(C$F&zG2yfVs0?ReTf]z\|[aB(mh9r99,*z[$7\eF
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: b6 ff 00 e5 65 b1 dc 35 1d 8a 6d a5 6b 16 57 3a a1 b1 32 3d 91 02 46 72 cc e1 18 40 46 e4 52 84 f8 63 92 04 0b ef 46 39 82 6b b9 2b d4 fc fd 63 2a 48 ba 7b 5c 5a 6a 82 46 47 9e 09 de 13 23 a7 da 62 a4 bc 72 f2 db f6 39 65 90 c6 6a cb 5c f2 0b a0 8f fd 3b e5 db 00 cd a9 58 df de 5d 10 a9 73 3c ad 23 ab c8 ca 09 f4 d6 62 02 ff 00 aa bf ea e4 bc 16 27 30 40 c9 e6 dd 05 6d df f4 6f 96 41 b6 88 ac 89 2c c1 a8 1d 0d 56 a6 30 d1 a3 6d f0 8f da c9 78 3e 6c 4e 6f 25 f1 fe 6d eb 71 14 8e d6 f9 e3 45 24 b9 78 51 81 1d 90 28 1d 32 27 08 65 e2 a5 b7 bf 9b 9a 9d d5 fa 45 77 69 69 7d 67 07 d8 79 6d d8 38 7f f7 e2 f1 60 51 bb 6d 83 c0 88 0b e3 14 66 97 f9 95 65 fa 4a 19 5e c5 e2 94 90 a5 a3 b8 66 e4 a3 7e 3c 67 12 71 ff 00 62 f8 0e 1b 65 e2 b2 38 bf 37 fc a0 2e e4 b8 bd Data Ascii: e5mkW:2=Fr@FRcF9k+c*H{\ZjFG#br9ej\;X]s<#b'0@moA,V0mx>lNo%mqE$xQ(2'eEwii}gym8`QmfeJ^f~<gqbe87.
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 28 ac 8c ac bf f0 d9 59 c9 5c db 44 6d 45 5b 51 11 24 5a a3 6a 12 69 c0 12 bf 55 93 7e 43 6e ae 4a 53 24 27 15 30 28 cd 19 ae 1a 68 63 d3 f5 0b 58 8c 65 7d 38 75 17 f4 1c 71 dc 2f a8 13 d3 6f a1 b0 ec 51 55 d5 1b ac eb 9e 6a b7 57 92 5b da c4 77 1e 85 c7 a9 0d 2a 01 54 a3 b9 3b 9a 7c 2b 86 31 0b 29 14 a2 4d 7f cc b3 34 57 4b 71 77 0c 51 f1 22 65 32 24 48 a8 7a 72 0a 13 ef 6c 3c 01 89 99 4e a3 fc c9 d7 e3 04 47 a9 19 17 8d 1a 39 61 57 a8 f9 2a 9d b2 1e 08 ee 65 e2 2b 2f e6 7e a0 6d a5 8e 45 b6 b9 8e 78 bd 26 51 ca df 92 91 46 0a 50 fc 0d fe 52 8e 59 5f e5 62 4f 26 5e 2b ff d0 e4 7a 5f 93 3c a9 ac 41 36 ae fa ac 5a 15 8b a8 16 d6 29 21 b9 91 5d 8d 14 ca f2 53 87 2e f1 0e 7f eb e6 21 c8 46 d5 6e 60 c5 13 bd d2 51 60 3c ad 67 77 7b 69 aa bc d7 2b 13 18 ad f5 Data Ascii: (Y\DmE[Q$ZjiU~CnJS$'0(hcXe}8uq/oQUjW[wT;\|+1)M4WKqwQ"e2$Hzrl<NG9aWe+/~mEx&QFPRY_bO&^+z_<A6Z)!]S.!Fn`Q`<gw{i+
2024-10-31 02:41:40 UTC	1369	IN	Data Raw: 3b 90 d7 de 5c f2 ed cc ad 73 a8 d9 5b 4b 2c bc 47 39 15 58 d4 7d 91 c9 c5 76 c0 72 94 8c 41 7d a7 97 bc bd 65 2b 3d 8d a4 16 f2 48 79 c8 62 55 8d 58 9d be 2e 14 0d ff 00 03 89 cd 23 d5 46 18 f7 26 8a 8b 4a f0 21 6b f0 8f ed c1 c6 cb 81 4e 44 b5 59 00 70 2a 7a 06 02 9b fc c7 5c 3c 65 07 18 2b d0 5b 7d 8a 15 51 d8 6c 36 f6 c7 8c a0 63 a4 af 5f d4 bc bf a3 c2 b7 37 56 a0 5b f3 a5 c5 c2 22 f1 8c 05 2d ea 48 4d 3e 11 4c 20 c8 f2 52 23 1d ca 59 a9 f9 0b c9 5a e4 62 f2 4b 38 66 77 01 96 e2 2a c4 c5 5b 7f b7 1f 12 70 8c f2 08 38 22 58 a5 c7 e5 16 89 c2 71 a6 6a 17 16 d3 d3 f7 11 5c 0e 69 51 fb 3c e8 ac 41 ff 00 29 b2 7e 2d b4 cb 15 72 61 5f f2 ad bc e4 cf 27 a9 63 c8 8f 87 9c 53 46 41 34 fd 9d fa 7d 19 33 90 06 bf 0c 94 c1 ff 00 29 35 71 6e d7 12 00 6e 36 f4 6d Data Ascii: ;\s[K,G9X}vrA}e+=HybUX.#F&J!kNDYpz\<e+[}Ql6c_7V["-HM>L R#YZbK8fw[p8"Xqj\iQ<A)~-ra_'cSFA4}3)5qnn6m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49869	54.69.251.6	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:40 UTC	597	OUT	POST /v1/t HTTP/1.1 Host: api.segment.io Connection: keep-alive Content-Length: 1294 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:40 UTC	1294	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 32 3a 34 31 3a 33 38 2e 36 33 39 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 65 76 65 6e 74 22 3a 22 41 64 76 65 6e 74 75 72 65 20 56 69 65 77 65 64 22 2c 22 74 79 70 65 22 3a 22 74 72 61 63 6b 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 61 64 76 65 6e 74 75 72 65 5f 69 64 22 3a 22 32 38 37 35 38 22 2c 22 61 64 76 65 6e 74 75 72 65 5f 74 69 74 6c 65 22 3a 22 4d 61 72 6f 6d 20 57 61 74 65 72 66 61 6c 6c 73 22 2c 22 61 64 76 65 6e 74 75 72 65 5f 74 79 70 65 22 3a 22 57 61 74 65 72 66 61 6c 6c 22 7d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 61 64 76 65 6e 74 75 72 65 73 2f 32 38 37 35 38 2d 6d 61 72 6f 6d 2d Data Ascii: {"timestamp":"2024-10-31T02:41:38.639Z","integrations":{},"event":"Adventure Viewed","type":"track","properties":{"adventure_id":"28758","adventure_title":"Marom Waterfalls","adventure_type":"Waterfall"},"context":{"page":{"path":"/adventures/28758-marom-
2024-10-31 02:41:40 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:40 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: https://www.riparide.com Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:40 UTC	21	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "success": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49877	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:41 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-uAWAbsey' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 02:41:41 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 02:41:41 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:41 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-31 02:41:41 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-10-31 02:41:41 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-10-31 02:41:41 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-10-31 02:41:41 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-10-31 02:41:41 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-10-31 02:41:42 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-10-31 02:41:42 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49880	18.245.86.101	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	547	OUT	GET /libs/amplitude-5.2.2-min.gz.js HTTP/1.1 Host: cdn.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:42 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17889 Connection: close Date: Thu, 31 Oct 2024 02:41:42 GMT Last-Modified: Mon, 21 Oct 2019 15:45:34 GMT ETag: "b568e7b3c9d94da6a1d4845b18400f7a" Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: aZB1RIRJqET7nosqRtOBVideRuh0jIV6 Accept-Ranges: bytes Server: AmazonS3 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 9d1f21fface75767578955e1853e754e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: SwlxMg4WcqKzlDW3hE0feihZZpX3ZgC76ubIYqNrlN4DnTyIYYyHDQ==
2024-10-31 02:41:42 UTC	8409	IN	Data Raw: 1f 8b 08 00 4b ab 9e 5c 00 03 cd bd 6b 77 da 48 b3 30 fa fd fc 0a ac 3d db 23 05 41 10 37 db 22 0a cb 49 9c 8c 9f 89 9d 4c ec 64 e6 79 80 f1 92 a1 01 8d 41 22 92 f0 25 16 fb b7 bf 55 7d 53 eb 02 71 66 f6 39 e7 5d 2b 31 52 ab ba ba bb aa ba aa ba fa b6 37 5d fb e3 d8 0b 7c 9d 98 b1 f1 a8 05 d7 7f 91 71 ac 39 4e fc b0 22 c1 b4 42 ee 57 41 18 47 fb fb da da 9f 90 a9 e7 93 89 b6 27 3e 2e 83 c9 7a 41 fa ec a7 ce 41 9d 58 37 6c 4d a0 4d 31 b1 dc fb fb ec b7 ee 2e 27 7d f6 a8 c7 86 ad 13 87 24 49 44 16 53 03 be ac 16 5e bc 9e 10 c4 b4 d1 e3 b9 17 99 b2 96 50 c5 75 44 2a 51 1c 7a 50 cd 9e 48 af c4 3a 31 1e 43 12 af 43 5f 8f 9d 92 e2 2f 1e 96 d7 c1 02 da 11 d1 87 fc 87 ba 17 93 d0 8d 83 b0 9f 12 44 20 ac 08 5a 6c ec 92 8f d0 a4 1d c5 91 fa 38 f0 a1 b6 eb 31 e0 76 Data Ascii: K\kwH0=#A7"ILdyA"%U}Sqf9]+1R7]\|q9N"BWAG'>.zAAX7lMM1.'}$IDS^PuD*QzPH:1CC_/D Zl81v
2024-10-31 02:41:42 UTC	9480	IN	Data Raw: 71 41 b9 ba c9 20 86 c1 96 1f dc b8 a3 c7 ce 26 d5 17 50 f5 db 2d f2 34 09 16 db f4 dc 9b 60 b1 9a 2b 8a 6e 1c b8 d1 2e d5 f5 1a bf 0b e8 e9 3d 28 89 82 b5 e0 62 c3 f4 22 6b 48 91 30 f5 6a 9f 53 e5 f9 f0 ae 0a f2 a4 2a 0c 2e a6 f4 7b e5 82 7e d8 81 47 df 42 5e 8e 8a f6 0d a0 de 8d 17 23 f0 2c 72 8d a7 e5 d7 87 cf 0b 44 78 77 71 2c 1a 9f a2 7c 62 fe 18 6b 33 c3 29 3a f3 b6 ce 99 56 97 0e 7c 9d b7 8d 31 9e 21 4f 6e e6 f1 72 b1 55 7b f9 ee ad 37 c3 73 b5 d1 9f a1 0e 4e d1 74 63 a5 cf f9 57 c9 e4 e8 0e fc 67 60 0e f3 37 c0 21 67 96 22 81 a7 3b 3c a9 67 91 8c 5d 70 8b c0 0a cc 3d 9c da 4f a6 c4 f7 c9 18 dc 27 70 81 86 91 30 50 e8 4e a2 a9 08 fc 1b ea 14 64 f4 d5 b0 2a dc 9c 29 93 84 24 22 ee 12 41 1f 92 9b 1a 38 34 84 15 38 76 63 fc 41 ef 0c 01 af bd 70 02 7e Data Ascii: qA &P-4`+n.=(b"kH0jS.{~GB^#,rDxwq,\|bk3):V\|1!OnrU{7sNtcWg`7!g";<g]p=O'p0PNd)$"A848vcAp~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49879	18.66.102.51	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	540	OUT	GET /c/hotjar-769445.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:41 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 31 Oct 2024 02:41:41 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/0dbd11ff1a37e906bbe2f25fb2cf3f69 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 21c2c1b3872c539a34b64bcf45f4054c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: -Yw4SXwqKsmViwWRIKMvEhBRN0nnb-dmdhs_vIgSnWhkUIGIkDHshA==
2024-10-31 02:41:41 UTC	13129	IN	Data Raw: 33 33 34 31 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 37 36 39 34 34 35 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 6e Data Ascii: 3341window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":769445,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"an
2024-10-31 02:41:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49883	104.26.5.52	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	535	OUT	GET /graphql HTTP/1.1 Host: www.riparide.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ahoy_visitor=5831777e-5211-420f-abb1-41c850fb67a4; ahoy_visit=9cfccc7e-6133-40d1-a29f-53f9aa042a23; _session_id=b6e68e46cd56cd7de2666b920d777453; _gcl_au=1.1.194757565.1730342486
2024-10-31 02:41:41 UTC	851	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 02:41:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1730342501&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Sbj6qrWfTPYha4YXajp1DjkWXa2JhQo0BWp5PCFyEoA%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1730342501&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Sbj6qrWfTPYha4YXajp1DjkWXa2JhQo0BWp5PCFyEoA%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin
2024-10-31 02:41:41 UTC	1531	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 52 65 67 75 6c 61 72 2d 63 39 65 64 38 62 61 61 61 39 31 62 38 39 36 36 39 37 34 36 36 32 65 34 36 32 30 64 30 64 61 33 35 34 33 30 61 33 34 37 62 61 61 39 34 63 62 30 39 32 65 31 35 38 66 35 61 65 63 38 62 61 37 38 2e 77 6f 66 66 3e 3b 20 72 65 6c 3d 70 72 65 6c 6f 61 64 3b 20 61 73 3d 66 6f 6e 74 3b 20 74 79 70 65 3d 66 6f 6e 74 2f 77 6f 66 66 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 3c 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 54 2d 57 61 6c 73 68 65 69 6d 2d 50 72 6f 2d 4d 65 64 69 75 6d 2d 39 61 33 33 66 62 32 63 63 65 61 66 32 62 30 33 39 62 33 35 35 31 65 39 39 65 38 63 62 30 35 63 63 62 65 63 38 33 31 31 Data Ascii: Link: </assets/fonts/GT-Walsheim-Pro-Regular-c9ed8baaa91b8966974662e4620d0da35430a347baa94cb092e158f5aec8ba78.woff>; rel=preload; as=font; type=font/woff; crossorigin=anonymous,</assets/fonts/GT-Walsheim-Pro-Medium-9a33fb2cceaf2b039b3551e99e8cb05ccbec8311
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 64 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 36 34 37 31 31 39 32 37 36 35 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 52 69 70 61 72 69 64 65 22 20 6e 61 6d 65 3d 22 73 6d 61 72 74 62 61 6e 6e 65 72 3a 74 69 74 6c 65 22 20 2f 3e 3c 6d 65 74 61 Data Ascii: de0<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta content="width=device-width,initial-scale=1" name="viewport" /><meta content="app-id=6471192765" name="apple-itunes-app" /><meta content="Riparide" name="smartbanner:title" /><meta
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 61 72 69 64 65 20 68 65 6c 70 73 20 79 6f 75 20 70 6c 61 6e 20 61 6e 64 20 62 6f 6f 6b 20 79 6f 75 72 20 6e 65 78 74 20 65 73 63 61 70 65 20 74 68 72 6f 75 67 68 20 6f 75 72 20 53 74 6f 72 79 74 65 6c 6c 65 72 20 74 72 61 76 65 6c 20 67 75 69 64 65 73 2e 20 54 68 65 73 65 20 67 75 69 64 65 73 2c 20 63 61 6c 6c 65 64 20 52 69 70 61 72 69 64 65 20 53 74 6f 72 69 65 73 2c 20 63 6f 6d 65 20 70 61 63 6b 65 64 20 77 69 74 68 20 75 6e 69 71 75 65 20 73 74 61 79 73 2c 20 6c 6f 63 61 6c 20 61 64 76 65 6e 74 75 72 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 20 76 69 62 65 73 2e 2e 2e 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 Data Ascii: aride helps you plan and book your next escape through our Storyteller travel guides. These guides, called Riparide Stories, come packed with unique stays, local adventures and social vibes...." name="description" /><link rel="preload" href="/assets/fonts
2024-10-31 02:41:41 UTC	821	IN	Data Raw: 70 74 20 64 65 66 65 72 3d 22 22 20 69 64 3d 22 73 74 72 69 70 65 2d 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 0a 76 61 72 20 5f 72 6f 6c 6c 62 61 72 43 6f 6e 66 69 67 20 3d 20 7b 0a 20 20 61 63 63 65 73 73 54 6f 6b 65 6e 3a 20 22 35 66 63 38 30 35 61 38 31 39 32 31 34 34 64 34 38 33 31 31 33 37 61 62 31 35 34 61 38 63 66 61 22 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 63 61 75 67 68 74 3a 20 74 72 75 65 2c 0a 20 20 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 20 74 72 75 65 2c 0a 20 20 70 61 79 6c 6f 61 64 3a Data Ascii: pt defer="" id="stripe-script" src="https://js.stripe.com/v3/"></script><script type="text/javascript" async>var _rollbarConfig = { accessToken: "5fc805a8192144d4831137ab154a8cfa", captureUncaught: true, captureUnhandledRejections: true, payload:
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 37 38 61 0d 0a 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 72 2c 6f 2e 63 3d 65 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6e 29 7b 6f 2e 6f 28 72 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: 78ats,o),t.l=!0,t.exports}o.m=r,o.c=e,o.d=function(r,e,n){o.o(r,e)\|\|Object.defineProperty(r,e,{enumerable:!0,get:n})},o.r=function(r){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(r,Symbol.toStringTag,{value:"Module"}),Object.def
2024-10-31 02:41:41 UTC	568	IN	Data Raw: 3a 20 49 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 22 2c 72 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 7d 7d 76 61 72 20 6c 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 65 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 72 2c 74 68 69 73 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f 6e 45 72 72 6f 72 3d 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6c 2b 2b 3b 74 68 69 73 2e 73 68 69 6d 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 26 26 28 77 69 6e 64 6f 77 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 5b 6f 5d 3d 7b 68 61 6e 64 6c 65 72 3a 65 2c 6d 65 73 73 61 67 65 73 3a 5b 5d 7d 29 7d 76 61 72 20 73 3d 6f 28 34 29 Data Ascii: : Internal error",r)}catch(r){}}}}var l=0;function i(r,e){this.options=r,this._rollbarOldOnError=null;var o=l++;this.shimId=function(){return o},"undefined"!=typeof window&&window._rollbarShims&&(window._rollbarShims[o]={handler:e,messages:[]})}var s=o(4)
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 31 37 32 61 0d 0a 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 73 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 64 3d 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 22 2c 69 2e 73 72 63 3d 6e 2e 72 6f 6c 6c 62 61 72 4a 73 55 72 6c 2c 6f 7c 7c 28 69 2e 61 73 79 6e 63 3d 21 30 29 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 6c 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 Data Ascii: 172aeElement("script"),s=e.getElementsByTagName("script")[0],d=s.parentNode;i.crossOrigin="",i.src=n.rollbarJsUrl,o\|\|(i.async=!0),i.onload=i.onreadystatechange=a((function(){if(!(l\|\|this.readyState&&"loaded"!==this.readyState&&"complete"!==this.readySta
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 6c 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 2c 63 61 70 74 75 72 65 45 76 65 6e 74 2c 63 61 70 74 75 72 65 44 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 70 74 75 72 65 4c 6f 61 64 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 66 3d 30 3b 66 3c 70 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 69 2e 70 72 6f 74 6f 74 79 70 65 5b 70 5b 66 5d 5d 3d 75 28 70 5b 66 5d 29 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 75 70 53 68 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 72 29 7b 76 61 72 20 6f 3d 65 2e 67 6c 6f 62 61 6c 41 6c 69 61 73 7c 7c 22 52 6f 6c 6c 62 61 72 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 3b 72 2e 5f 72 6f 6c 6c 62 61 72 53 68 69 6d 73 3d 7b 7d 2c Data Ascii: leUnhandledRejection,captureEvent,captureDomContentLoaded,captureLoad".split(","),f=0;f<p.length;++f)i.prototype[p[f]]=u(p[f]);r.exports={setupShim:function(r,e){if(r){var o=e.globalAlias\|\|"Rollbar";if("object"==typeof r[o])return r[o];r._rollbarShims={},
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 45 72 72 6f 72 73 28 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 6e 28 72 2c 65 2c 74 2c 6f 29 7d 3b 6f 26 26 28 61 2e 5f 72 6f 6c 6c 62 61 72 4f 6c 64 4f 6e 45 72 72 6f 72 3d 74 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 61 7d 7d 2c 63 61 70 74 75 72 65 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6f 29 7b 69 66 28 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 26 26 72 2e 5f 72 6f 6c 6c 62 61 72 55 52 48 2e 62 65 6c 6f 6e 67 73 54 6f 53 68 69 6d 26 26 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 Data Ascii: Errors();var a=function(){var o=Array.prototype.slice.call(arguments,0);n(r,e,t,o)};o&&(a._rollbarOldOnError=t),r.onerror=a}},captureUnhandledRejections:function(r,e,o){if(r){"function"==typeof r._rollbarURH&&r._rollbarURH.belongsToShim&&r.removeEventList
2024-10-31 02:41:41 UTC	1369	IN	Data Raw: 63 65 2c 46 69 6c 65 52 65 61 64 65 72 2c 48 54 4d 4c 55 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 2c 49 44 42 44 61 74 61 62 61 73 65 2c 49 44 42 52 65 71 75 65 73 74 2c 49 44 42 54 72 61 6e 73 61 63 74 69 6f 6e 2c 4b 65 79 4f 70 65 72 61 74 69 6f 6e 2c 4d 65 64 69 61 43 6f 6e 74 72 6f 6c 6c 65 72 2c 4d 65 73 73 61 67 65 50 6f 72 74 2c 4d 6f 64 61 6c 57 69 6e 64 6f 77 2c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2c 53 56 47 45 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 2c 53 63 72 65 65 6e 2c 54 65 78 74 54 72 61 63 6b 2c 54 65 78 74 54 72 61 63 6b 43 75 65 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 2c 57 65 62 53 6f 63 6b 65 74 2c 57 65 62 53 6f 63 6b 65 74 57 6f 72 6b 65 72 2c 57 6f 72 6b 65 72 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 58 4d 4c 48 74 74 70 Data Ascii: ce,FileReader,HTMLUnknownElement,IDBDatabase,IDBRequest,IDBTransaction,KeyOperation,MediaController,MessagePort,ModalWindow,Notification,SVGElementInstance,Screen,TextTrack,TextTrackCue,TextTrackList,WebSocket,WebSocketWorker,Worker,XMLHttpRequest,XMLHttp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49882	18.239.18.100	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	724	OUT	GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:41 UTC	1445	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 200 Connection: close Last-Modified: Fri, 25 Oct 2024 20:04:30 GMT Accept-Ranges: bytes Server: Cloudfront Date: Thu, 31 Oct 2024 02:41:41 GMT Cache-Control: max-age=31536000 Etag: "3437aaddcdf6922d623e172c2d6f9278" Vary: Accept-Encoding Via: 1.1 c2905f891f96a0ec9c7fab16916dbb46.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 3021 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Access-Control-Allow-Origin: * Content-Security-Policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report Content-Security-Policy-Report-Only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report Origin-Agent-Cluster: ?1 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: o1moA6GiwFSGVlB_r_ZpLLXtTFU7mN2jhhc1MY3r69MS236VmoWHuQ==
2024-10-31 02:41:41 UTC	200	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 76 33 2f 66 69 6e 67 65 72 70 72 69 6e 74 65 64 2f 6a 73 2f 6d 2d 6f 75 74 65 72 2d 31 35 61 32 62 34 30 61 30 35 38 64 64 66 66 31 63 66 66 64 62 36 33 37 37 39 66 65 33 64 65 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49881	13.224.189.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:41 UTC	533	OUT	GET /widget/ahlg24mu HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:42 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2667 Connection: close Date: Thu, 31 Oct 2024 02:41:43 GMT Last-Modified: Wed, 30 Oct 2024 17:27:40 GMT ETag: "f12eeebc65f88502799daf943d9e7c4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: Ur6LB77X8z1qsMrk6CSYSvnt6N10Z9wM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 c379418fd6100691807f32f274ebe9ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xCpneYFrrElTw6qCi2nuBg_uq2Q4io6ngUQNNPZANlqG6H6yXsfFXg== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-10-31 02:41:42 UTC	2667	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0b 73 d3 3a 16 fe 2b 8e 77 27 b5 a7 8e 93 94 b6 d0 14 c3 96 52 96 ce 52 60 08 73 f7 ee 94 6e 46 b1 95 44 e0 48 be b2 d2 34 37 c9 7f df 4f f2 23 76 92 16 ee cc 32 d0 da 3a 4f 1d 9d c7 27 d3 18 cd 78 a8 98 e0 8e bb bc 27 d2 a2 c1 f2 f9 69 f7 b8 db 2b d7 a9 bb a4 3e 7d 48 84 54 69 b0 4c c5 4c 86 74 30 25 49 cf 9e b0 28 a2 bc 95 2d b5 b0 64 7b 24 61 83 21 49 29 88 4a 25 69 af dd c6 4a 8b 91 a9 cf b8 a2 32 14 78 10 b6 97 cc 86 31 0b 07 09 51 93 0d e7 f7 b4 64 0a 23 ee e3 57 db f6 d2 09 a5 2a 1d 24 52 3c 2c b6 f8 0b e6 56 c6 63 04 aa ec 10 a6 5c c9 c5 5e e1 f9 7c 5e 5a 6b 49 aa 77 c7 f8 38 d3 61 a4 a0 3e a2 0f fe 44 4d 63 db 63 3c 55 24 8e 07 53 11 d1 9d fd 25 9b bd e1 5f 69 35 4a f9 86 6b f4 ac 73 12 d1 d3 b3 90 84 a7 c7 e4 Data Ascii: Ys:+w'RR`snFDH47O#v2:O'x'i+>}HTiLLt0%I(-d{$a!I)J%iJ2x1Qd#W*$R<,Vc\^\|^ZkIw8a>DMcc<U$S%_i5Jks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49888	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:42 UTC	409	OUT	GET /next-integrations/integrations/amplitude/3.3.3/amplitude.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3181 Connection: close Date: Thu, 31 Oct 2024 02:41:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "41d391d5b119fb8c4fe6edd0c6fc1d21" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: dPEAOL7ExjtccGMMvRthKStk2d2FNhP0 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 71b147cd3102755b55ba8b6fd34e3f4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: TayVGr8Y2b745wMsZDMol6W4PWvuIiL6iBaRx5iKe_f98vfxlcoPPA==
2024-10-31 02:41:43 UTC	3181	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 5a fb 73 db 36 12 fe fd fe 0a 99 77 a3 90 17 84 7e 24 6d af 52 d8 4c 26 bd a6 ee e5 e1 24 76 3b 37 1a 8d 07 26 61 19 29 05 d0 00 68 47 95 f9 bf df 2e 00 3e 25 c5 6e 6f 26 63 91 78 2e 76 17 df 7e bb cc 2d 17 99 bc 9d 3d a2 cb 22 e7 a6 cc d8 8f ac d0 8f e6 a3 64 34 0b f6 b9 30 6c a1 a8 e1 52 e8 fd 1b 06 23 d5 7e 2a 97 4b 78 8d e9 b7 87 d9 77 17 8c 3e fd 2e 3b ca d8 37 d9 b3 8b 6f bf 8f 3f eb 60 3e bd 1d 2e f9 46 d2 8c 29 bb e8 65 29 52 5c 2e 8c 46 eb 91 62 a6 54 62 e4 c6 c7 cd f0 e3 76 d7 a4 19 cf a2 75 fd 3c 32 a1 81 37 a9 c2 1b aa 46 8a 68 42 13 33 3b 98 93 02 7e 0e e7 a4 84 9f a3 39 49 93 03 92 27 b3 f9 34 7d 4e e3 9c 89 85 b9 9a a6 8f 1f 47 3a a1 b3 74 4e de 5f 7c 66 a9 89 0b 25 8d 34 ab 82 c5 57 54 bf bf 15 27 4a 16 4c Data Ascii: Zs6w~$mRL&$v;7&a)hG.>%no&cx.v~-="d40lR#~*Kxw>.;7o?`>.F)e)R\.FbTbvu<27FhB3;~9I'4}NG:tN_\|f%4WT'JL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49889	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:42 UTC	420	OUT	GET /next-integrations/integrations/facebook-pixel/2.11.5/facebook-pixel.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3273 Connection: close Date: Thu, 31 Oct 2024 02:41:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "a7cd49c834a0851140e3304c91cb34d0" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: j4m0DyDSierKPJq1r420lhjLq60dvugM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7ce1191b390045e05b9cc74f7514b77a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 1rc4bnvJV5H0uzPuE9jKj5ufDryiuMUA4deWTkNpt6ZsYwbZgM6jvQ==
2024-10-31 02:41:43 UTC	3273	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a 7b 6f 1b 37 12 ff bf 9f 42 de 03 94 5d 94 5d cb e9 eb 2a 65 1b 04 4e da cb 21 69 82 73 d2 e2 a0 0a 06 b5 a4 24 26 2b 72 43 72 ed 28 d2 7e f7 9b 21 f7 29 c9 8e 0d f4 0e 77 87 06 81 c5 c7 70 38 1c ce fc 38 e4 ec b5 90 4c 5d 4f 1f 2c 68 ca e7 4a bd ff 2a 17 1f 79 f6 94 e7 e6 c1 6c 90 0c a6 c1 a9 90 96 2f 35 b5 42 49 73 7a c5 81 5c 9f a6 6a bd 86 6a 4c bf 3b 63 df cf 39 fd fa 7b f6 90 f1 6f d9 37 f3 ef 7e 88 df 99 60 36 b9 3e ca f7 85 a2 8c 6b c7 79 51 c8 14 79 86 d1 60 3b d0 dc 16 5a 0e aa 41 41 7f d0 f3 56 80 60 96 34 e3 78 b4 ad cb 03 1b 5a a8 29 1d 5e 51 3d 10 84 12 93 d8 e9 68 46 72 f8 39 9b 91 14 7e 1e ce 08 4b 46 24 4b a6 b3 09 7b 64 e2 8c cb a5 5d 4d d8 97 5f 46 34 31 53 36 23 af e6 ef 78 6a e3 5c 2b ab ec 26 e7 f1 Data Ascii: Z{o7B]]eN!is$&+rCr(~!)wp88L]O,hJyl/5BIsz\jjL;c9{o7~`6>kyQy`;ZAAV`4xZ)^Q=hFr9~KF$K{d]M_F41S6#xj\+&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49887	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:42 UTC	407	OUT	GET /next-integrations/integrations/intercom/3.1.0/intercom.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1879 Connection: close Date: Thu, 31 Oct 2024 02:41:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "de0a11b95aca20dc7cc5bcec42adc9e4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: WaLj40l3ZG2BEFOf2lZRQmhraY5Uj_59 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 163be08bc1bc44818353c4fd88655bee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: 1SRzM_XaqXlDRgOL-0NhTaDw-LXoZwF924kssB1R8yf-ii6kgkJinQ==
2024-10-31 02:41:43 UTC	1879	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 57 6d 8f db 36 12 fe de 5f e1 a8 80 23 5d 59 ad 37 e9 25 57 29 bc a2 ed 1d ae 5b 64 b1 87 a6 41 71 67 18 06 2d d1 36 13 59 64 28 6a f7 7c b6 fe fb 3d 43 bd 58 f6 6e 0e 01 16 ab 21 39 33 9c 37 3e 33 7e 50 65 ae 1f e6 cf 55 e9 a4 cd f4 ee 6f d2 54 cf 17 13 3e 99 07 57 b4 b7 b1 c2 29 5d 56 57 f7 12 8c f6 0a 2c 3b 2c 63 f1 ea 3a 7f bd 92 e2 e5 eb fc 45 2e ff 9c 7f b7 7a f5 7d fc a1 0a 16 e9 c3 85 c6 b7 5a e4 d2 7a 9d eb ba cc 48 5b 18 4d 0e 13 2b 5d 6d cb 49 cb 1e f7 dc 37 a7 3b f9 c0 ee a2 43 4f 4f 64 28 b1 d2 36 bc 17 76 52 32 c5 0c 97 f3 d9 82 65 f8 5c 2f 58 8d cf 8b 05 cb f9 8c 15 7c be 48 f3 37 26 2e 64 b9 71 db 34 ff e6 9b 48 71 33 cf 17 ec 6e f5 41 66 2e 36 56 3b ed f6 46 c6 5b 51 dd 3d 94 ff b4 da 48 eb f6 71 26 8a 22 Data Ascii: Wm6_#]Y7%W)[dAqg-6Yd(j\|=CXn!937>3~PeUoT>W)]VW,;,c:E.z}ZzH[M+]mI7;COOd(6vR2e\/X\|H7&.dq4Hq3nAf.6V;F[Q=Hq&"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49891	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:42 UTC	403	OUT	GET /next-integrations/integrations/hotjar/1.4.0/hotjar.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1337 Connection: close Date: Thu, 31 Oct 2024 02:41:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "b0cfd2e8e8967ad708b94773be4834a7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: MZ.YSZERq0A220C3fEMPnFPsX5gFCKd9 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 507b5edb20d0e1a0b73c8687f53defa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: zAyRWPvDiYv084H6QBVlp_I50UAMeBIxuiGcKJgPVoq8ZBtBzs5u7w==
2024-10-31 02:41:43 UTC	1337	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 6d 6f db 36 10 fe de 5f 21 73 80 2a 22 0c 6d 77 5d ba 59 25 8a ad db 90 0e 7d 19 d6 75 5f 0c 23 a0 a5 73 44 57 26 15 92 4a e6 39 fa ef 3b ea c5 2f 49 0b 14 30 2c 52 3c de 3d f7 dc f1 a1 ee 94 ce cd dd fc 69 61 fc 5a da 5f a1 72 4f 17 91 88 e6 64 ac b4 87 6b 2b bd 32 da 8d 6f 01 cd ec 38 33 9b 0d 4e b9 bc 98 e6 2f 96 20 bf 7f 91 3f cb e1 87 fc f9 f2 e2 27 be 76 64 91 de 9d f8 7b 6b 64 0e b6 f5 b8 aa 75 16 7c 25 34 da 45 16 7c 6d 75 d4 19 f3 ce f6 cd 21 9e d8 1b 7b ba 1b c6 11 24 80 33 63 93 5b 69 23 cb 6a 26 05 cc 27 0b e6 f0 31 5d b0 1c 1f cf 16 6c 25 26 ac 10 f3 45 ba 7a 29 79 09 fa da 17 e9 ea ec 8c d6 42 ce 57 0b f6 61 b9 86 cc f3 ca 1a 6f fc b6 02 5e 48 f7 e1 4e ff 69 4d 05 d6 6f 79 26 cb 32 51 ac a6 71 ac e6 f5 22 Data Ascii: Vmo6_!s*"mw]Y%}u_#sDW&J9;/I0,R<=iaZ_rOdk+2o83N/ ?'vd{kdu\|%4E\|mu!{$3c[i#j&'1]l%&Ez)yBWao^HNiMoy&2Qq"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49890	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:42 UTC	424	OUT	GET /next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	726	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4743 Connection: close Date: Thu, 31 Oct 2024 02:41:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:16 GMT ETag: "6a3ed21f9b6777c0c37e6e248ea22387" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: jiinLnhNKtSMsrpHvOzN4SxprXBvOKZw Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 507b5edb20d0e1a0b73c8687f53defa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: WcdP2Qo5blYvSGQa8DtfcNtvEJ9DTDM3MVxAypsYF90MDhdV9CU_IA==
2024-10-31 02:41:43 UTC	4743	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5b eb 6f 1b 39 92 ff be 7f 85 dc 07 68 ba 11 4e db ce ed cc ec 4a e1 04 b9 24 97 f3 6e e2 04 93 79 7c 10 04 83 66 d3 32 e3 56 b3 d3 64 db d1 59 fa df af 8a ec 07 fb 61 4b 09 76 16 38 20 88 f9 ac 26 8b f5 f8 55 91 ba 93 59 a2 ee 16 df ad 94 5a a5 e2 7b 96 b1 74 63 24 d7 af 44 ae bf 5b 4e e8 64 11 1c cb cc 88 55 c1 8c 54 99 3e be 15 30 a1 38 e6 6a bd 86 6a cc 7e 3c 4d 7e ba 14 ec 3f 7f 4a 9e 26 e2 87 e4 af 97 3f fe 3d fe a4 83 e5 fc ee 01 ca 6f 15 4b 44 61 69 5f 95 19 47 aa 61 34 b9 9f 14 c2 94 45 36 a9 a6 05 fd 69 67 ed 22 82 25 6d 66 8a e8 be 2e 4f 4c 68 a0 a6 8a f0 96 15 93 8c 30 c2 a9 59 9c 2c 89 86 3f a7 4b 92 c0 9f a7 4b 52 d2 13 b2 a6 8b e5 bc 7c c6 e3 54 64 2b 73 3d 2f 9f 3c 89 18 e5 8b 72 49 de 5f 7e 12 dc c4 79 a1 Data Ascii: [o9hNJ$ny\|f2VdYaKv8 &UYZ{tc$D[NdUT>08jj~<M~?J&?=oKDai_Ga4E6ig"%mf.OLh0Y,?KKR\|Td+s=/<rI_~y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49895	44.241.94.217	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:43 UTC	634	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1476 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	1476	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 38 32 33 31 65 36 33 39 34 61 65 32 36 66 37 38 65 39 30 33 36 38 66 36 62 33 33 35 62 37 62 65 26 63 6c 69 65 6e 74 3d 66 33 34 63 30 38 66 33 32 30 63 37 37 65 34 34 66 38 61 35 66 34 62 32 39 61 62 35 34 35 62 61 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 39 64 63 65 31 34 34 31 2d 31 64 61 34 2d 34 63 62 31 2d 61 61 30 64 2d 38 39 63 66 38 39 32 61 37 37 36 37 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 33 30 33 34 32 35 30 32 30 36 39 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 33 30 Data Ascii: checksum=8231e6394ae26f78e90368f6b335b7be&client=f34c08f320c77e44f8a5f4b29ab545ba&e=%5B%7B%22device_id%22%3A%229dce1441-1da4-4cb1-aa0d-89cf892a7767R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1730342502069%2C%22event_id%22%3A1%2C%22session_id%22%3A1730
2024-10-31 02:41:43 UTC	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:43 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2024-10-31 02:41:43 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49896	13.33.187.19	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:43 UTC	548	OUT	GET /modules.625495a901d247c3e8d4.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:43 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226541 Connection: close Date: Mon, 28 Oct 2024 16:03:23 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "ec34f7a549bb7b8a0957652de86e3475" Last-Modified: Mon, 28 Oct 2024 16:02:55 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: By5eA5zfkjlml8UURQpKdaBj04pH0Uvu0GfMPVWpq02UGSkOexLg6A== Age: 211100
2024-10-31 02:41:43 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 32 35 34 39 35 61 39 30 31 64 32 34 37 63 33 65 38 64 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-10-31 02:41:43 UTC	16384	IN	Data Raw: 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 29 29 2c 68 6a 2e 62 72 69 64 67 65 2e 66 6c 75 73 68 55 73 65 72 41 74 74 72 69 62 75 74 65 73 28 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 28 6e 75 6c 6c 2c 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 7d 65 6c 73 65 20 65 28 45 72 72 6f 72 28 22 6e 6f 5f 75 73 65 72 22 29 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 66 6c 75 73 68 22 29 2c 67 65 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 73 65 72 5f 69 64 22 3d 3d 3d 65 3f 6f 2e 69 64 3a 65 26 26 6f 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 67 65 Data Ascii: own_failure")}),"userAttributes"))),hj.bridge.flushUserAttributes(o.id,o.attributes),e(null,o.id,o.attributes)}else e(Error("no_user"))}),"userAttributes.flush"),get:hj.tryCatch((function(e){return"user_id"===e?o.id:e&&o.attributes[e]}),"userAttributes.ge
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 7c 53 6b 79 66 69 72 65 7c 54 65 61 72 7c 58 56 36 38 37 35 7c 58 56 36 39 37 35 7c 47 6f 6f 67 6c 65 2e 57 69 72 65 6c 65 73 73 2e 54 72 61 6e 73 63 6f 64 65 72 2f 69 29 7c 7c 74 28 2f 4f 70 65 72 61 2f 69 29 26 26 74 28 2f 57 69 6e 64 6f 77 73 2e 4e 54 2e 35 2f 69 29 26 26 74 28 2f 48 54 43 7c 58 64 61 7c 4d 69 6e 69 7c 56 61 72 69 6f 7c 53 41 4d 53 55 4e 47 5c 2d 47 54 5c 2d 69 38 30 30 30 7c 53 41 4d 53 55 4e 47 5c 2d 53 47 48 5c 2d 69 39 2f 69 29 3f 22 6d 6f 62 69 6c 65 22 3a 74 28 2f 57 69 6e 64 6f 77 73 2e 28 4e 54 7c 58 50 7c 4d 45 7c 39 29 2f 29 26 26 21 74 28 2f 50 68 6f 6e 65 2f 69 29 7c 7c 74 28 2f 57 69 6e 28 39 7c 2e 39 7c 4e 54 29 2f 69 29 7c 7c 74 28 2f 4d 61 63 69 6e 74 6f 73 68 7c 50 6f 77 65 72 50 43 2f 69 29 26 26 21 74 28 2f 53 69 6c Data Ascii: \|Skyfire\|Tear\|XV6875\|XV6975\|Google.Wireless.Transcoder/i)\|\|t(/Opera/i)&&t(/Windows.NT.5/i)&&t(/HTC\|Xda\|Mini\|Vario\|SAMSUNG\-GT\-i8000\|SAMSUNG\-SGH\-i9/i)?"mobile":t(/Windows.(NT\|XP\|ME\|9)/)&&!t(/Phone/i)\|\|t(/Win(9\|.9\|NT)/i)\|\|t(/Macintosh\|PowerPC/i)&&!t(/Sil
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 2e 6a 6f 69 6e 28 22 2e 22 29 3a 22 22 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2e 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 63 28 65 29 7d 76 61 72 20 77 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 73 3a 21 30 2c 69 67 6e 6f 72 65 55 55 49 44 43 6c 61 73 73 65 73 3a 21 30 2c 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 3a 35 2c 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 Data Ascii: .join("."):"")},_=function(e){return e.replace(t.disallowedTagNameCharactersRE,"")};return c(e)}var w={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasses:!0,ignoreUUIDClasses:!0,maxClassesAllowed:5,disallowedTagNameCharac
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 73 73 3a 5b 5d 2c 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 3a 5b 5d 2c 61 63 74 69 76 65 3a 21 31 7d 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 65 61 72 50 61 67 65 43 6f 6e 74 65 6e 74 28 29 2c 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 72 65 73 65 74 4d 75 74 61 74 69 6f 6e 4c 69 73 74 65 6e 65 72 73 28 29 2c 47 3d 21 31 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 54 72 65 65 4d 69 72 72 6f 72 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 6d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 41 76 61 69 6c 61 62 6c 65 26 26 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 54 72 65 65 28 4a 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 58 29 7d 29 2c 22 62 65 68 61 76 69 6f Data Ascii: ss:[],autoTagsToProcess:[],active:!1}),hj.eventStream.clearPageContent(),hj.treeMirror.resetMutationListeners(),G=!1},initializeTreeMirror:hj.tryCatch((function(e){hj.treeMirror.mutationObserverAvailable&&hj.treeMirror.getTree(J.bind(null,e),X)}),"behavio
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 74 22 29 2c 74 68 69 73 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 68 69 6c 64 4c 69 73 74 3d 21 30 2c 6e 2e 61 64 64 65 64 3d 21 30 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 22 29 2c 74 68 69 73 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 2e 63 68 69 6c 64 4c 69 73 74 29 7b 69 66 28 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6e 2e 61 64 64 65 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 2e 70 61 72 65 6e Data Ascii: t"),this.insertedIntoParent=hj.tryCatch((function(){n.childList=!0,n.added=!0}),"NodeChange.insertedIntoParent"),this.getOldParent=hj.tryCatch((function(){if(n.childList){if(n.oldParentNode)return n.oldParentNode;if(n.added)return null}return n.node.paren
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 73 65 72 69 61 6c 69 7a 65 41 64 64 65 64 41 6e 64 4d 6f 76 65 64 22 29 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 74 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 3b 72 7c 7c 28 28 72 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 65 29 29 2e 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 2c 74 2e 73 65 74 28 65 2c 72 29 29 3b 76 61 72 20 69 3d 65 2e 67 Data Ascii: eeMirrorClient.serializeAddedAndMoved"),this.serializeAttributeChanges=hj.tryCatch((function(e){var t=new te;return Object.keys(e).forEach((function(n){e[n].forEach((function(e){var r=t.get(e);r\|\|((r=o.serializeNode(e)).attributes={},t.set(e,r));var i=e.g
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 2e 69 6e 73 65 72 74 52 75 6c 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 74 68 69 73 2e 6f 77 6e 65 72 4e 6f 64 65 7c 7c 74 68 69 73 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 2c 73 3d 74 5b 30 5d 2c 63 3d 74 5b 31 5d 2c 75 3d 21 21 6f 26 26 6f 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3b 69 66 28 75 7c 7c 28 30 2c 72 2e 6d 24 29 28 6f 29 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 73 68 65 65 74 49 64 Data Ascii: .insertRule,CSSStyleSheet.prototype.insertRule=function(){var t=Array.prototype.slice.call(arguments),n=e.apply(this,arguments),o=this.ownerNode\|\|this.ownerHostNode,s=t[0],c=t[1],u=!!o&&o.nodeType===Node.DOCUMENT_NODE;if(u\|\|(0,r.m$)(o)){var l=this.sheetId
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 75 6c 64 20 73 65 6e 64 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 66 6c 75 73 68 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 73 68 6f 75 6c 64 53 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3d 21 30 7d 29 2c 22 64 61 74 61 22 29 2c 73 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 5f 77 73 2e 73 65 6e 64 28 53 2e 5f 77 73 2e 5f 6d 73 67 50 72 65 66 69 78 2b 22 65 6e 64 5f 73 69 67 6e 61 6c 22 29 2c 53 2e 5f 77 73 2e 63 6c 6f 73 65 Data Ascii: uld send end signal to Web Socket with the next flush","websocket"),S.shouldSendEndSignal=!0}),"data"),sendEndSignal:hj.tryCatch((function(){hj.log.debug("Sending end signal to Web Socket","websocket"),S._ws.send(S._ws._msgPrefix+"end_signal"),S._ws.close
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 6d 7d 7d 29 3b 76 61 72 20 72 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 75 6e 6b 6e 6f 77 6e 22 3b 73 77 69 74 63 68 28 68 6a 2e 75 72 6c 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 22 68 6a 49 6e 63 6c 75 64 65 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 22 29 29 7b 63 61 73 65 22 30 22 3a 72 65 74 75 72 6e 20 65 3d 21 31 2c 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 59 6f 75 20 68 61 76 65 20 73 65 74 20 69 6e 63 6c 75 64 65 64 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 Data Ascii: m}});var r=Math.random(),o=function(){return function(){var e,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"unknown";switch(hj.url.getParameter("hjIncludeInSessionSample")){case"0":return e=!1,hj.log.debug("You have set includedInSessionSample

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49897	64.233.167.157	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:43 UTC	948	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-42356415-1&cid=332502837.1730342499&jid=1109842635&gjid=1131531949&_gid=453694327.1730342502&_u=aCDAgEABAAAAAGgCIAD~&z=2098303480 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.riparide.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlvyOnLvwP83BXQiWFI40K9zv3dz4IaJdxrXFjRIYltQDh6psvQbGRF-AIt
2024-10-31 02:41:44 UTC	991	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.riparide.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Thu, 31 Oct 2024 02:41:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:44 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49900	18.245.46.10	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:43 UTC	499	OUT	GET /frame.75f8d952.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 187117 Connection: close Date: Thu, 31 Oct 2024 02:41:45 GMT Last-Modified: Wed, 30 Oct 2024 17:25:01 GMT ETag: "a419ff95ab0fe313515d05fec50e9965" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: ly12nG2TYtRFOToAMzjweYMd.1EI0dTN Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3aedbf31650352660fd3a878f7b791c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lY3zU1O2314C9QvI628mhocgsiNbltgREha2XcuSRUmFtbDdn19N6Q== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-10-31 02:41:44 UTC	15280	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 77 db 46 d2 37 fa ff fd 14 30 67 8e 1f f2 0d 88 a0 bb d1 58 a8 d1 f8 55 14 67 e4 79 a4 38 13 3b 9a c5 d7 57 07 22 21 91 31 17 99 a4 28 4b 36 bf fb ad 5f 35 76 42 b2 9c d8 89 9d e1 b1 45 82 8d de bb ba b6 ae aa fe fa ff 3c b0 be 9b cd ad f1 a8 9f 4c 17 89 35 9a 9e cd e6 93 78 39 9a 4d ad 8b 71 12 53 d2 22 49 ac b3 79 3c 49 9c 40 9f 85 83 48 4b e7 e7 85 73 f8 64 ff f1 f7 cf 1e 3b cb 37 4b eb ff 7c fd ff 3c 38 bb 9c f6 51 aa dd 79 bb 8a e7 d6 d2 4e ec a9 3d b7 67 f6 68 f7 6d a0 a4 72 7b 79 0e 7e 67 b2 cd 77 df b6 9c af cf e2 d1 38 19 38 93 0b d5 ea 29 19 fa ca a6 c4 e9 6c 39 3a 1b f5 b9 2b e6 55 14 29 4f e0 d5 ec 22 99 c7 cb d9 3c 2d 11 4a cf 43 f2 e2 f2 74 32 5a 9a 44 cf 13 da 5f ef 64 6d 5a b3 f6 d2 b4 98 ec 8e e8 71 Data Ascii: ywF70gXUgy8;W"!1(K6_5vBE<L5x9MqS"Iy<I@HKsd;7K\|<8QyN=ghmr{y~gw88)l9:+U)O"<-JCt2ZD_dmZq
2024-10-31 02:41:44 UTC	1551	IN	Data Raw: c5 69 43 51 4d a2 5c 5e b5 20 8c 83 b0 9f 71 e4 c3 a7 2a 5d 76 cf a3 d1 2f 1c 4f 75 f9 b6 1f 14 a5 44 56 aa 98 07 a4 dd b9 a3 83 7b 86 1a d9 6e e9 cf 65 4b e7 b6 43 7c c4 f5 ab 0d 87 70 74 89 83 03 2b b4 7c d6 ff d1 73 2e f1 84 32 b8 5f 10 f4 2d 78 7c 2e e0 71 6b 34 31 46 dc 5e 84 c3 75 c2 af cc 70 2b 1f 51 93 81 d4 e0 30 2b 24 ec 17 f9 a6 b0 cc 51 59 b0 bb 2a ab c4 c0 43 f0 9f 41 48 92 b9 90 20 82 db a9 0c f9 c6 9f 30 f3 a0 0e 58 b3 45 44 81 69 03 04 1d 05 bb 42 c7 c5 ed 8c 71 04 43 5a fe 30 35 f9 4e e0 b3 63 6c dd fc d2 f1 71 6a 24 cd 4d 24 b0 ce 91 51 d1 2d d6 04 06 4a ed b1 6e 4f 95 ae 32 f1 15 b4 88 c4 96 a5 ae ad d5 a2 b8 99 08 7e ca a1 62 2b 68 1c d0 40 a8 c1 35 36 20 58 ca 3c 48 37 e4 1b c1 61 d1 e4 e2 c3 97 7c dc c2 16 9e 7c 55 57 e1 5d 9a 9a 1b Data Ascii: iCQM\^ q]v/OuDV{neKC\|pt+\|s.2_-x\|.qk41F^up+Q0+$QYCAH 0XEDiBqCZ05Nclqj$M$Q-JnO2~b+h@56 X<H7a\|\|UW]
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 43 d3 92 4d 63 cb 74 b3 f5 d2 21 2e fe 71 4c f3 5d 8c 21 21 70 e3 55 6b 37 61 20 1a 97 93 2e 3d ad 17 21 8c 0e ff cf 9b 7b 8a a2 24 53 64 bf 89 5b 40 88 09 02 0c 86 47 a2 f2 24 09 80 5b b0 47 9d 9d d1 59 3b ed 11 0d bb ef 30 cc 71 b6 05 fd a2 a5 26 a4 bc 30 c8 20 03 3d 60 d5 19 8f 95 30 c2 45 7b dc c9 e7 6a 4c 20 79 12 5f c5 23 22 da 8f 12 67 9e 2c 66 e3 55 d2 1e 3b 69 6a c7 59 0e 93 69 bb 32 a8 69 3b 9d 97 25 f7 90 40 b7 fe 3a 9d af ec 7d a7 57 aa b9 a9 c6 b4 bb bb 54 a0 bd d8 a8 30 1d 44 43 bd eb cb 36 8f b8 c3 b0 35 da 99 b5 31 d3 9b bb ac 84 06 e6 a5 59 9e 15 90 87 0d 9b 94 97 13 2c 1f e7 b7 f1 88 b6 72 9d c8 e8 d1 c8 8c 61 46 6f 7a 54 09 51 d6 62 29 9f b4 4b 88 64 b6 3b c8 d6 20 af 9a d6 b5 f3 96 d6 70 46 c4 e6 ba c3 43 b2 1e cf e7 24 17 b6 fe 96 4c Data Ascii: CMct!.qL]!!pUk7a .=!{$Sd[@G$[GY;0q&0 =`0E{jL y_#"g,fU;ijYi2i;%@:}WT0DC651Y,raFozTQb)Kd; pFC$L
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 4c 54 1a 8c 50 9a e6 3d ed 93 cf 69 4e 49 1a cf 90 f5 29 9f 95 e3 ea f8 10 68 61 39 32 6a 7c 4f 98 d8 25 41 5d c7 cb 82 ba 4a 39 53 7b 72 94 d5 42 b0 d7 9b 24 ef ed 66 eb a4 1d 70 b8 15 2e d6 97 24 83 38 5a 92 e6 81 93 f8 b2 24 0f 27 62 31 4e 58 68 7d 4e 44 98 72 f5 64 a5 ec 0a b7 eb eb fc 9b 53 20 da cf 9c d8 59 b8 7a 56 5b 88 70 98 93 24 0f 6b 20 d2 d8 66 92 ea 36 5a 41 92 f9 36 40 2c 57 c0 b1 5c b5 a4 4f 69 1a 56 32 c7 28 93 b1 6b 81 2c 4c 49 23 13 56 b2 82 d1 f3 2a 29 3d 54 ac d8 c6 dc 4a a0 02 3d c6 aa d3 44 b3 05 e4 57 20 21 bf 02 81 fc aa 91 46 a3 80 fc ba 16 a9 b0 06 2e ec f9 27 62 ef 33 81 08 06 72 40 8b 71 99 44 31 3d 75 58 74 76 00 88 84 51 e7 17 47 95 83 ce e5 f1 d9 29 c5 46 54 80 9d 4a 83 80 be 4b f5 de 03 a7 72 8d df ac d7 ea dc b0 f7 41 aa Data Ascii: LTP=iNI)ha92j\|O%A]J9S{rB$fp.$8Z$'b1NXh}NDrdS YzV[p$k f6ZA6@,W\OiV2(k,LI#V*)=TJ=DW !F.'b3r@qD1=uXtvQG)FTJKrA
2024-10-31 02:41:45 UTC	3824	IN	Data Raw: 36 15 cf cd 05 39 56 b9 5e c7 f0 fc 50 f1 7c b4 20 57 2a 4f ea f1 82 bc b5 14 cf e7 b0 25 2e 15 cf af 17 c4 53 f5 33 5c 90 40 f5 7c b0 20 b1 a7 e6 37 b3 e6 fd fc e6 a9 33 19 f9 9e 7d e7 4c 4c 0b fe e3 5b 77 20 a2 07 b0 40 77 7d 17 54 cd 3e 88 12 f3 3b f4 1c 33 2b 63 c7 73 ee 1c 7b ec f7 1d d7 7e ea 00 fb 78 5f 4d 04 ed 27 ae 73 3d 8a 66 36 fe f7 09 6c c1 27 e2 1e b4 4a e4 42 fc e1 93 61 00 e7 21 bc fa 3f c9 2b ae 00 e7 3e 48 6d 54 f2 53 f9 ce 3a ac fe 91 ee 1f 87 de b2 07 73 2a 05 6b 34 20 15 bf 17 c9 0a 65 36 bf 2e 79 1f fd 21 0b 7d 6b 5c 89 44 34 e8 71 64 8f d3 58 8b 4f 40 d2 47 ff a4 1a 05 bc b2 a8 66 aa 12 3a 85 03 e5 0c e2 6b 75 49 2d 30 a5 63 42 ab e2 85 8c db 8d fc 00 76 71 35 63 76 4e 3e 5e d3 78 20 be e7 30 ed 17 d4 66 b1 be 2e 3d ca fc c0 20 6b Data Ascii: 69V^P\| WO%.S3\@\| 73}LL[w @w}T>;3+cs{~x_M's=f6l'JBa!?+>HmTS:sk4 e6.y!}k\D4qdXO@Gf:kuI-0cBvq5cvN>^x 0f.= k
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: a2 55 18 78 14 ed 3e f4 cc cc d3 e7 67 74 48 7f e3 f2 fd 76 06 0b b7 d1 14 56 b2 40 57 93 33 e2 d4 d8 74 21 05 25 f6 86 25 ef 23 36 ee c9 15 ab d0 ef a6 63 9b 83 23 b8 1c 06 53 b0 a1 7c 7e 26 34 85 36 f2 50 c9 4a 4a 47 a8 e1 bc 15 ad 0a 41 aa 34 bd 5a 36 3b 64 72 2d 27 5a 11 71 20 91 55 95 67 59 d7 f2 cc 1a d3 eb 91 31 c3 06 ea 3c 82 71 2d b6 80 3c 38 52 05 04 f1 6c 7c f2 42 09 64 f8 33 65 f7 6d 09 69 88 1d 0a 79 19 f8 97 7b fc 47 93 13 35 a1 84 67 4d 25 31 2a 3c a0 04 a9 0d 9f c0 51 a3 2c fb e9 3c 4d a1 88 ef 3a a2 d9 84 27 13 2f 81 5f aa 66 93 97 91 dd 68 fc 8c 35 ab 9c 5a f8 6e 91 fa 15 65 6b bd 39 88 99 ae 07 f9 28 00 c0 21 25 1f e3 21 e4 78 b6 09 e7 3a 51 19 18 6a 51 87 6f c7 3c fc d9 2c cb d9 78 5e 5e 09 46 e1 69 61 42 9d 85 f3 ea 7b f3 cc 35 fc dc Data Ascii: Ux>gtHvV@W3t!%%#6c#S\|~&46PJJGA4Z6;dr-'Zq UgY1<q-<8Rl\|Bd3emiy{G5gM%1*<Q,<M:'/_fh5Znek9(!%!x:QjQo<,x^^FiaB{5
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 56 f2 d0 2a c1 e7 bc 20 f8 ec f8 83 1e f8 38 08 64 fc ae df cc f9 c8 b9 1d f0 3c 6e fd 95 7e 68 36 92 d6 4b 87 f8 7f 82 4f 48 c2 11 0c 60 91 86 75 a7 1e 24 f3 60 eb 64 3e 23 4a 91 c6 9a 25 4b 4a 04 5b f0 28 fe 30 aa b7 6b ed 9a eb d1 7f 75 67 7a 42 54 06 41 ec 28 af b2 7e 46 0c 5f 9d 6a 9d 2f 16 b8 55 1a d5 e1 b4 3c 9e cd ea b8 6e 3a 2b 25 a1 d4 48 8b 4e 76 e3 05 22 49 cc 46 f5 67 fd 9a eb b6 bc de 4e 8f fe d4 f8 0f b5 d9 ee d7 5a 83 5e 60 a7 b5 db 48 6f f5 3e 9e b6 b7 ba ad 5e bf 13 b4 7a 5e 1f ff 90 e9 6e d1 93 b7 d5 ea f6 7b fb bd 96 3b a8 75 5a bd 5e 3f 68 f9 9d 3e fe a1 4e 6a a6 4f 0f 8b ad 56 a7 ed d7 3c 7a e9 ef 14 aa e8 d7 fa ad be 3f a0 06 90 eb fb 41 6b e8 f6 f1 4f 35 30 ec f8 fc 67 da a6 c6 3a bd 56 b7 dd c1 fb 40 67 0c 90 4a 65 f1 4e 99 1e ff Data Ascii: V* 8d<n~h6KOH`u$`d>#J%KJ[(0kugzBTA(~F_j/U<n:+%HNv"IFgNZ^`Ho>^z^n{;uZ^?h>NjOV<z?AkO50g:V@gJeN
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 5c 61 52 c0 fb b9 f8 85 46 f7 a3 09 50 81 52 ef ab fc e5 9c 8c c4 70 d2 c1 94 7b ba 9f 91 fa 09 22 b8 a3 bb 61 34 a3 59 cc 78 dd b1 be 72 5b 36 2a 43 f8 0e 2f b2 f9 ac 68 97 5f b9 ae ce 7e 3a b8 df e7 cd 72 29 56 8a 36 94 40 ac 50 47 2e 76 14 75 07 59 df 24 3a 98 f6 c7 a8 1e 06 b3 a6 98 01 31 df f4 9d e7 9c 4b 2d 16 f5 28 b9 52 c0 4a 3c 2a b1 14 25 40 f3 82 e4 3c a4 c6 b1 74 dd 66 e6 9c b9 0f 51 0a e8 82 a8 3a ba 81 3e 29 c1 a2 66 f9 aa d5 1c 10 9d d2 98 6b 3c d5 ca a2 5d ce 4e 4a 42 65 7f ca b9 4a a8 43 85 ce 1d 68 d4 50 66 ed c0 81 2f 32 b3 14 a2 51 89 18 14 d7 41 27 21 0c 5d 40 f8 c7 31 2c bf e8 40 6b 94 46 79 2b 49 8b 16 60 64 d4 96 6b 85 ad 6f b4 dd 6c 57 fb a6 c5 75 69 c0 e6 5f ed f3 89 0c 83 d4 eb ce 73 ed 4d 5c 88 1b 81 57 ae 9a 06 65 87 62 5a a6 Data Ascii: \aRFPRp{"a4Yxr[6C/h_~:r)V6@PG.vuY$:1K-(RJ<%@<tfQ:>)fk<]NJBeJChPf/2QA'!]@1,@kFy+I`dkolWui_sM\WebZ
2024-10-31 02:41:45 UTC	8806	IN	Data Raw: 19 c8 22 f4 18 8f 83 1d 58 91 4d e7 b1 68 ea 6d ca 99 b2 ba 2f 8a d9 29 d7 f7 4d fe 3e a5 6b 14 f4 34 db e8 f0 c7 b2 2d e8 de 55 4a fe 87 53 ee cc 7c 06 4f 6e be 3a 92 6f 72 11 72 37 15 71 53 80 3d 82 4d c5 3e 81 d1 6d 3c d6 07 1d 88 06 2e f4 58 c7 2d 9a 76 8b 8f 6d 09 de ba 65 15 70 8e 2c c3 2d 2f 92 6a b2 15 7e 8b 97 41 0b 26 7f 47 00 5c d5 16 a4 51 95 2b 93 a1 0a 04 a6 ee e6 02 af 10 31 68 6e d8 8e ea 3d 00 47 a0 1e 53 9a 1e af c3 ad 91 ae 55 f9 35 fd a1 c4 c6 fd 1d 13 03 b6 62 b4 18 9d 4e c1 a7 5d 6f 7c a7 be 7e 38 fc 45 7d 9d a0 bc f6 b8 58 e8 c7 2a ee 64 bc d0 af 7b ea eb 93 42 25 5b 91 c2 54 f5 6c d7 58 ba 95 f0 ed 9e 90 90 08 22 65 4e 5f 43 be 92 e0 a0 6d 4a 66 ba 95 ff 07 1d fd b9 74 f4 4f fe f7 1d fd 23 e5 d1 7f 29 07 d9 40 12 19 fa de 00 7d 24 Data Ascii: "XMhm/)M>k4-UJS\|On:orr7qS=M>m<.X-vmep,-/j~A&G\Q+1hn=GSU5bN]o\|~8E}X*d{B%[TlX"eN_CmJftO#)@}$
2024-10-31 02:41:45 UTC	2191	IN	Data Raw: 71 a5 51 2f 61 84 8d 29 47 b5 c8 c0 3e 0a b3 60 c5 b0 40 a3 eb 98 89 b1 fa 9d a9 a7 d8 97 9d 7c e0 df 28 81 d9 46 2c 99 07 2c 7a 0e bf c7 69 f8 3e 0c 32 b4 97 c3 f0 3e f0 83 26 a3 78 d0 ef 5c 91 9f c9 45 40 37 77 5a 84 1e fc d0 8b d0 c5 27 09 e0 11 3c d0 8a f4 1b 99 75 73 9f 43 f9 4f ac 40 97 4b c1 a2 9b e6 dc 05 21 7e 68 d6 92 f4 f8 92 0c 34 94 bb 7c 75 46 e6 ea ac 5a a9 42 5f ad c7 b9 01 a7 97 6f c6 37 af 07 07 a1 9a 80 7d 36 02 ce 33 59 58 75 81 b0 d6 fd 93 7a fc 51 f4 28 0c c3 10 05 51 fe 33 a4 42 35 04 f3 7e 89 9b f8 cc e1 8a 31 a2 a2 1e 19 3e f9 28 9e 52 39 43 3f 38 35 56 38 37 e4 6f 4c 58 2e 61 64 99 95 bd a6 31 89 60 f0 86 b0 7c 22 b1 7c 38 c7 5c 6e a9 00 cf 89 7a c0 f6 44 8d e1 1c 24 9e f1 f5 ca ca a4 46 69 1b 5b 68 97 00 8c 11 a5 02 07 36 a5 5a Data Ascii: qQ/a)G>`@\|(F,,zi>2>&x\E@7wZ'<usCO@K!~h4\|uFZB_o7}63YXuzQ(Q3B5~1>(R9C?85V87oLX.ad1`\|"\|8\nzD$Fi[h6Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49901	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	1377	OUT	GET /signals/config/473259996747529?v=2.9.174&r=stable&domain=www.riparide.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-dLKxULSa' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 02:41:45 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 02:41:45 UTC	1491	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 Data Ascii: =typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototyp
2024-10-31 02:41:45 UTC	14893	IN	Data Raw: 20 62 3d 61 2e 74 61 72 67 65 74 3b 61 3d 61 2e 70 69 78 65 6c 3b 72 65 74 75 72 6e 20 69 28 7b 65 78 74 72 61 63 74 6f 72 73 42 79 50 69 78 65 6c 73 3a 67 2c 66 62 71 49 6e 73 74 61 6e 63 65 3a 65 2c 70 69 78 65 6c 3a 61 2c 74 61 72 67 65 74 3a 62 7d 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 Data Ascii: b=a.target;a=a.pixel;return i({extractorsByPixels:g,fbqInstance:e,pixel:a,target:b})})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iwlparameters");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iwlpara
2024-10-31 02:41:45 UTC	1500	IN	Data Raw: 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 6e 67 74 68 3e 30 3b 69 66 28 6b 7c 7c 66 29 7b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 43 55 53 54 4f 4d 5f 44 41 54 41 22 7d 29 3b 70 3d 7b 7d 3b 6b 26 26 28 70 2e 75 70 3d 6d 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 66 26 26 28 70 2e 72 70 3d 6e 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 70 7d 7d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e Data Ascii: ength>0;f=n.length>0;if(k\|\|f){a.performanceMark("fbevents:end:unwantedDataProcessing",b.id);g.logUserError({type:"UNWANTED_CUSTOM_DATA"});p={};k&&(p.up=m.join(","));f&&(p.rp=n.join(","));return p}}a.performanceMark("fbevents:end:unwantedDataProcessing",b.
2024-10-31 02:41:45 UTC	14884	IN	Data Raw: 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d Data Ascii: xports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.unwanteddata");f.registerPlugin&&f.registerPlugin("fbevents.plugins.unwanteddata",e.exports);f.ensureModuleRegistered("fbevents.plugins.unwanteddata",function(){return e.exports}
2024-10-31 02:41:45 UTC	1500	IN	Data Raw: 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 47 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 67 3d 48 5b 62 2e 69 64 5d 3b 64 2e 63 73 5f 65 73 74 3d 21 30 3b 69 66 28 67 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 74 2e 69 73 4d 61 74 63 68 45 53 54 52 75 6c 65 28 67 2e 63 6f 6e 64 69 74 69 6f 6e 2c 63 29 29 7b 69 66 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 21 3d 3d 70 2e 44 45 52 49 56 45 5f 45 56 45 4e 54 29 72 65 74 75 72 6e 3b 63 3d 61 28 7b 7d 2c 64 29 3b 76 61 72 20 68 3d 7b 65 76 65 6e 74 49 44 3a 66 7d 3b 67 2e 72 75 6c 65 5f 69 Data Ascii: n e}function G(b,c,d,f){var g=H[b.id];d.cs_est=!0;if(g==null)return;n(g,function(g){try{if(t.isMatchESTRule(g.condition,c)){if(g.transformations==null)return;n(g.transformations,function(c){if(c!==p.DERIVE_EVENT)return;c=a({},d);var h={eventID:f};g.rule_i
2024-10-31 02:41:46 UTC	14884	IN	Data Raw: 3a 65 6e 64 3a 65 73 74 50 61 67 65 56 69 65 77 50 72 6f 63 65 73 73 69 6e 67 22 29 3b 72 65 74 75 72 6e 7b 63 73 5f 65 73 74 3a 21 30 2c 65 73 74 5f 73 6f 75 72 63 65 3a 69 7d 7d 72 65 74 75 72 6e 7b 7d 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 2c 65 2e 65 78 70 6f 72 74 73 Data Ascii: :end:estPageViewProcessing");return{cs_est:!0,est_source:i}}return{}})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.estruleengine");f.registerPlugin&&f.registerPlugin("fbevents.plugins.estruleengine",e.exports
2024-10-31 02:41:46 UTC	2067	IN	Data Raw: 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 Data Ascii: tsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plu
2024-10-31 02:41:46 UTC	3140	IN	Data Raw: 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 73 74 61 6e 64 61 72 64 70 61 72 61 6d 63 68 65 63 6b 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 Data Ascii: oaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plugins.standardparamchecks",function(){return function(a,b,c,d){var e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49902	18.239.18.100	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	622	OUT	GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	727	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 526 Connection: close Last-Modified: Tue, 29 Oct 2024 21:54:34 GMT Accept-Ranges: bytes Server: Cloudfront Date: Thu, 31 Oct 2024 02:05:11 GMT Cache-Control: max-age=31536000 Etag: "d96c709017743c0759cf3853d1806ba5" Via: 1.1 3a5e4105e7e14b13dcdcd3f0d9062fa0.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 2194 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Access-Control-Allow-Origin: * Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: G4a1fNOT7ISFjmjvUL3ABdwQGG6cRZ6S8Ice7oJXP0ZruCGBtO27ow==
2024-10-31 02:41:44 UTC	526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 6e 65 74 77 6f 72 6b 22 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 2f 70 72 65 76 69 65 77 3d 74 72 75 65 2f 2e 74 65 73 74 28 6e 29 3f 22 69 6e 6e 65 72 2d 70 72 65 76 69 65 77 2e 68 74 6d 6c 22 3a 22 69 6e 6e 65 72 2e 68 74 6d 6c 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6f 2e 73 72 63 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2e 63 6f 6e 63 61 74 28 6e 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 6f 72 69 67 69 6e 3d 3d 3d 65 29 7b 76 61 Data Ascii: !function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49912	13.224.189.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	357	OUT	GET /widget/ahlg24mu HTTP/1.1 Host: widget.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2667 Connection: close Date: Thu, 31 Oct 2024 02:41:45 GMT Last-Modified: Wed, 30 Oct 2024 17:27:40 GMT ETag: "f12eeebc65f88502799daf943d9e7c4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: Ur6LB77X8z1qsMrk6CSYSvnt6N10Z9wM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 3bf3e75bcb9a86b3eb343a1d4392a6de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ifm-9-n0DlTQfF7VmoTpmgobYi1OhccB34ynxNtVGd0Gj6bxX0ynGw== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-10-31 02:41:45 UTC	2667	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0b 73 d3 3a 16 fe 2b 8e 77 27 b5 a7 8e 93 94 b6 d0 14 c3 96 52 96 ce 52 60 08 73 f7 ee 94 6e 46 b1 95 44 e0 48 be b2 d2 34 37 c9 7f df 4f f2 23 76 92 16 ee cc 32 d0 da 3a 4f 1d 9d c7 27 d3 18 cd 78 a8 98 e0 8e bb bc 27 d2 a2 c1 f2 f9 69 f7 b8 db 2b d7 a9 bb a4 3e 7d 48 84 54 69 b0 4c c5 4c 86 74 30 25 49 cf 9e b0 28 a2 bc 95 2d b5 b0 64 7b 24 61 83 21 49 29 88 4a 25 69 af dd c6 4a 8b 91 a9 cf b8 a2 32 14 78 10 b6 97 cc 86 31 0b 07 09 51 93 0d e7 f7 b4 64 0a 23 ee e3 57 db f6 d2 09 a5 2a 1d 24 52 3c 2c b6 f8 0b e6 56 c6 63 04 aa ec 10 a6 5c c9 c5 5e e1 f9 7c 5e 5a 6b 49 aa 77 c7 f8 38 d3 61 a4 a0 3e a2 0f fe 44 4d 63 db 63 3c 55 24 8e 07 53 11 d1 9d fd 25 9b bd e1 5f 69 35 4a f9 86 6b f4 ac 73 12 d1 d3 b3 90 84 a7 c7 e4 Data Ascii: Ys:+w'RR`snFDH47O#v2:O'x'i+>}HTiLLt0%I(-d{$a!I)J%iJ2x1Qd#W*$R<,Vc\^\|^ZkIw8a>DMcc<U$S%_i5Jks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49909	18.66.102.51	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	364	OUT	GET /c/hotjar-769445.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 31 Oct 2024 02:41:41 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/0dbd11ff1a37e906bbe2f25fb2cf3f69 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c387974a86541bbcc6c5141a85eeaf36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: CP_3KcyDi4KKqYSCYtio6mfBdG--FO-K4Bo9de7UG3_1w2-RAfsR7Q== Age: 3
2024-10-31 02:41:44 UTC	13129	IN	Data Raw: 33 33 34 31 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 37 36 39 34 34 35 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 6e Data Ascii: 3341window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":769445,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"an
2024-10-31 02:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49908	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-uAWAbsey' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 02:41:44 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 02:41:44 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:44 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-31 02:41:44 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-10-31 02:41:45 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-10-31 02:41:45 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49911	18.245.86.101	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	371	OUT	GET /libs/amplitude-5.2.2-min.gz.js HTTP/1.1 Host: cdn.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17889 Connection: close Date: Thu, 31 Oct 2024 02:41:46 GMT Last-Modified: Mon, 21 Oct 2019 15:45:34 GMT ETag: "b568e7b3c9d94da6a1d4845b18400f7a" Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: aZB1RIRJqET7nosqRtOBVideRuh0jIV6 Accept-Ranges: bytes Server: AmazonS3 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 9d1f21fface75767578955e1853e754e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: Exy79V4B-vjyEwSxEJqGkPAkZzvH3bUesLaGfEmw_f5x8IO-zv0Abg==
2024-10-31 02:41:45 UTC	15782	IN	Data Raw: 1f 8b 08 00 4b ab 9e 5c 00 03 cd bd 6b 77 da 48 b3 30 fa fd fc 0a ac 3d db 23 05 41 10 37 db 22 0a cb 49 9c 8c 9f 89 9d 4c ec 64 e6 79 80 f1 92 a1 01 8d 41 22 92 f0 25 16 fb b7 bf 55 7d 53 eb 02 71 66 f6 39 e7 5d 2b 31 52 ab ba ba bb aa ba aa ba fa b6 37 5d fb e3 d8 0b 7c 9d 98 b1 f1 a8 05 d7 7f 91 71 ac 39 4e fc b0 22 c1 b4 42 ee 57 41 18 47 fb fb da da 9f 90 a9 e7 93 89 b6 27 3e 2e 83 c9 7a 41 fa ec a7 ce 41 9d 58 37 6c 4d a0 4d 31 b1 dc fb fb ec b7 ee 2e 27 7d f6 a8 c7 86 ad 13 87 24 49 44 16 53 03 be ac 16 5e bc 9e 10 c4 b4 d1 e3 b9 17 99 b2 96 50 c5 75 44 2a 51 1c 7a 50 cd 9e 48 af c4 3a 31 1e 43 12 af 43 5f 8f 9d 92 e2 2f 1e 96 d7 c1 02 da 11 d1 87 fc 87 ba 17 93 d0 8d 83 b0 9f 12 44 20 ac 08 5a 6c ec 92 8f d0 a4 1d c5 91 fa 38 f0 a1 b6 eb 31 e0 76 Data Ascii: K\kwH0=#A7"ILdyA"%U}Sqf9]+1R7]\|q9N"BWAG'>.zAAX7lMM1.'}$IDS^PuD*QzPH:1CC_/D Zl81v
2024-10-31 02:41:45 UTC	2107	IN	Data Raw: 90 df e3 c6 16 98 82 33 82 07 81 d9 f8 05 f1 57 c4 15 ac 95 40 e2 d7 36 ec 72 b5 4a 61 4a 52 10 b1 82 9b da 62 7a 5b 52 bd 72 42 ef 43 22 93 8a b0 e5 fc 5e a4 ca 35 80 44 ee 1d bf 3a c9 30 7f bc 92 3b ca 85 4a d2 b0 cb 8f 23 3d fe 78 5a 01 36 55 bc a8 82 b7 87 42 bf d3 0a 0e 29 b5 7e a7 65 d2 25 d7 2c 16 24 2c 93 47 88 59 6a 4b af e2 72 63 ca 2f 4b dc 73 e2 82 58 fa 54 31 6c 11 4b 5f 11 4b 1f af 42 fe ae 58 fa 7f 57 2c 67 79 89 0b 71 65 2d 76 35 73 3b 4e 6e e6 0b b2 c9 d6 8b 7c 4f 36 29 c9 fe bf 12 4e bf 28 9c 4f a8 e5 8f 0b e7 0f 20 65 ed a7 97 4a fd 2f e1 fa 67 f5 7a 4a a7 81 c4 2f 6c 41 3c 5d 9f a9 9a 61 da 0d 6e d3 8f 99 7e 90 75 05 14 28 a7 38 ce 13 32 59 e8 93 22 28 43 e5 5e 7a e7 c4 10 3d 35 eb f9 19 39 0a b8 50 0d 77 37 05 58 46 24 00 ae c4 88 83 Data Ascii: 3W@6rJaJRbz[RrBC"^5D:0;J#=xZ6UB)~e%,$,GYjKrc/KsXT1lK_KBXW,gyqe-v5s;Nn\|O6)N(O eJ/gzJ/lA<]an~u(82Y"(C^z=59Pw7XF$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49905	34.223.74.168	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	342	OUT	GET /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:44 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:44 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49906	34.223.74.168	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	342	OUT	GET /v1/i HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:44 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:44 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49899	18.245.46.10	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	500	OUT	GET /vendor.6349e54f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 196869 Connection: close Date: Thu, 31 Oct 2024 02:41:45 GMT Last-Modified: Wed, 30 Oct 2024 17:25:01 GMT ETag: "72afb86f841a4306b6702132c561fde7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: D06sMoBRmW6l7f6MJ82APJALF7dSQSwc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 08144b62d8ba59c510ae7682981f36c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ng_CzeNy3xkZWJsH6U8c4soniW6CjFzUrSjTHfrqCyqwEf3z0aYYsw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 7f db 38 ae 30 fc ff fb 29 1c 6d 27 23 d5 8a 63 3b 71 2e 72 55 9f b4 4d a7 3d db db 69 d2 b9 ac eb c9 ca 12 6d 6b 22 4b 1e 49 76 92 89 fd 7c f6 17 00 49 89 ba 38 4d 67 cf fb 7b de 9d 6d 2c 51 bc 80 20 08 80 20 08 ee 3f dd 69 bc 8e e2 46 e0 bb 2c 4c 58 c3 0f 27 51 3c 77 52 3f 0a 1b 8b 80 39 90 94 30 d6 58 b1 d0 8b e2 d6 d1 c1 e1 29 eb 1d 4e 5a 7f 24 ad 77 6f 5f 9e 7f b8 38 6f a5 b7 69 e3 e9 fe ff a3 27 2c 98 b4 6e d8 78 e1 b8 d7 2f 67 cb f0 da 0f 53 16 bb d1 fc ea 8f c4 7e e8 e3 7a 3d 1c 19 ad c5 32 99 e9 c3 e1 61 a7 db 19 99 f7 dd de 49 a7 67 4d 96 a1 8b 90 e8 cc 4c cd d0 b8 d7 96 08 4e 1a fb 6e aa f5 c3 96 a7 a7 e6 fd 59 9e cb b8 8f 59 ba 8c c3 c6 7c b3 31 fa 2b 27 6e c4 76 a8 1f 9d b4 4f 3a 86 19 c1 e3 61 fb e0 b4 Data Ascii: {80)m'#c;q.rUM=imk"KIv\|I8Mg{m,Q ?iF,LX'Q<wR?90X)NZ$wo_8oi',nx/gS~z=2aIgMLNnYY\|1+'nvO:a
2024-10-31 02:41:45 UTC	467	IN	Data Raw: 8c 1e b7 05 7d 8e cd fb 62 b0 67 d0 56 2c ec 1c 9a f4 30 10 95 82 fe ba 23 69 d3 20 1a 3b c1 25 4c 02 89 a9 3c 85 ae 53 53 04 34 b0 04 e0 49 5b 65 77 7e af 5a 5d 43 7c 43 5a 36 c2 df 36 1b 9c 98 ad 48 62 a2 22 fa 8b 5e 7f 59 f8 6f 2c 14 d3 38 3c 14 49 3a 8b 2b 9e dd a4 b3 1d 8d d5 bc 32 98 b6 c6 c7 56 83 61 db 56 58 cb 49 20 bb 7e 06 43 6b 6f e4 cd 2d 99 03 0c 29 7d a5 fb 03 90 b7 23 39 00 97 be 57 49 e7 46 dc 1e 00 fa e1 87 f3 5f bf 5c 5c bd 7c f7 f6 fc c3 e5 d5 cf e7 9f 2f de 7e fc 60 69 ed 56 e7 b0 d5 d6 cc b7 17 57 97 bf 7d 7a fb e1 a7 ab cb 37 9f 3f 5e 5e be 3b b7 70 8f e2 d3 e7 f3 8b f3 0f 2f cf af de 7e b8 3c ff fc f3 d9 3b ab d3 65 87 79 f2 f9 87 b3 17 ef ce 5f 21 cd f0 c2 6f df 9f 7f fc 72 69 75 7a 58 f8 a3 9a 02 c5 7e 39 7f 71 f1 f1 e5 3f cf 2f Data Ascii: }bgV,0#i ;%L<SS4I[ew~Z]C\|CZ66Hb"^Yo,8<I:+2VaVXI ~Cko-)}#9WIF_\\\|/~`iVW}z7?^^;p/~<;ey_!oriuzX~9q?/
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: c4 d1 71 69 74 f6 fe 48 5a 1a e8 3a f7 7e e8 c6 a5 73 c4 00 0a 0c ab 3f 2f c6 94 40 3b c6 46 52 e7 f2 db 23 7a 95 f8 e1 b5 9d d4 0d 25 8c cc 05 7e ac 8c 0b 2f 53 1a 96 0a 09 17 aa 2f 8d a0 e8 cc 96 aa f3 0c ba 53 19 10 de e3 92 e5 46 29 cb bf 63 41 3a 36 4c 98 55 ef 8e 2f de ae 9b c7 f9 a4 2a fc d0 4f 7d 27 78 e1 24 ec 15 0b 9c 3b 19 19 1c a4 75 9e 26 ef 7a 85 a5 71 34 99 bc 07 96 e6 2f 60 b4 80 b8 45 66 3f fc cc 8f 16 c7 59 69 91 10 f1 04 c2 95 6e d4 21 bd 1e 8d 78 8b cb db 32 6c b5 10 17 91 85 e5 4a 42 72 6b 7d cf 2b 3d 35 14 19 28 61 36 69 69 ca c3 d5 56 0a f0 08 5f fc 5c 35 77 48 2e 22 a4 84 0e 43 ca 80 72 9d 75 e0 7d 7f dd 2a f4 db 11 b8 bd ad ca 00 9b 65 92 cf 81 a9 3d 95 de e0 bb f0 94 4b 37 78 58 e7 26 e3 34 99 6b 78 5c e8 df 3f e6 50 00 5e 83 83 Data Ascii: qitHZ:~s?/@;FR#z%~/S/SF)cA:6LU/O}'x$;u&zq4/`Ef?Yin!x2lJBrk}+=5(a6iiV_\5wH."Cru}e=K7xX&4kx\?P^
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: 28 37 b8 76 6e 27 55 75 5b 07 c5 40 3e 7a 05 7d 5a 64 a4 46 79 5d 9c 3b 78 40 ca e1 d2 f1 bf 2b 8e 47 b9 ba e3 00 ea f5 5c 8f 25 b4 0a d7 d4 eb 5f ac 6f da 4f f0 f3 b4 6a f7 94 21 aa d8 b7 ee 0c da 90 c8 ff 5c ea a8 7b 2e 2e ca 30 c3 d8 3e f3 ae 95 d6 5e dd d8 57 78 f8 17 d4 c4 29 0a 93 08 38 73 92 a7 cb e7 66 c8 0a e3 7a 2a 25 0d 0c ad 38 b9 2f 5a 59 ac a6 88 cb 70 ea 7f 0c 1d d4 7b 5f 0b 52 7e d3 70 4e 59 3d 01 87 eb fe a5 3e 4c 0a 16 ef 3a f4 60 59 dd 3f c3 ee 5a 51 28 6b 0d 4d f1 4e b9 38 55 a9 82 34 7f d0 9d 01 f3 a5 08 df 3d 75 fe 8e 26 fe 3e 6a e2 71 cd ae c5 10 d6 6d 5f f4 00 ff f5 c2 69 cd 7f 68 97 f6 89 e1 06 3a 88 87 aa 6c 4f 2f 34 45 89 64 3e d4 59 14 0d 0d 0c fc fd 7a bd 54 34 47 3d 70 75 7e 1a 79 52 30 5b 95 72 0b 59 bc 9c b6 75 aa 90 4a f8 Data Ascii: (7vn'Uu[@>z}ZdFy];x@+G\%_oOj!\{..0>^Wx)8sfz*%8/ZYp{_R~pNY=>L:`Y?ZQ(kMN8U4=u&>jqm_ih:lO/4Ed>YzT4G=pu~yR0[rYuJ
2024-10-31 02:41:45 UTC	12824	IN	Data Raw: b7 0f 7f f9 b8 a7 ed 84 81 2f a9 3a 0c 12 4f 38 49 e1 30 08 aa 4d f1 dd 82 87 04 a9 a8 0a 25 05 a8 e2 7d 3e 77 4d 02 e8 84 a5 08 04 06 ac 84 8d 29 c0 30 5b 2b b9 03 15 8e 14 71 ed a4 8d 71 16 d3 f1 38 45 42 a2 df 5e b1 3d 1b 0a 15 72 f6 7f 3f 3c 39 3d f1 32 c1 45 2c bc 91 b0 4b 58 78 5d 9c 7e 73 7d 5e 14 36 75 ce 9e f0 04 b1 dc 1e 53 10 ea 9f 59 0d c2 5f 9d f8 ac 10 ee 8e 1e 78 88 34 e7 a5 db 14 c7 6d b2 e7 3d 51 e1 50 ed 19 2e b3 5d 78 0e 71 2b ab 5b e6 f5 f7 78 8e 32 21 80 32 3c 30 64 4a 1a 23 a2 a2 17 5f 50 15 75 30 0d c1 91 3e 64 45 74 be 09 c0 f8 fd ae 0e ec 40 f5 1c bd 29 87 46 be 58 6b 63 d8 2c b2 86 98 1f a3 ad 42 68 5c 2f a5 aa 37 f8 2f 20 09 76 a4 e6 bc 1d f3 26 2a 91 c5 e2 94 c2 44 06 8c cb d0 06 92 eb d7 d6 30 9b 87 11 12 ec d4 0d b3 f7 7b 31 Data Ascii: /:O8I0M%}>wM)0[+qq8EB^=r?<9=2E,KXx]~s}^6uSY_x4m=QP.]xq+[x2!2<0dJ#_Pu0>dEt@)FXkc,Bh\/7/ v&*D0{1
2024-10-31 02:41:45 UTC	8408	IN	Data Raw: 76 6c b7 46 a4 7c ea de c5 a8 b2 87 65 00 7b 5d 10 a9 6e 45 f5 07 ca 9b a9 33 83 e9 a4 20 a6 7f 85 d3 db 80 90 a5 1e a8 b8 88 ef 15 b1 5f 73 3b 38 5f 5c 82 74 9c 83 58 bc 29 97 a5 7a 22 10 8e 0f 8f 19 c0 62 1c 31 ac 85 1f f2 c7 7f 9e e6 fd 56 5e 5f 6b 4b 10 32 e7 c3 4b 35 de 75 2a 7e 2d 6d 69 a4 bf 79 64 e0 1a c4 81 b9 51 ed 97 73 7f 91 52 11 b0 27 04 ec d6 63 76 eb 40 be b5 3f 98 21 9a 5f 28 3f 83 b8 df 32 28 9a 30 61 fb 7f 43 56 06 f5 06 74 02 35 db e6 12 12 04 22 8f 5d 83 54 56 ef 88 b7 d3 c5 7f 93 0c b7 70 80 42 06 a3 98 2b 95 c1 53 0b 4c 08 b4 5d 37 0e 6a 16 df d6 ac bf 90 f2 e7 aa 48 4d 6d 79 ea 21 71 54 f3 c3 4b ca 15 21 c2 69 f8 7b 54 2e 1f c1 69 df c1 0a a3 9e 61 75 53 b6 38 18 67 fd cd 7a 3d 82 53 a0 73 cf dd 4b ba 48 ea 55 fb 1a 26 c7 13 5f c8 Data Ascii: vlF\|e{]nE3 _s;8_\tX)z"b1V^_kK2K5u*~-miydQsR'cv@?!_(?2(0aCVt5"]TVpB+SL]7jHMmy!qTK!i{T.iauS8gz=SsKHU&_
2024-10-31 02:41:45 UTC	16384	IN	Data Raw: b2 22 2e 3f 96 85 28 ae 52 19 56 ee 98 89 d8 68 76 db bf a9 ae ef a5 49 9a 84 91 a5 99 39 15 33 73 2c cf c1 11 9b 55 f3 cc ac 9a 88 09 f8 ce bb 77 47 54 f0 b6 f1 ae 19 c7 bc 6f c5 df d4 c1 2c 1e 2c f1 70 d5 d4 fd 5d 57 b3 60 63 17 36 f7 ea 14 74 5c 6d dd 42 68 92 21 e2 ac c1 f7 f5 2b 95 70 bf dd d7 b0 86 66 d7 45 4c 03 97 4a 3d be 31 dd 0e f5 4f b0 07 bf e0 56 b3 a7 54 52 bb 4d 65 22 d5 aa 7f 00 7f b4 b0 62 bb e7 3e de c6 bf 84 cb c3 3d b2 eb c3 6f e2 5d b8 cf 63 06 a9 35 bd 49 0c 37 f1 71 8c 56 ab 31 dd 05 ed 2f 02 e3 e7 3c c0 f0 07 23 b4 08 f2 c6 63 92 53 a2 39 d3 fa 78 19 55 bb 20 62 e0 88 46 70 a7 2a 34 4b ad 12 8a d1 e5 3f 16 11 2a 79 81 69 c5 a8 81 a4 c3 b7 99 a8 5d b7 8a 12 6b bd 56 4c b6 a3 d6 d3 0d da 04 21 c7 f6 08 71 87 3b 8d ec ff 99 f5 2e 3b Data Ascii: ".?(RVhvI93s,UwGTo,,p]W`c6t\mBh!+pfELJ=1OVTRMe"b>=o]c5I7qV1/<#cS9xU bFp4K?yi]kVL!q;.;
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 9d ae 31 18 09 1b a9 82 78 76 9f 77 0b 10 35 2a 2d b8 1f 55 dd 45 70 3e f4 71 ad 7e 07 c8 85 36 2d 1b ed 46 ab b6 66 06 24 54 65 02 80 41 9b 51 0a bc 86 1d 3f 82 85 23 3d 9c e9 45 6d 0c ba dc 4b 77 3a fd d9 43 4c 25 06 e5 f8 73 e1 2d bc 77 fe 08 86 cd 9d a7 63 e2 ae db d4 a1 86 ea 26 c7 af 0b f4 19 18 87 17 a0 1f f6 7c 33 ee c7 65 54 ae d0 b5 55 44 cd ad 21 b4 e5 5f 52 e3 58 28 75 13 ee 31 d7 02 8d 2d c4 59 47 39 8d 00 44 dd 31 f7 a6 13 84 db ec a1 7c 88 81 44 64 18 a0 fb e7 90 81 df 82 c2 5a 18 01 e7 87 ff e1 bb f8 27 e9 4c 34 79 92 ef 6d c2 01 0c b3 7b d2 1c b1 1d d8 02 56 4b 28 e0 73 d3 78 33 9d 7a a7 ee 14 e6 c3 65 08 92 26 a9 e0 40 de 49 f6 8c 21 08 cc 42 cc e6 3c f1 24 35 ce d8 f3 f7 bd 40 7b d3 29 52 99 33 8e 53 32 e9 11 ef 08 ab 40 20 a5 4a 06 86 Data Ascii: 1xvw5*-UEp>q~6-Ff$TeAQ?#=EmKw:CL%s-wc&\|3eTUD!_RX(u1-YG9D1\|DdZ'L4ym{VK(sx3ze&@I!B<$5@{)R3S2@ J
2024-10-31 02:41:46 UTC	1024	IN	Data Raw: 5e 5e 8e f9 3c ed dc 00 9a 19 02 a3 a0 f3 19 ae 65 70 b7 9b bb 42 47 2e 54 f6 b2 82 9f 5c d0 2d 87 5a f3 fb a8 7a 4a 32 46 68 cf 86 5d b6 db 86 46 a9 31 d6 47 ed 5b 1b 1b f3 27 d0 12 ea c9 5b be a4 52 bd be de de 61 a4 18 12 3e 63 18 2a 11 a5 89 9f f5 32 cd 17 9c 2f f5 03 82 5c 30 3b 34 9e 0a 8c c2 0b 98 ae 96 32 8a 00 1e 04 da f0 22 b0 b5 54 7a 13 65 84 d0 a9 d5 a4 5e 42 8e 82 92 6f 80 c8 2d 84 80 37 6f e7 be 5f 7f 48 07 27 8e f2 cb 5e ad de a8 75 98 a8 5c 5f 44 55 b6 9b db 0d 26 83 6e 7f 75 90 ad de be 46 25 b5 a7 2c dc 1b c0 a7 dc d5 a6 61 66 26 1c 8c 2c 64 99 5e bb c0 e3 7b f7 db 05 d3 c7 f7 d4 c6 56 85 d7 54 dd 75 98 1e 49 92 73 83 0d 42 98 27 0c 4d 7e 69 88 b8 d3 6a 4a fe cb fa fa 86 b6 c2 59 6f ad 2f 00 f6 0a 15 60 a0 9e 80 cf ae e0 f9 00 0c b9 31 Data Ascii: ^^<epBG.T\-ZzJ2Fh]F1G['[Ra>c*2/\0;42"Tze^Bo-7o_H'^u\_DU&nuF%,af&,d^{VTuIsB'M~ijJYo/`1
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: f5 5c fc e2 b2 00 23 f6 1d 88 11 a6 10 8a e6 e2 88 5c a2 4d ee b4 cd 9d f6 e4 63 4b 96 d8 60 e6 26 ac 04 61 df 74 03 a5 91 e5 b8 cb 5a 5a 3e 51 d3 96 93 10 ea e6 c4 28 a3 ae ae 66 77 26 16 f3 29 03 f3 29 02 af 1f 78 1e 23 7b 7d b6 5e 9b 61 80 8f 38 7e 72 c8 ec 83 a0 07 e1 41 1f fa a8 a9 4c 18 0f 73 04 5b 60 cb 72 13 53 a1 f5 cd cd 05 07 ca 22 2b 13 21 c5 c0 f6 83 71 cc 4d ea de de 6c 6f 5d cf e4 29 56 be b1 b1 be 3d bf e3 7c 4b ee d7 8e 8e fa 49 1a d6 bf ce 8e b2 61 90 b2 9a d3 61 c9 a4 bc b1 c8 6c 88 39 56 4a 0a 0a 52 68 31 e8 4c 2d fd f9 22 db 20 32 7a 42 74 1f df 6d f6 e2 fd a8 6e a2 eb d0 11 ba db ea c1 c8 5b ad a5 08 6d aa 43 15 b4 11 c5 7c 06 79 0b 7a 4e 54 af 7b 81 e6 d5 67 60 47 1a ab f1 cc 65 af 34 d1 9d b6 62 c5 05 d4 13 9a f4 5c a9 22 e5 82 e5 Data Ascii: \#\McK`&atZZ>Q(fw&))x#{}^a8~rALs[`rS"+!qMlo])V=\|KIaal9VJRh1L-" 2zBtmn[mC\|yzNT{g`Ge4b\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49913	44.241.94.217	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	634	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	1169	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 34 35 37 66 31 32 62 66 62 35 30 30 36 64 62 38 31 31 61 62 32 39 30 66 65 33 30 36 65 66 66 65 26 63 6c 69 65 6e 74 3d 66 33 34 63 30 38 66 33 32 30 63 37 37 65 34 34 66 38 61 35 66 34 62 32 39 61 62 35 34 35 62 61 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 39 64 63 65 31 34 34 31 2d 31 64 61 34 2d 34 63 62 31 2d 61 61 30 64 2d 38 39 63 66 38 39 32 61 37 37 36 37 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 33 30 33 34 32 35 30 32 30 38 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 33 30 Data Ascii: checksum=457f12bfb5006db811ab290fe306effe&client=f34c08f320c77e44f8a5f4b29ab545ba&e=%5B%7B%22device_id%22%3A%229dce1441-1da4-4cb1-aa0d-89cf892a7767R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1730342502081%2C%22event_id%22%3A1%2C%22session_id%22%3A1730
2024-10-31 02:41:44 UTC	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:44 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2024-10-31 02:41:44 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49903	99.86.8.175	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	411	OUT	GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/1.1 Host: cdn.segment.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 21911 Connection: close Date: Thu, 31 Oct 2024 02:41:46 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 01 Oct 2024 11:20:15 GMT ETag: "c467a63b2e7c3a99be423ace649014d8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000,immutable Content-Encoding: gzip x-amz-version-id: JPDEPREw8gYM0wgzX9n.pVdsRblNlmAD Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9810d82af8847b51b9c3048141069a64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: BsuU0Pllv4UBXjjItmMpyCLYiqdE41wKMNOQYX2jHTwfpIAG633aWA==
2024-10-31 02:41:45 UTC	8177	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 69 7b db 38 b2 30 fa fd fe 0a 99 b7 a3 90 11 ac d5 ab 64 46 6f 96 4e 27 3d d9 4e c7 e9 3e 13 45 c9 a1 25 c8 62 22 91 6a 92 b2 e3 58 9a df 7e ab 0a 0b c1 45 b2 32 db 99 fb 3c ef 4c c7 22 41 a0 50 d8 0a 85 42 2d f6 b5 1f 8c c3 eb fa 35 bf 58 78 a3 af bf c6 61 b0 f8 1c 78 73 fe f9 45 90 f0 cb c8 4b fc 30 70 77 c9 b4 5a 0d 86 4e 7d b1 8c a7 f6 60 d0 1c b2 5b ab f6 f8 65 cb ea 4e 96 c1 08 bf db 09 e3 2c 72 6e ad 65 cc 2b 71 12 f9 a3 c4 ea a9 8f 15 f8 ec dc 5e 79 51 85 bb 49 3d 09 df c1 f7 e0 d2 76 7a 11 4f 96 51 50 69 b9 ae cb eb 33 1e 5c 26 d3 be d5 b4 6a bc cb d7 49 9d 7f 5b 84 51 12 bb 69 1d ce ad 2c 91 d4 2f 79 f2 fe fc c9 b3 e5 6c f6 57 ee 45 b6 53 b3 f6 ad 1a 64 91 1f 5e 85 41 32 85 d4 56 fe c3 53 2f e1 b6 03 a9 e7 66 Data Ascii: i{80dFoN'=N>E%b"jX~E2<L"APB-5XxaxsEK0pwZN}`[eN,rne+q^yQI=vzOQPi3\&jI[Qi,/ylWESd^A2VS/f
2024-10-31 02:41:45 UTC	13734	IN	Data Raw: da e4 d6 61 f4 15 3d a6 31 20 19 9b 6e fd 19 5e 73 a2 24 56 9e c1 1b 95 07 bd ca 83 86 a3 24 01 01 1e c5 d5 15 66 ee d6 33 e3 23 3f 1a 2c 6d 60 e1 82 ec 71 1e 95 6d 9c a1 bb 84 39 d7 4a b5 04 22 d2 1f 36 45 5d 7a c2 43 97 0d 92 61 4e b1 7e 77 99 0a 9c 86 a9 f9 95 ff 11 19 ed 7b a1 f3 3f 95 fd 0a fa d5 12 1e 90 34 e4 e5 0e a2 96 52 c8 22 63 11 f2 9d c2 b7 bc 6a b2 38 8c 55 3a 5d fa 69 2b 09 57 68 8a bf 2a 2d 43 20 e7 14 2f de 49 8a f5 f6 f8 bf 5f e5 8e 8b 25 d3 45 1e 67 84 ce 56 7f d3 21 99 0b 9d af e5 82 47 9f 5d ce 8c e3 8f 9b 01 60 73 c3 59 d1 ad e1 97 a8 7b 2b 3c 01 01 34 c3 5f 50 cb 74 07 94 f7 1d b4 c6 bb fa ee 96 63 3b 5d 78 29 9c e4 29 db bc a4 ed 19 9e 93 5c 13 31 13 7d a4 26 91 99 62 7a 53 02 2e 13 3a f2 bf 5e 1f ff 57 e9 b9 5b 79 73 eb ed 10 25 Data Ascii: a=1 n^s$V$f3#?,m`qm9J"6E]zCaN~w{?4R"cj8U:]i+Wh*-C /I_%EgV!G]`sY{+<4_Ptc;]x))\1}&bzS.:^W[ys%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49907	34.223.74.168	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	342	OUT	GET /v1/t HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:44 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:45 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49915	54.203.164.212	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:44 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:44 UTC	220	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:44 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2024-10-31 02:41:44 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49916	64.233.184.157	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	696	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-42356415-1&cid=332502837.1730342499&jid=1109842635&gjid=1131531949&_gid=453694327.1730342502&_u=aCDAgEABAAAAAGgCIAD~&z=2098303480 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlvyOnLvwP83BXQiWFI40K9zv3dz4IaJdxrXFjRIYltQDh6psvQbGRF-AIt
2024-10-31 02:41:45 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Thu, 31 Oct 2024 02:41:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:45 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49917	142.250.74.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	851	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD&co=aHR0cHM6Ly93d3cucmlwYXJpZGUuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=oszlgs1pi681 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 31 Oct 2024 02:41:45 GMT Date: Thu, 31 Oct 2024 02:41:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:45 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-10-31 02:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49919	34.223.74.168	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	342	OUT	GET /v1/p HTTP/1.1 Host: api.segment.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	195	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:45 GMT Content-Type: application/json Content-Length: 82 Connection: close Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 02:41:45 UTC	82	IN	Data Raw: 7b 0a 20 20 22 73 75 63 63 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 6d 61 6c 66 6f 72 6d 65 64 20 4a 53 4f 4e 22 2c 0a 20 20 22 63 6f 64 65 22 3a 20 22 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 22 0a 7d Data Ascii: { "success": false, "message": "malformed JSON", "code": "invalid_request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49924	151.101.64.176	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	400	OUT	GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1 Host: js.stripe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 526 Last-Modified: Thu, 21 Dec 2023 18:13:42 GMT ETag: "d96c709017743c0759cf3853d1806ba5" Cache-Control: max-age=31536000 Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff access-control-allow-origin: * server: Fastly Accept-Ranges: bytes Age: 747741 Date: Thu, 31 Oct 2024 02:41:45 GMT Via: 1.1 varnish X-Request-ID: 2bb09f8f-c853-49ef-972e-d112b966d9ea X-Served-By: cache-dfw-ktki8620021-DFW X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Timing-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-31 02:41:45 UTC	526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 6e 65 74 77 6f 72 6b 22 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 3d 2f 70 72 65 76 69 65 77 3d 74 72 75 65 2f 2e 74 65 73 74 28 6e 29 3f 22 69 6e 6e 65 72 2d 70 72 65 76 69 65 77 2e 68 74 6d 6c 22 3a 22 69 6e 6e 65 72 2e 68 74 6d 6c 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 6f 2e 73 72 63 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2e 63 6f 6e 63 61 74 28 6e 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 2e 6f 72 69 67 69 6e 3d 3d 3d 65 29 7b 76 61 Data Ascii: !function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49920	142.250.74.196	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	839	OUT	GET /js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LenjMAUAAAAAAHqaqC4ySj9H9hlHBC-DlO23epD&co=aHR0cHM6Ly93d3cucmlwYXJpZGUuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=oszlgs1pi681 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18928 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 06:49:49 GMT Expires: Thu, 30 Oct 2025 06:49:49 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 22 Oct 2024 16:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 71516 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:45 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 45 7d 2c 70 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 69 66 28 21 28 45 3d 28 54 3d 6e 75 6c 6c 2c 70 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 45 29 7c 7c 21 45 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 54 3b 74 72 79 7b 54 3d 45 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTM
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 2c 4a 2c 51 29 7b 69 66 28 28 28 28 28 64 3d 28 4a 3d 28 70 3d 28 51 3d 28 45 7c 7c 54 2e 43 2b 2b 2c 54 2e 69 3e 30 26 26 54 2e 53 26 26 54 2e 68 50 29 26 26 54 2e 6c 3c 3d 31 26 26 21 54 2e 56 26 26 21 54 2e 4a 26 26 28 21 45 7c 7c 54 2e 50 75 2d 46 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 54 29 2e 43 3d 3d 34 29 7c 7c 51 3f 54 2e 52 28 29 3a 54 2e 49 2c 4a 2d 54 2e 49 29 2c 54 29 2e 73 2b 3d 64 3e 3e 31 34 3e 30 2c 54 2e 68 29 26 26 28 54 2e 68 5e 3d 28 54 2e 73 2b 31 3e 3e 32 29 2a 28 Data Ascii: LLC',' SPDX-License-Identifier: Apache-2.0','/','var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)(
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 6f 6f 72 3a 45 7d 29 7d 2c 75 4e 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 29 7b 72 65 74 75 72 6e 28 46 3d 4f 5b 45 2e 4e 5d 28 45 2e 5a 71 29 2c 46 5b 45 2e 4e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 46 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 3d 74 7d 2c 46 7d 2c 56 63 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 29 7b 69 66 28 45 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 46 3d 30 3b 46 3c 33 3b 46 2b 2b 29 54 5b 46 5d 2b 3d 45 5b 46 5d 3b 66 6f 72 28 46 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 28 45 3d 30 2c 31 35 29 5d 3b 45 3c 39 3b 45 2b 2b 29 54 5b 33 5d 28 54 2c 45 25 33 2c 46 5b 45 5d 29 7d 7d 2c 74 54 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c Data Ascii: oor:E})},uN=function(E,T,F){return(F=O[E.N](E.Zq),F[E.N]=function(){return T},F).concat=function(t){T=t},F},Vc=function(E,T,F){if(E.length==3){for(F=0;F<3;F++)T[F]+=E[F];for(F=[13,8,13,12,16,5,3,10,(E=0,15)];E<9;E++)T[3](T,E%3,F[E])}},tT=function(E,T,F,t,
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 2c 4a 2c 66 29 7d 7d 72 65 74 75 72 6e 20 4a 7d 2c 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 29 7b 4b 28 28 64 3d 28 74 3d 28 45 26 3d 28 46 3d 45 26 34 2c 33 29 2c 77 29 28 54 29 2c 77 29 28 54 29 2c 74 3d 53 28 54 2c 74 29 2c 46 26 26 28 74 3d 71 54 28 22 22 2b 74 29 29 2c 45 26 26 4b 28 43 28 74 2e 6c 65 6e 67 74 68 2c 32 29 2c 64 2c 54 29 2c 74 29 2c 64 2c 54 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 66 6f 72 28 54 3d 5b 5d 3b 45 2d 2d 3b 29 54 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 54 7d 2c 57 36 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 69 66 28 54 3d 28 45 3d 6e 75 6c 6c 2c 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 54 7c 7c 21 54 2e 63 72 Data Ascii: ,J,f)}}return J},nd=function(E,T,F,t,d){K((d=(t=(E&=(F=E&4,3),w)(T),w)(T),t=S(T,t),F&&(t=qT(""+t)),E&&K(C(t.length,2),d,T),t),d,T)},h=function(E,T){for(T=[];E--;)T.push(Math.random()*255\|0);return T},W6=function(E,T){if(T=(E=null,m.trustedTypes),!T\|\|!T.cr
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 29 7b 69 66 28 46 2e 57 2e 6c 65 6e 67 74 68 29 7b 46 2e 53 3d 28 46 2e 68 50 3d 28 46 2e 53 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 54 29 2c 74 72 75 65 29 3b 74 72 79 7b 64 3d 46 2e 52 28 29 2c 46 2e 43 3d 30 2c 46 2e 42 3d 64 2c 46 2e 49 3d 64 2c 46 2e 67 3d 30 2c 74 3d 64 5a 28 46 2c 54 29 2c 45 3d 45 3f 30 3a 31 30 2c 70 3d 46 2e 52 28 29 2d 46 2e 42 2c 46 2e 72 77 2b 3d 70 2c 46 2e 76 75 26 26 46 2e 76 75 28 70 2d 46 2e 44 2c 46 2e 4f 2c 46 2e 59 2c 46 2e 67 29 2c 46 2e 4f 3d 66 61 6c 73 65 2c 46 2e 59 3d 66 61 6c 73 65 2c 46 2e 44 3d 30 2c 70 3c 45 7c 7c 46 2e 57 75 2d 2d 3c 3d 30 7c 7c 28 70 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 70 29 2c 46 2e 4c 32 2e 70 75 73 68 28 Data Ascii: }},X=function(E,T,F,t,d,p){if(F.W.length){F.S=(F.hP=(F.S&&":TQR:TQR:"(),T),true);try{d=F.R(),F.C=0,F.B=d,F.I=d,F.g=0,t=dZ(F,T),E=E?0:10,p=F.R()-F.B,F.rw+=p,F.vu&&F.vu(p-F.D,F.O,F.Y,F.g),F.O=false,F.Y=false,F.D=0,p<E\|\|F.Wu--<=0\|\|(p=Math.floor(p),F.L2.push(
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 70 5b 64 2e 78 62 3d 79 2c 31 5d 2c 70 5b 32 5d 5d 2c 79 3d 28 79 3c 3c 33 29 2d 34 3b 74 72 79 7b 64 2e 45 62 3d 70 64 28 6b 2c 55 5a 28 28 79 7c 30 29 2b 34 2c 64 29 2c 55 5a 28 79 2c 64 29 29 7d 63 61 74 63 68 28 76 29 7b 74 68 72 6f 77 20 76 3b 7d 7d 64 2e 70 75 73 68 28 64 2e 45 62 5b 51 26 37 5d 5e 4a 29 7d 2c 70 3d 53 28 46 2c 32 30 34 29 29 3a 54 3d 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 64 2e 70 75 73 68 28 4a 29 7d 2c 74 26 26 54 28 74 26 32 35 35 29 2c 46 3d 45 2e 6c 65 6e 67 74 68 2c 74 3d 30 3b 74 3c 46 3b 74 2b 2b 29 54 28 45 5b 74 5d 29 7d 2c 49 43 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 2c 4a 2c 51 29 7b 72 65 74 75 72 6e 28 64 3d 4f 5b 46 2e 4e 5d 28 28 4a 3d 28 74 3d 5b 36 38 2c 28 51 3d 41 54 2c 34 31 29 2c 2d 31 31 Data Ascii: p[d.xb=y,1],p[2]],y=(y<<3)-4;try{d.Eb=pd(k,UZ((y\|0)+4,d),UZ(y,d))}catch(v){throw v;}}d.push(d.Eb[Q&7]^J)},p=S(F,204)):T=function(J){d.push(J)},t&&T(t&255),F=E.length,t=0;t<F;t++)T(E[t])},IC=function(E,T,F,t,d,p,J,Q){return(d=O[F.N]((J=(t=[68,(Q=AT,41),-11
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 28 45 2c 31 35 37 2c 64 29 2c 45 29 29 2c 53 29 28 45 2c 46 29 7d 47 28 66 61 6c 73 65 2c 28 70 26 26 70 5b 51 63 5d 26 32 30 34 38 3f 70 28 45 2c 54 29 3a 50 28 5b 72 2c 32 31 2c 46 5d 2c 30 2c 45 29 2c 45 29 2c 54 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 4a 29 7b 53 28 45 2c 39 36 29 3f 50 28 4a 2c 32 32 2c 45 29 3a 63 28 45 2c 39 36 2c 4a 29 7d 69 66 28 21 54 29 7b 69 66 28 45 2e 4b 32 29 7b 7a 34 28 28 45 2e 6c 2d 2d 2c 45 29 2c 34 32 36 38 35 36 32 36 32 33 36 34 29 3b 72 65 74 75 72 6e 7d 50 28 5b 72 2c 33 33 5d 2c 30 2c 45 29 7d 7d 63 61 74 63 68 28 4a 29 7b 74 72 79 7b 50 28 4a 2c 32 32 2c 45 29 7d 63 61 74 63 68 28 51 29 7b 67 28 51 2c 45 29 7d 7d 45 2e 6c 2d 2d 7d 7d 2c 55 5a 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 72 65 74 75 72 6e 20 54 Data Ascii: (E,157,d),E)),S)(E,F)}G(false,(p&&p[Qc]&2048?p(E,T):P([r,21,F],0,E),E),T,false)}catch(J){S(E,96)?P(J,22,E):c(E,96,J)}if(!T){if(E.K2){z4((E.l--,E),426856262364);return}P([r,33],0,E)}}catch(J){try{P(J,22,E)}catch(Q){g(Q,E)}}E.l--}},UZ=function(E,T){return T
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 29 3b 6b 3c 33 38 36 3b 6b 2b 2b 29 51 5b 6b 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6b 29 3b 69 66 28 70 2e 75 73 3d 28 70 2e 47 3d 28 70 2e 64 77 3d 66 61 6c 73 65 2c 70 2e 67 3d 30 2c 70 2e 75 3d 28 70 2e 76 75 3d 28 70 2e 6b 62 3d 28 70 2e 70 32 3d 5b 5d 2c 30 29 2c 74 29 2c 76 6f 69 64 20 30 29 2c 28 70 2e 58 4d 3d 28 70 2e 4c 32 3d 5b 5d 2c 4a 29 2c 70 29 2e 4a 3d 6e 75 6c 6c 2c 28 28 70 2e 50 75 3d 38 30 30 31 2c 70 29 2e 56 3d 76 6f 69 64 20 30 2c 70 2e 54 3d 28 70 2e 76 3d 76 6f 69 64 20 30 2c 70 2e 43 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 70 29 2e 69 3d 30 2c 28 70 2e 56 35 3d 76 6f 69 64 20 30 2c 70 2e 48 3d 70 2c 70 2e 6d 65 3d 66 61 6c 73 65 2c 70 2e 6c 3d 30 2c 70 29 2e 72 77 3d 28 70 2e 68 50 3d 28 70 2e Data Ascii: );k<386;k++)Q[k]=String.fromCharCode(k);if(p.us=(p.G=(p.dw=false,p.g=0,p.u=(p.vu=(p.kb=(p.p2=[],0),t),void 0),(p.XM=(p.L2=[],J),p).J=null,((p.Pu=8001,p).V=void 0,p.T=(p.v=void 0,p.C=void 0,void 0),p).i=0,(p.V5=void 0,p.H=p,p.me=false,p.l=0,p).rw=(p.hP=(p.
2024-10-31 02:41:45 UTC	1378	IN	Data Raw: 2c 76 2c 75 2c 56 2c 4e 29 7b 63 28 79 2c 28 4e 3d 53 28 79 2c 28 75 3d 53 28 79 2c 28 4e 3d 77 28 28 76 3d 28 56 3d 77 28 79 29 2c 77 28 79 29 29 2c 79 29 29 2c 75 3d 77 28 79 29 2c 75 29 29 2c 4e 29 29 2c 76 3d 53 28 79 2c 76 29 2c 56 29 2c 6b 57 28 75 2c 76 2c 4e 2c 79 29 29 7d 29 29 2c 70 29 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 2c 56 29 7b 63 28 79 2c 28 75 3d 53 28 28 56 3d 53 28 79 2c 28 76 3d 77 28 28 56 3d 77 28 28 75 3d 77 28 79 29 2c 79 29 29 2c 79 29 29 2c 56 29 29 2c 79 29 2c 75 29 2c 76 29 2c 75 5b 56 5d 29 7d 29 2c 70 29 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 29 7b 47 28 74 72 75 65 2c 79 2c 76 2c 66 61 6c 73 65 29 7c 7c 28 76 3d 77 28 79 29 2c 75 3d 77 28 79 29 2c 63 28 79 2c 75 2c 66 75 6e 63 74 69 6f 6e 28 56 29 7b 72 65 74 Data Ascii: ,v,u,V,N){c(y,(N=S(y,(u=S(y,(N=w((v=(V=w(y),w(y)),y)),u=w(y),u)),N)),v=S(y,v),V),kW(u,v,N,y))})),p),function(y,v,u,V){c(y,(u=S((V=S(y,(v=w((V=w((u=w(y),y)),y)),V)),y),u),v),u[V])}),p),function(y,v,u){G(true,y,v,false)\|\|(v=w(y),u=w(y),c(y,u,function(V){ret
2024-10-31 02:41:46 UTC	1378	IN	Data Raw: 56 29 29 2c 53 28 79 2c 75 29 29 2c 76 29 2c 75 20 69 6e 20 56 7c 30 29 7d 29 2c 30 29 2c 32 31 35 29 2c 70 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 2c 56 2c 4e 2c 71 2c 61 29 7b 69 66 28 21 47 28 74 72 75 65 2c 79 2c 76 2c 74 72 75 65 29 29 7b 69 66 28 61 3d 28 4e 3d 28 56 3d 53 28 28 76 3d 53 28 28 76 3d 77 28 28 56 3d 77 28 28 61 3d 77 28 79 29 2c 79 29 29 2c 79 29 29 2c 4e 3d 77 28 79 29 2c 79 29 2c 76 29 2c 79 29 2c 56 29 2c 53 28 79 2c 4e 29 29 2c 53 28 79 2c 61 29 29 2c 4f 5a 28 61 29 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 71 20 69 6e 20 75 3d 5b 5d 2c 61 29 75 2e 70 75 73 68 28 71 29 3b 61 3d 75 7d 69 66 28 79 2e 48 3d 3d 79 29 66 6f 72 28 76 3d 76 3e 30 3f 76 3a 31 2c 79 3d 61 2e 6c 65 6e 67 74 68 2c 71 3d 30 3b 71 3c 79 3b 71 2b 3d Data Ascii: V)),S(y,u)),v),u in V\|0)}),0),215),p,function(y,v,u,V,N,q,a){if(!G(true,y,v,true)){if(a=(N=(V=S((v=S((v=w((V=w((a=w(y),y)),y)),N=w(y),y),v),y),V),S(y,N)),S(y,a)),OZ(a)=="object"){for(q in u=[],a)u.push(q);a=u}if(y.H==y)for(v=v>0?v:1,y=a.length,q=0;q<y;q+=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49925	54.203.164.212	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:45 UTC	220	IN	HTTP/1.1 400 Bad Request Date: Thu, 31 Oct 2024 02:41:45 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2024-10-31 02:41:45 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49923	18.173.205.62	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:45 UTC	686	OUT	GET /inner.html HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://js.stripe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:46 UTC	1156	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 930 Connection: close Last-Modified: Fri, 30 Jun 2023 14:32:28 GMT Accept-Ranges: bytes Server: Cloudfront Date: Thu, 31 Oct 2024 02:40:20 GMT Cache-Control: max-age=300, public Etag: "06bfcd88af438673a8bf9b845a11aa6e" Vary: Accept-Encoding, Origin Via: 1.1 2148953aab7910c366395376a0db1450.cloudfront.net (CloudFront) Age: 262 Content-Security-Policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report Strict-Transport-Security: max-age=31556926; includeSubDomains; preload X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: ET5p37tgBZpoE85REKE-Uqq4RasCVDY7VyLIQH8Qjj3Dg1-S6Zteeg==
2024-10-31 02:41:46 UTC	930	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 74 72 69 70 65 4d 2d 49 6e 6e 65 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 64 65 66 65 72 3d 21 30 2c 65 2e 73 72 63 3d 22 6f 75 74 2d 34 2e 35 2e 34 33 2e 6a 73 22 2c 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 77 69 6e 64 6f 77 2e 53 74 72 69 70 65 4d 26 26 28 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 2f 70 69 6e 67 3d 66 Data Ascii: <!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49927	13.33.187.92	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:46 UTC	372	OUT	GET /modules.625495a901d247c3e8d4.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:46 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226541 Connection: close Date: Mon, 28 Oct 2024 16:03:23 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "ec34f7a549bb7b8a0957652de86e3475" Last-Modified: Mon, 28 Oct 2024 16:02:55 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6ee264f4aa2ef518b13a5a8305e8080e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: XVz2LgrWHnYdcfZYyYa0lHsLzjgtDv4Ed0Zd5tn0jVbR_iQ59DCGPw== Age: 211103
2024-10-31 02:41:46 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 32 35 34 39 35 61 39 30 31 64 32 34 37 63 33 65 38 64 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 29 29 2c 68 6a 2e 62 72 69 64 67 65 2e 66 6c 75 73 68 55 73 65 72 41 74 74 72 69 62 75 74 65 73 28 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 28 6e 75 6c 6c 2c 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 7d 65 6c 73 65 20 65 28 45 72 72 6f 72 28 22 6e 6f 5f 75 73 65 72 22 29 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 66 6c 75 73 68 22 29 2c 67 65 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 73 65 72 5f 69 64 22 3d 3d 3d 65 3f 6f 2e 69 64 3a 65 26 26 6f 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 67 65 Data Ascii: own_failure")}),"userAttributes"))),hj.bridge.flushUserAttributes(o.id,o.attributes),e(null,o.id,o.attributes)}else e(Error("no_user"))}),"userAttributes.flush"),get:hj.tryCatch((function(e){return"user_id"===e?o.id:e&&o.attributes[e]}),"userAttributes.ge
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 7c 53 6b 79 66 69 72 65 7c 54 65 61 72 7c 58 56 36 38 37 35 7c 58 56 36 39 37 35 7c 47 6f 6f 67 6c 65 2e 57 69 72 65 6c 65 73 73 2e 54 72 61 6e 73 63 6f 64 65 72 2f 69 29 7c 7c 74 28 2f 4f 70 65 72 61 2f 69 29 26 26 74 28 2f 57 69 6e 64 6f 77 73 2e 4e 54 2e 35 2f 69 29 26 26 74 28 2f 48 54 43 7c 58 64 61 7c 4d 69 6e 69 7c 56 61 72 69 6f 7c 53 41 4d 53 55 4e 47 5c 2d 47 54 5c 2d 69 38 30 30 30 7c 53 41 4d 53 55 4e 47 5c 2d 53 47 48 5c 2d 69 39 2f 69 29 3f 22 6d 6f 62 69 6c 65 22 3a 74 28 2f 57 69 6e 64 6f 77 73 2e 28 4e 54 7c 58 50 7c 4d 45 7c 39 29 2f 29 26 26 21 74 28 2f 50 68 6f 6e 65 2f 69 29 7c 7c 74 28 2f 57 69 6e 28 39 7c 2e 39 7c 4e 54 29 2f 69 29 7c 7c 74 28 2f 4d 61 63 69 6e 74 6f 73 68 7c 50 6f 77 65 72 50 43 2f 69 29 26 26 21 74 28 2f 53 69 6c Data Ascii: \|Skyfire\|Tear\|XV6875\|XV6975\|Google.Wireless.Transcoder/i)\|\|t(/Opera/i)&&t(/Windows.NT.5/i)&&t(/HTC\|Xda\|Mini\|Vario\|SAMSUNG\-GT\-i8000\|SAMSUNG\-SGH\-i9/i)?"mobile":t(/Windows.(NT\|XP\|ME\|9)/)&&!t(/Phone/i)\|\|t(/Win(9\|.9\|NT)/i)\|\|t(/Macintosh\|PowerPC/i)&&!t(/Sil
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 2e 6a 6f 69 6e 28 22 2e 22 29 3a 22 22 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2e 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 63 28 65 29 7d 76 61 72 20 77 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 73 3a 21 30 2c 69 67 6e 6f 72 65 55 55 49 44 43 6c 61 73 73 65 73 3a 21 30 2c 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 3a 35 2c 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 Data Ascii: .join("."):"")},_=function(e){return e.replace(t.disallowedTagNameCharactersRE,"")};return c(e)}var w={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasses:!0,ignoreUUIDClasses:!0,maxClassesAllowed:5,disallowedTagNameCharac
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 73 73 3a 5b 5d 2c 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 3a 5b 5d 2c 61 63 74 69 76 65 3a 21 31 7d 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 65 61 72 50 61 67 65 43 6f 6e 74 65 6e 74 28 29 2c 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 72 65 73 65 74 4d 75 74 61 74 69 6f 6e 4c 69 73 74 65 6e 65 72 73 28 29 2c 47 3d 21 31 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 54 72 65 65 4d 69 72 72 6f 72 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 6d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 41 76 61 69 6c 61 62 6c 65 26 26 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 54 72 65 65 28 4a 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 58 29 7d 29 2c 22 62 65 68 61 76 69 6f Data Ascii: ss:[],autoTagsToProcess:[],active:!1}),hj.eventStream.clearPageContent(),hj.treeMirror.resetMutationListeners(),G=!1},initializeTreeMirror:hj.tryCatch((function(e){hj.treeMirror.mutationObserverAvailable&&hj.treeMirror.getTree(J.bind(null,e),X)}),"behavio
2024-10-31 02:41:46 UTC	16384	IN	Data Raw: 74 22 29 2c 74 68 69 73 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 68 69 6c 64 4c 69 73 74 3d 21 30 2c 6e 2e 61 64 64 65 64 3d 21 30 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 22 29 2c 74 68 69 73 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 2e 63 68 69 6c 64 4c 69 73 74 29 7b 69 66 28 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6e 2e 61 64 64 65 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 2e 70 61 72 65 6e Data Ascii: t"),this.insertedIntoParent=hj.tryCatch((function(){n.childList=!0,n.added=!0}),"NodeChange.insertedIntoParent"),this.getOldParent=hj.tryCatch((function(){if(n.childList){if(n.oldParentNode)return n.oldParentNode;if(n.added)return null}return n.node.paren
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 73 65 72 69 61 6c 69 7a 65 41 64 64 65 64 41 6e 64 4d 6f 76 65 64 22 29 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 74 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 3b 72 7c 7c 28 28 72 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 65 29 29 2e 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 2c 74 2e 73 65 74 28 65 2c 72 29 29 3b 76 61 72 20 69 3d 65 2e 67 Data Ascii: eeMirrorClient.serializeAddedAndMoved"),this.serializeAttributeChanges=hj.tryCatch((function(e){var t=new te;return Object.keys(e).forEach((function(n){e[n].forEach((function(e){var r=t.get(e);r\|\|((r=o.serializeNode(e)).attributes={},t.set(e,r));var i=e.g
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 2e 69 6e 73 65 72 74 52 75 6c 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 74 68 69 73 2e 6f 77 6e 65 72 4e 6f 64 65 7c 7c 74 68 69 73 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 2c 73 3d 74 5b 30 5d 2c 63 3d 74 5b 31 5d 2c 75 3d 21 21 6f 26 26 6f 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3b 69 66 28 75 7c 7c 28 30 2c 72 2e 6d 24 29 28 6f 29 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 73 68 65 65 74 49 64 Data Ascii: .insertRule,CSSStyleSheet.prototype.insertRule=function(){var t=Array.prototype.slice.call(arguments),n=e.apply(this,arguments),o=this.ownerNode\|\|this.ownerHostNode,s=t[0],c=t[1],u=!!o&&o.nodeType===Node.DOCUMENT_NODE;if(u\|\|(0,r.m$)(o)){var l=this.sheetId
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 75 6c 64 20 73 65 6e 64 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 66 6c 75 73 68 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 73 68 6f 75 6c 64 53 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3d 21 30 7d 29 2c 22 64 61 74 61 22 29 2c 73 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 5f 77 73 2e 73 65 6e 64 28 53 2e 5f 77 73 2e 5f 6d 73 67 50 72 65 66 69 78 2b 22 65 6e 64 5f 73 69 67 6e 61 6c 22 29 2c 53 2e 5f 77 73 2e 63 6c 6f 73 65 Data Ascii: uld send end signal to Web Socket with the next flush","websocket"),S.shouldSendEndSignal=!0}),"data"),sendEndSignal:hj.tryCatch((function(){hj.log.debug("Sending end signal to Web Socket","websocket"),S._ws.send(S._ws._msgPrefix+"end_signal"),S._ws.close
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 6d 7d 7d 29 3b 76 61 72 20 72 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 75 6e 6b 6e 6f 77 6e 22 3b 73 77 69 74 63 68 28 68 6a 2e 75 72 6c 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 22 68 6a 49 6e 63 6c 75 64 65 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 22 29 29 7b 63 61 73 65 22 30 22 3a 72 65 74 75 72 6e 20 65 3d 21 31 2c 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 59 6f 75 20 68 61 76 65 20 73 65 74 20 69 6e 63 6c 75 64 65 64 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 Data Ascii: m}});var r=Math.random(),o=function(){return function(){var e,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"unknown";switch(hj.url.getParameter("hjIncludeInSessionSample")){case"0":return e=!1,hj.log.debug("You have set includedInSessionSample

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49929	142.250.185.68	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:46 UTC	495	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 31 Oct 2024 02:41:46 GMT Date: Thu, 31 Oct 2024 02:41:46 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-31 02:41:47 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-10-31 02:41:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49930	18.245.46.19	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:46 UTC	359	OUT	GET /frame.75f8d952.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 187117 Connection: close Date: Thu, 31 Oct 2024 02:41:48 GMT Last-Modified: Wed, 30 Oct 2024 17:25:01 GMT ETag: "a419ff95ab0fe313515d05fec50e9965" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: ly12nG2TYtRFOToAMzjweYMd.1EI0dTN Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5335ce80c0b9264bc591cce2c73bef5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zjwLNTPQzh5YdJ5NOJ9-y8ZIpqsmyytEvgxOPThoJzek1-tqSGPvYQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 77 db 46 d2 37 fa ff fd 14 30 67 8e 1f f2 0d 88 a0 bb d1 58 a8 d1 f8 55 14 67 e4 79 a4 38 13 3b 9a c5 d7 57 07 22 21 91 31 17 99 a4 28 4b 36 bf fb ad 5f 35 76 42 b2 9c d8 89 9d e1 b1 45 82 8d de bb ba b6 ae aa fe fa ff 3c b0 be 9b cd ad f1 a8 9f 4c 17 89 35 9a 9e cd e6 93 78 39 9a 4d ad 8b 71 12 53 d2 22 49 ac b3 79 3c 49 9c 40 9f 85 83 48 4b e7 e7 85 73 f8 64 ff f1 f7 cf 1e 3b cb 37 4b eb ff 7c fd ff 3c 38 bb 9c f6 51 aa dd 79 bb 8a e7 d6 d2 4e ec a9 3d b7 67 f6 68 f7 6d a0 a4 72 7b 79 0e 7e 67 b2 cd 77 df b6 9c af cf e2 d1 38 19 38 93 0b d5 ea 29 19 fa ca a6 c4 e9 6c 39 3a 1b f5 b9 2b e6 55 14 29 4f e0 d5 ec 22 99 c7 cb d9 3c 2d 11 4a cf 43 f2 e2 f2 74 32 5a 9a 44 cf 13 da 5f ef 64 6d 5a b3 f6 d2 b4 98 ec 8e e8 71 Data Ascii: ywF70gXUgy8;W"!1(K6_5vBE<L5x9MqS"Iy<I@HKsd;7K\|<8QyN=ghmr{y~gw88)l9:+U)O"<-JCt2ZD_dmZq
2024-10-31 02:41:47 UTC	467	IN	Data Raw: 9e 36 c1 ee db 35 ed cc 14 55 e4 35 db b4 2a 35 3e 80 56 27 cd 45 bb 70 34 4d b2 f4 77 ef ea 7b 6a 49 8c 05 15 5f c5 e3 cb 84 a0 f4 f6 c9 7d 64 be 7a d4 85 98 b0 7c 36 a3 ef de b5 fe ef ff cd 7e b4 68 d1 89 97 5e 5c 4f fb 4f ca ef 2b 29 44 40 28 d3 72 f6 6c 89 7b de 9f c7 e7 9c a5 f4 bb 55 2c fc 22 eb 66 b6 91 9a 06 c5 79 de f2 08 7a 53 3b 99 12 4b 33 8f 4f 89 3e 3d 70 6d 5a 9f b3 d1 f9 65 fe fb 6a 3e 5a a6 cf eb 8e 8d c1 af 97 f3 eb b7 0b e2 a5 ec 16 e1 9e 7e bc ec 0f b1 fe 8b dd fa 4c 65 10 c1 13 b6 2e 96 6d 9c e2 f9 b9 c1 a1 a3 dd e4 e1 c3 a4 58 1d e2 d5 16 cb 78 da c7 4c 9e 3e 4a 7a a7 76 ce 2e 1a 2a d7 1e 15 99 79 d7 24 57 d6 f3 36 4d dc 8b 97 9d 9d 4c e2 68 c7 76 eb 64 34 5d c1 41 30 1b eb 13 6a 78 6a 5f 76 68 20 71 d1 9d b3 7c 65 69 5c 65 9c 4d 6c Data Ascii: 65U55>V'Ep4Mw{jI_}dz\|6~h^\OO+)D@(rl{U,"fyzS;K3O>=pmZej>Z~Le.mXxL>Jzv.y$W6MLhvd4]A0jxj_vh q\|ei\eMl
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 70 e3 55 6b 37 61 20 1a 97 93 2e 3d ad 17 21 8c 0e ff cf 9b 7b 8a a2 24 53 64 bf 89 5b 40 88 09 02 0c 86 47 a2 f2 24 09 80 5b b0 47 9d 9d d1 59 3b ed 11 0d bb ef 30 cc 71 b6 05 fd a2 a5 26 a4 bc 30 c8 20 03 3d 60 d5 19 8f 95 30 c2 45 7b dc c9 e7 6a 4c 20 79 12 5f c5 23 22 da 8f 12 67 9e 2c 66 e3 55 d2 1e 3b 69 6a c7 59 0e 93 69 bb 32 a8 69 3b 9d 97 25 f7 90 40 b7 fe 3a 9d af ec 7d a7 57 aa b9 a9 c6 b4 bb bb 54 a0 bd d8 a8 30 1d 44 43 bd eb cb 36 8f b8 c3 b0 35 da 99 b5 31 d3 9b bb ac 84 06 e6 a5 59 9e 15 90 87 0d 9b 94 97 13 2c 1f e7 b7 f1 88 b6 72 9d c8 e8 d1 c8 8c 61 46 6f 7a 54 09 51 d6 62 29 9f b4 4b 88 64 b6 3b c8 d6 20 af 9a d6 b5 f3 96 d6 70 46 c4 e6 ba c3 43 b2 1e cf e7 24 17 b6 fe 96 4c 0d 7e b5 46 0b 2b 1e 13 58 0e ae ad f9 e5 74 8a cd c7 0b 8f Data Ascii: pUk7a .=!{$Sd[@G$[GY;0q&0 =`0E{jL y_#"g,fU;ijYi2i;%@:}WT0DC651Y,raFozTQb)Kd; pFC$L~F+Xt
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 95 e3 ea f8 10 68 61 39 32 6a 7c 4f 98 d8 25 41 5d c7 cb 82 ba 4a 39 53 7b 72 94 d5 42 b0 d7 9b 24 ef ed 66 eb a4 1d 70 b8 15 2e d6 97 24 83 38 5a 92 e6 81 93 f8 b2 24 0f 27 62 31 4e 58 68 7d 4e 44 98 72 f5 64 a5 ec 0a b7 eb eb fc 9b 53 20 da cf 9c d8 59 b8 7a 56 5b 88 70 98 93 24 0f 6b 20 d2 d8 66 92 ea 36 5a 41 92 f9 36 40 2c 57 c0 b1 5c b5 a4 4f 69 1a 56 32 c7 28 93 b1 6b 81 2c 4c 49 23 13 56 b2 82 d1 f3 2a 29 3d 54 ac d8 c6 dc 4a a0 02 3d c6 aa d3 44 b3 05 e4 57 20 21 bf 02 81 fc aa 91 46 a3 80 fc ba 16 a9 b0 06 2e ec f9 27 62 ef 33 81 08 06 72 40 8b 71 99 44 31 3d 75 58 74 76 00 88 84 51 e7 17 47 95 83 ce e5 f1 d9 29 c5 46 54 80 9d 4a 83 80 be 4b f5 de 03 a7 72 8d df ac d7 ea dc b0 f7 41 aa 5c e3 97 ab fa 83 9f 15 70 55 ae 11 bc 9e 3d f8 59 b7 f8 d9 Data Ascii: ha92j\|O%A]J9S{rB$fp.$8Z$'b1NXh}NDrdS YzV[p$k f6ZA6@,W\OiV2(k,LI#V*)=TJ=DW !F.'b3r@qD1=uXtvQG)FTJKrA\pU=Y
2024-10-31 02:41:47 UTC	630	IN	Data Raw: ea f1 82 bc b5 14 cf e7 b0 25 2e 15 cf af 17 c4 53 f5 33 5c 90 40 f5 7c b0 20 b1 a7 e6 37 b3 e6 fd fc e6 a9 33 19 f9 9e 7d e7 4c 4c 0b fe e3 5b 77 20 a2 07 b0 40 77 7d 17 54 cd 3e 88 12 f3 3b f4 1c 33 2b 63 c7 73 ee 1c 7b ec f7 1d d7 7e ea 00 fb 78 5f 4d 04 ed 27 ae 73 3d 8a 66 36 fe f7 09 6c c1 27 e2 1e b4 4a e4 42 fc e1 93 61 00 e7 21 bc fa 3f c9 2b ae 00 e7 3e 48 6d 54 f2 53 f9 ce 3a ac fe 91 ee 1f 87 de b2 07 73 2a 05 6b 34 20 15 bf 17 c9 0a 65 36 bf 2e 79 1f fd 21 0b 7d 6b 5c 89 44 34 e8 71 64 8f d3 58 8b 4f 40 d2 47 ff a4 1a 05 bc b2 a8 66 aa 12 3a 85 03 e5 0c e2 6b 75 49 2d 30 a5 63 42 ab e2 85 8c db 8d fc 00 76 71 35 63 76 4e 3e 5e d3 78 20 be e7 30 ed 17 d4 66 b1 be 2e 3d ca fc c0 20 6b e9 03 3f 18 1f 62 6c 9e b4 de 01 e7 a9 51 1b 63 36 e2 36 3b Data Ascii: %.S3\@\| 73}LL[w @w}T>;3+cs{~x_M's=f6l'JBa!?+>HmTS:s*k4 e6.y!}k\D4qdXO@Gf:kuI-0cBvq5cvN>^x 0f.= k?blQc66;
2024-10-31 02:41:47 UTC	1418	IN	Data Raw: e9 c7 83 11 bd 61 ae 26 9c 0d e8 53 10 22 8c f9 f6 12 8b 9c fb c0 95 c2 ff d6 16 64 ac 10 e0 78 17 d3 cf 24 da 48 76 e3 6b 73 50 85 75 81 2a ae 15 5d b9 b0 43 e7 93 7d 06 9a 13 e8 1c 41 da 19 74 28 39 98 b7 3f 8f cc f0 dd 28 68 74 e3 c9 c4 0f a2 e2 09 54 7d f7 fa e4 65 14 4d b8 44 9f 56 b0 be 5e c5 ab 55 90 fd a9 7c 6e ba 21 be 43 a9 35 fb c5 82 40 13 27 12 f3 14 4d 99 f8 82 6b 7e b9 57 0a 39 5d ab 86 99 a2 08 c3 82 ef 91 93 8a af 62 7c 70 10 5b 8e af a8 87 91 69 42 19 5c 9d 63 71 31 b5 aa 89 5f 55 f5 94 b9 82 32 e4 9d c3 32 5f 52 e4 5d ee 01 2f ff 74 3c b1 af f7 aa 3a 1c 32 40 11 03 5b 7b fa ff 3c ff d1 53 ea 6f 8d 5d 79 e3 84 0e 1c c0 a0 ba 2c 1f 57 c2 ae 93 9e 8d 1c 0b 26 f4 ee ae f8 66 ec 7f 7a b9 fc 65 b8 fc 1d 70 c8 1b 27 62 ef 81 d0 c4 41 7d cc 7a Data Ascii: a&S"dx$HvksPu*]C}At(9?(htT}eMDV^U\|n!C5@'Mk~W9]b\|p[iB\cq1_U22_R]/t<:2@[{<So]y,W&fzep'bA}z
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 45 5c 8d 61 83 26 88 1b 33 51 9e 61 51 e9 91 cc f9 f9 18 de 2a d8 e6 09 fa 6a c7 49 70 76 02 8a f3 5c 19 bb b1 a0 f0 ac ca 14 40 ee f7 c4 d0 8c 90 cd 87 6c c4 6a 91 1f a0 c2 8c 57 68 9d d3 66 6d 1d 2e e2 e9 fb b5 49 26 6e cf f8 b0 61 6a c7 6a 14 37 3f e7 2d 22 72 60 4e bd 3c 5c cc a7 44 fe dc ae 2a 09 b4 71 aa 02 52 e4 75 12 83 a8 ec 69 28 21 2f 04 e3 e0 87 97 2d 9a 8e 08 3e 99 2f cb 8d 52 0a 24 d7 54 12 3c 3c 9b 89 99 b7 6b fa 63 34 fc 05 e6 f8 22 77 92 2b 95 94 3f 80 2e fa 49 4e c6 4e 8a d7 d2 57 55 00 3e 8a 1c 3b b8 cf 04 4e d6 47 a5 6a af a8 58 e6 40 d0 70 49 ab 8f 62 a3 70 65 eb b0 1c 14 ac f7 37 2c 73 ed 71 23 2b 3a d9 7a 6c 18 7b e0 17 2d 50 44 63 ec d7 7a 9e 2d 18 2c f0 0b 05 80 69 32 97 c6 e1 ab ce bc 39 3c c7 e9 09 c7 3b c8 5a e6 8d a6 69 9b 35 Data Ascii: E\a&3QaQjIpv\@ljWhfm.I&najj7?-"r`N<\DqRui(!/->/R$T<<kc4"w+?.INNWU>;NGjX@pIbpe7,sq#+:zl{-PDcz-,i29<;Zi5
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: cd 17 97 2d e2 b7 74 6c d9 a7 f4 31 7c 91 7d d8 52 1a 31 5b f3 59 bd d9 74 ba 30 93 82 13 e6 ff 1a 7b ed f6 83 07 e1 bf 3a ed f6 76 dc 08 b6 af 74 ad ac 39 55 86 be 64 35 8a 9a a3 f9 ed ca c9 c0 e0 28 2c 74 32 76 08 b6 6c c1 a0 79 37 09 f9 16 23 58 a4 e3 6f da 8e 52 c7 7c 1f 5e a6 8d 68 43 50 44 e0 d2 4c 55 af c6 94 39 d1 db ec 9d 8a 3f c0 7e c6 88 f4 71 e6 e3 a4 b5 73 09 0d bd df 4f 12 0f 8e 33 69 da 1b 84 e0 2b 7c 79 57 fb 90 67 fd bd 2c 8f b1 b8 4d f3 75 95 7b e0 7b fd 72 1f a1 2c 03 a5 89 34 ae d7 9d 6c 1c d8 ce 48 af f5 a5 48 04 80 88 db e7 cd ec 24 89 2f b8 d8 63 00 4f a3 2e 21 00 92 da 2c 0e d3 1a 6d 5f 36 c7 a7 ee 97 e0 0d 26 e7 31 c2 a6 8a f7 35 0c 86 6a 75 14 e1 b7 1c d7 f7 66 88 c7 4c 8c fe f4 72 eb 67 b8 03 d1 ad d7 a6 16 fd 45 87 d4 49 eb 68 Data Ascii: -tl1\|}R1[Yt0{:vt9Ud5(,t2vly7#XoR\|^hCPDLU9?~qsO3i+\|yWg,Mu{{r,4lHH$/cO.!,m_6&15jufLrgEIh
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 1c 49 1a 85 18 9b 40 a9 51 08 04 d2 ff 1d ca 31 5d 43 39 ca 48 b7 1c 18 ee 63 3c 82 71 c7 77 e3 11 0a 7d 48 0c 13 22 8d 83 ce 37 30 f4 30 83 cc 10 e3 49 4e 67 c0 e7 c0 7e 7f 08 87 14 f5 2f eb d6 51 6a f5 91 08 63 c8 89 0b 62 4c 44 35 63 48 f8 6f d6 31 2c eb 98 8a b0 a8 eb eb 91 03 a7 36 ea 2a 3f 60 7d 79 d5 a7 68 32 db d0 a7 2a be 6f b3 4f 90 88 75 4c ca 3a 92 e8 76 43 7f ea 00 a9 8d 3a 30 11 eb b8 2c eb 28 c2 fc 7a 43 25 75 8c c9 46 25 98 88 95 8c aa 4a 38 18 e3 86 6a 9a d1 1a 9b 35 71 3a 56 36 1b 9c 86 fa 5c 1f ea b9 3e d1 2f f5 d1 19 22 e6 9e 69 3c 09 11 a8 22 2a 66 5b e5 0e f9 18 45 9c 17 40 b4 cc b3 09 0b 0f 9a 29 82 f9 84 e3 04 c8 98 68 74 7e 99 a5 d3 f3 21 d0 30 83 1e f2 a1 ab e9 ca 02 cc bb fb ab 25 4a 56 be e4 2b 7b fe 3f 25 a6 c4 03 9d 83 b2 1c Data Ascii: I@Q1]C9Hc<qw}H"700INg~/QjcbLD5cHo1,6?`}yh2oOuL:vC:0,(zC%uF%J8j5q:V6\>/"i<"*f[E@)ht~!0%JV+{?%
2024-10-31 02:41:47 UTC	2048	IN	Data Raw: c1 ae fd 1d 29 3c c4 f0 f0 1d fd 03 6b 84 61 a6 06 69 47 8f e0 01 c8 55 1e d4 7c 30 6a 77 d0 f9 3d 79 1a a5 aa fa 09 12 8b 69 32 aa 12 22 1d 9e af a3 e4 d5 14 ed d3 fb 96 b1 28 ed 9c 1f 96 ba 05 59 1b 9d 82 9a ea ef 1f a3 bb 82 53 e7 dd aa fe f3 34 39 bf 1d c7 e4 c1 20 29 b2 30 2f 5e 9a 5d ef 20 06 56 85 eb 69 96 12 9d dc 50 26 ce 5f cb fd 39 46 8b f9 be 36 21 c3 79 a0 6e 9a 4d a3 d3 1b 2c 51 f7 77 35 77 d9 24 e5 6d 8c ec 7b 3c 32 a0 4b 9c 74 5e 8f 12 3d 31 00 6d 3b c6 ef cd 02 22 fe fc fa 12 4c d9 c3 7c a1 af 0a f2 a9 88 43 ef 93 cb 92 93 49 87 dc 60 bd b4 0f b2 7e 0c bc 75 7a 05 dc 1a 8c 35 ab 87 cb 39 6f 2e 3b ed 44 ef 5a 6e a7 99 0b cf ca 49 78 bf 76 64 07 55 59 01 37 5d ab d3 d7 7e 67 88 7f 34 fd 2a 0b ef 5f 2b 56 32 5d fa 02 85 be 33 f1 df e5 22 62 Data Ascii: )<kaiGU\|0jw=yi2"(YS49 )0/^] ViP&_9F6!ynM,Qw5w$m{<2Kt^=1m;"L\|CI`~uz59o.;DZnIxvdUY7]~g4*_+V2]3"b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49931	18.173.205.62	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:46 UTC	540	OUT	GET /out-4.5.43.js HTTP/1.1 Host: m.stripe.network Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.stripe.network/inner.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	653	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 88751 Connection: close Date: Thu, 31 Oct 2024 02:40:22 GMT Last-Modified: Fri, 30 Jun 2023 14:32:28 GMT Etag: "69cb7809b5011312e716f29b3d19dce6" Cache-Control: max-age=300, public Accept-Ranges: bytes Server: Cloudfront Vary: Accept-Encoding, Origin Via: 1.1 741fa80e957b47e88235a1fa44ab4ea4.cloudfront.net (CloudFront) Age: 86 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: FLriiUHx59jSnXHQoKcJzylAwe4WFIMraTe7wHDpFam2rdSDs66iKw==
2024-10-31 02:41:47 UTC	15731	IN	Data Raw: 76 61 72 20 53 74 72 69 70 65 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 5f 2e 6c 3d 21 30 2c 5f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 72 65 5f 5f 22 2c 41 29 2c 65 28 22 5f 5f 73 65 74 5f 5f 22 2c 41 29 2c 65 28 22 5f 5f 72 65 73 65 74 5f 5f 22 2c 47 29 2c 65 28 22 5f 5f 52 65 73 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 47 29 2c 65 28 22 5f 5f 77 69 74 68 5f 5f 22 2c 44 29 7d 28 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c 72 3d 6e 75 6c 6c 3d 3d 65 3f 30 3a 65 2e 6c 65 6e 67 74 68 2c 5f 3d 41 72 72 61 79 28 72 29 3b 2b 2b 6e 3c 72 3b 29 5f 5b 6e 5d 3d 74 28 65 5b 6e 5d 2c 6e 2c 65 29 3b 72 65 74 75 72 6e 20 5f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 Data Ascii: re__",A),e("__set__",A),e("__reset__",G),e("__ResetDependency__",G),e("__with__",D)}()}).call(this,n(3))},function(e,t){e.exports=function(e,t){for(var n=-1,r=null==e?0:e.length,_=Array(r);++n<r;)_[n]=t(e[n],n,e);return _}},function(e,t,n){"use strict";(f
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 3b 76 61 72 20 72 3d 6e 28 32 39 29 2c 5f 3d 6e 28 36 29 2c 6f 3d 6e 28 31 29 2c 69 3d 6e 28 30 29 2c 63 3d 6e 28 34 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (this,n(3))},function(e,t,n){"use strict";(function(e){n.d(t,"b",(function(){return E})),n.d(t,"a",(function(){return h}));var r=n(29),_=n(6),o=n(1),i=n(0),c=n(4);function u(e){return u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 65 3d 75 28 29 3b 72 65 74 75 72 6e 20 65 2e 5f 5f 24 24 47 4c 4f 42 41 4c 5f 52 45 57 49 52 45 5f 52 45 47 49 53 54 52 59 5f 5f 7c 7c 28 65 2e 5f 5f 24 24 47 4c 4f 42 41 4c 5f 52 45 57 49 52 45 5f 52 45 47 49 53 54 52 59 5f 5f 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 2c 65 2e 5f 5f 24 24 47 4c 4f 42 41 4c 5f 52 45 57 49 52 45 5f 52 45 47 49 53 54 52 59 5f 5f 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 76 61 72 20 65 3d 73 28 29 2c 74 3d 6c 28 29 2c 6e 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 74 5b 65 5d 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 6e 3d 74 5b 65 5d 29 2c 6e 7d 28 61 3d 75 28 29 29 2e 5f 5f 72 65 77 69 72 65 5f 72 65 73 65 74 5f 61 6c 6c 5f 5f Data Ascii: unction l(){var e=u();return e.__$$GLOBAL_REWIRE_REGISTRY__\|\|(e.__$$GLOBAL_REWIRE_REGISTRY__=Object.create(null)),e.__$$GLOBAL_REWIRE_REGISTRY__}function y(){var e=s(),t=l(),n=t[e];return n\|\|(t[e]=Object.create(null),n=t[e]),n}(a=u()).__rewire_reset_all__
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 64 65 6c 65 74 65 20 45 28 29 5b 79 5d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 76 61 72 20 74 3d 68 28 29 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 5b 65 5d 3d 72 5b 65 5d 7d 29 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 5b 6e 5d 3d 74 5b 6e 5d 2c 74 5b 6e 5d 3d 65 5b 6e 5d 7d 29 29 3b 76 61 72 20 69 3d 6f 28 29 3b 72 65 74 75 72 6e 20 69 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 74 68 65 6e 3f 69 2e 74 68 65 6e 28 5f 29 2e 63 61 74 63 68 28 5f 29 3a 5f 28 29 2c 69 7d 7d 21 66 75 6e 63 74 69 6f 6e Data Ascii: delete E()[y]}function m(e){var t=h(),n=Object.keys(e),r={};function _(){n.forEach((function(e){t[e]=r[e]}))}return function(o){n.forEach((function(n){r[n]=t[n],t[n]=e[n]}));var i=o();return i&&"function"==typeof i.then?i.then(_).catch(_):_(),i}}!function
2024-10-31 02:41:47 UTC	7484	IN	Data Raw: 5f 5f 72 65 73 65 74 5f 5f 22 2c 62 29 2c 6d 28 22 5f 5f 52 65 73 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 62 29 2c 6d 28 22 5f 5f 77 69 74 68 5f 5f 22 2c 52 29 2c 6d 28 22 5f 5f 52 65 77 69 72 65 41 50 49 5f 5f 22 2c 68 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 3b 76 61 72 20 72 3d 6e 28 31 29 2c 5f 3d 6e 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 Data Ascii: __reset__",b),m("__ResetDependency__",b),m("__with__",R),m("__RewireAPI__",h))}).call(this,n(3))},function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){return i}));var r=n(1),_=n(0);function o(e){return o="function"==typeof Symbol&&"symbol"==typ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49932	142.250.185.68	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	487	OUT	GET /js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18928 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:24:24 GMT Expires: Thu, 30 Oct 2025 15:24:24 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 22 Oct 2024 16:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 40643 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 02:41:47 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 45 7d 2c 70 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 69 66 28 21 28 45 3d 28 54 3d 6e 75 6c 6c 2c 70 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 45 29 7c 7c 21 45 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 54 3b 74 72 79 7b 54 3d 45 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTM
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 2c 4a 2c 51 29 7b 69 66 28 28 28 28 28 64 3d 28 4a 3d 28 70 3d 28 51 3d 28 45 7c 7c 54 2e 43 2b 2b 2c 54 2e 69 3e 30 26 26 54 2e 53 26 26 54 2e 68 50 29 26 26 54 2e 6c 3c 3d 31 26 26 21 54 2e 56 26 26 21 54 2e 4a 26 26 28 21 45 7c 7c 54 2e 50 75 2d 46 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 54 29 2e 43 3d 3d 34 29 7c 7c 51 3f 54 2e 52 28 29 3a 54 2e 49 2c 4a 2d 54 2e 49 29 2c 54 29 2e 73 2b 3d 64 3e 3e 31 34 3e 30 2c 54 2e 68 29 26 26 28 54 2e 68 5e 3d 28 54 2e 73 2b 31 3e 3e 32 29 2a 28 Data Ascii: LLC',' SPDX-License-Identifier: Apache-2.0','/','var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)(
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 6f 6f 72 3a 45 7d 29 7d 2c 75 4e 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 29 7b 72 65 74 75 72 6e 28 46 3d 4f 5b 45 2e 4e 5d 28 45 2e 5a 71 29 2c 46 5b 45 2e 4e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 46 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 3d 74 7d 2c 46 7d 2c 56 63 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 29 7b 69 66 28 45 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 46 3d 30 3b 46 3c 33 3b 46 2b 2b 29 54 5b 46 5d 2b 3d 45 5b 46 5d 3b 66 6f 72 28 46 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 28 45 3d 30 2c 31 35 29 5d 3b 45 3c 39 3b 45 2b 2b 29 54 5b 33 5d 28 54 2c 45 25 33 2c 46 5b 45 5d 29 7d 7d 2c 74 54 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c Data Ascii: oor:E})},uN=function(E,T,F){return(F=O[E.N](E.Zq),F[E.N]=function(){return T},F).concat=function(t){T=t},F},Vc=function(E,T,F){if(E.length==3){for(F=0;F<3;F++)T[F]+=E[F];for(F=[13,8,13,12,16,5,3,10,(E=0,15)];E<9;E++)T[3](T,E%3,F[E])}},tT=function(E,T,F,t,
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 2c 4a 2c 66 29 7d 7d 72 65 74 75 72 6e 20 4a 7d 2c 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 29 7b 4b 28 28 64 3d 28 74 3d 28 45 26 3d 28 46 3d 45 26 34 2c 33 29 2c 77 29 28 54 29 2c 77 29 28 54 29 2c 74 3d 53 28 54 2c 74 29 2c 46 26 26 28 74 3d 71 54 28 22 22 2b 74 29 29 2c 45 26 26 4b 28 43 28 74 2e 6c 65 6e 67 74 68 2c 32 29 2c 64 2c 54 29 2c 74 29 2c 64 2c 54 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 66 6f 72 28 54 3d 5b 5d 3b 45 2d 2d 3b 29 54 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 54 7d 2c 57 36 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 69 66 28 54 3d 28 45 3d 6e 75 6c 6c 2c 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 54 7c 7c 21 54 2e 63 72 Data Ascii: ,J,f)}}return J},nd=function(E,T,F,t,d){K((d=(t=(E&=(F=E&4,3),w)(T),w)(T),t=S(T,t),F&&(t=qT(""+t)),E&&K(C(t.length,2),d,T),t),d,T)},h=function(E,T){for(T=[];E--;)T.push(Math.random()*255\|0);return T},W6=function(E,T){if(T=(E=null,m.trustedTypes),!T\|\|!T.cr
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 29 7b 69 66 28 46 2e 57 2e 6c 65 6e 67 74 68 29 7b 46 2e 53 3d 28 46 2e 68 50 3d 28 46 2e 53 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 54 29 2c 74 72 75 65 29 3b 74 72 79 7b 64 3d 46 2e 52 28 29 2c 46 2e 43 3d 30 2c 46 2e 42 3d 64 2c 46 2e 49 3d 64 2c 46 2e 67 3d 30 2c 74 3d 64 5a 28 46 2c 54 29 2c 45 3d 45 3f 30 3a 31 30 2c 70 3d 46 2e 52 28 29 2d 46 2e 42 2c 46 2e 72 77 2b 3d 70 2c 46 2e 76 75 26 26 46 2e 76 75 28 70 2d 46 2e 44 2c 46 2e 4f 2c 46 2e 59 2c 46 2e 67 29 2c 46 2e 4f 3d 66 61 6c 73 65 2c 46 2e 59 3d 66 61 6c 73 65 2c 46 2e 44 3d 30 2c 70 3c 45 7c 7c 46 2e 57 75 2d 2d 3c 3d 30 7c 7c 28 70 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 70 29 2c 46 2e 4c 32 2e 70 75 73 68 28 Data Ascii: }},X=function(E,T,F,t,d,p){if(F.W.length){F.S=(F.hP=(F.S&&":TQR:TQR:"(),T),true);try{d=F.R(),F.C=0,F.B=d,F.I=d,F.g=0,t=dZ(F,T),E=E?0:10,p=F.R()-F.B,F.rw+=p,F.vu&&F.vu(p-F.D,F.O,F.Y,F.g),F.O=false,F.Y=false,F.D=0,p<E\|\|F.Wu--<=0\|\|(p=Math.floor(p),F.L2.push(
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 70 5b 64 2e 78 62 3d 79 2c 31 5d 2c 70 5b 32 5d 5d 2c 79 3d 28 79 3c 3c 33 29 2d 34 3b 74 72 79 7b 64 2e 45 62 3d 70 64 28 6b 2c 55 5a 28 28 79 7c 30 29 2b 34 2c 64 29 2c 55 5a 28 79 2c 64 29 29 7d 63 61 74 63 68 28 76 29 7b 74 68 72 6f 77 20 76 3b 7d 7d 64 2e 70 75 73 68 28 64 2e 45 62 5b 51 26 37 5d 5e 4a 29 7d 2c 70 3d 53 28 46 2c 32 30 34 29 29 3a 54 3d 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 64 2e 70 75 73 68 28 4a 29 7d 2c 74 26 26 54 28 74 26 32 35 35 29 2c 46 3d 45 2e 6c 65 6e 67 74 68 2c 74 3d 30 3b 74 3c 46 3b 74 2b 2b 29 54 28 45 5b 74 5d 29 7d 2c 49 43 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 2c 46 2c 74 2c 64 2c 70 2c 4a 2c 51 29 7b 72 65 74 75 72 6e 28 64 3d 4f 5b 46 2e 4e 5d 28 28 4a 3d 28 74 3d 5b 36 38 2c 28 51 3d 41 54 2c 34 31 29 2c 2d 31 31 Data Ascii: p[d.xb=y,1],p[2]],y=(y<<3)-4;try{d.Eb=pd(k,UZ((y\|0)+4,d),UZ(y,d))}catch(v){throw v;}}d.push(d.Eb[Q&7]^J)},p=S(F,204)):T=function(J){d.push(J)},t&&T(t&255),F=E.length,t=0;t<F;t++)T(E[t])},IC=function(E,T,F,t,d,p,J,Q){return(d=O[F.N]((J=(t=[68,(Q=AT,41),-11
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 28 45 2c 31 35 37 2c 64 29 2c 45 29 29 2c 53 29 28 45 2c 46 29 7d 47 28 66 61 6c 73 65 2c 28 70 26 26 70 5b 51 63 5d 26 32 30 34 38 3f 70 28 45 2c 54 29 3a 50 28 5b 72 2c 32 31 2c 46 5d 2c 30 2c 45 29 2c 45 29 2c 54 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 4a 29 7b 53 28 45 2c 39 36 29 3f 50 28 4a 2c 32 32 2c 45 29 3a 63 28 45 2c 39 36 2c 4a 29 7d 69 66 28 21 54 29 7b 69 66 28 45 2e 4b 32 29 7b 7a 34 28 28 45 2e 6c 2d 2d 2c 45 29 2c 34 32 36 38 35 36 32 36 32 33 36 34 29 3b 72 65 74 75 72 6e 7d 50 28 5b 72 2c 33 33 5d 2c 30 2c 45 29 7d 7d 63 61 74 63 68 28 4a 29 7b 74 72 79 7b 50 28 4a 2c 32 32 2c 45 29 7d 63 61 74 63 68 28 51 29 7b 67 28 51 2c 45 29 7d 7d 45 2e 6c 2d 2d 7d 7d 2c 55 5a 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 54 29 7b 72 65 74 75 72 6e 20 54 Data Ascii: (E,157,d),E)),S)(E,F)}G(false,(p&&p[Qc]&2048?p(E,T):P([r,21,F],0,E),E),T,false)}catch(J){S(E,96)?P(J,22,E):c(E,96,J)}if(!T){if(E.K2){z4((E.l--,E),426856262364);return}P([r,33],0,E)}}catch(J){try{P(J,22,E)}catch(Q){g(Q,E)}}E.l--}},UZ=function(E,T){return T
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 29 3b 6b 3c 33 38 36 3b 6b 2b 2b 29 51 5b 6b 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6b 29 3b 69 66 28 70 2e 75 73 3d 28 70 2e 47 3d 28 70 2e 64 77 3d 66 61 6c 73 65 2c 70 2e 67 3d 30 2c 70 2e 75 3d 28 70 2e 76 75 3d 28 70 2e 6b 62 3d 28 70 2e 70 32 3d 5b 5d 2c 30 29 2c 74 29 2c 76 6f 69 64 20 30 29 2c 28 70 2e 58 4d 3d 28 70 2e 4c 32 3d 5b 5d 2c 4a 29 2c 70 29 2e 4a 3d 6e 75 6c 6c 2c 28 28 70 2e 50 75 3d 38 30 30 31 2c 70 29 2e 56 3d 76 6f 69 64 20 30 2c 70 2e 54 3d 28 70 2e 76 3d 76 6f 69 64 20 30 2c 70 2e 43 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 70 29 2e 69 3d 30 2c 28 70 2e 56 35 3d 76 6f 69 64 20 30 2c 70 2e 48 3d 70 2c 70 2e 6d 65 3d 66 61 6c 73 65 2c 70 2e 6c 3d 30 2c 70 29 2e 72 77 3d 28 70 2e 68 50 3d 28 70 2e Data Ascii: );k<386;k++)Q[k]=String.fromCharCode(k);if(p.us=(p.G=(p.dw=false,p.g=0,p.u=(p.vu=(p.kb=(p.p2=[],0),t),void 0),(p.XM=(p.L2=[],J),p).J=null,((p.Pu=8001,p).V=void 0,p.T=(p.v=void 0,p.C=void 0,void 0),p).i=0,(p.V5=void 0,p.H=p,p.me=false,p.l=0,p).rw=(p.hP=(p.
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 2c 76 2c 75 2c 56 2c 4e 29 7b 63 28 79 2c 28 4e 3d 53 28 79 2c 28 75 3d 53 28 79 2c 28 4e 3d 77 28 28 76 3d 28 56 3d 77 28 79 29 2c 77 28 79 29 29 2c 79 29 29 2c 75 3d 77 28 79 29 2c 75 29 29 2c 4e 29 29 2c 76 3d 53 28 79 2c 76 29 2c 56 29 2c 6b 57 28 75 2c 76 2c 4e 2c 79 29 29 7d 29 29 2c 70 29 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 2c 56 29 7b 63 28 79 2c 28 75 3d 53 28 28 56 3d 53 28 79 2c 28 76 3d 77 28 28 56 3d 77 28 28 75 3d 77 28 79 29 2c 79 29 29 2c 79 29 29 2c 56 29 29 2c 79 29 2c 75 29 2c 76 29 2c 75 5b 56 5d 29 7d 29 2c 70 29 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 29 7b 47 28 74 72 75 65 2c 79 2c 76 2c 66 61 6c 73 65 29 7c 7c 28 76 3d 77 28 79 29 2c 75 3d 77 28 79 29 2c 63 28 79 2c 75 2c 66 75 6e 63 74 69 6f 6e 28 56 29 7b 72 65 74 Data Ascii: ,v,u,V,N){c(y,(N=S(y,(u=S(y,(N=w((v=(V=w(y),w(y)),y)),u=w(y),u)),N)),v=S(y,v),V),kW(u,v,N,y))})),p),function(y,v,u,V){c(y,(u=S((V=S(y,(v=w((V=w((u=w(y),y)),y)),V)),y),u),v),u[V])}),p),function(y,v,u){G(true,y,v,false)\|\|(v=w(y),u=w(y),c(y,u,function(V){ret
2024-10-31 02:41:47 UTC	1378	IN	Data Raw: 56 29 29 2c 53 28 79 2c 75 29 29 2c 76 29 2c 75 20 69 6e 20 56 7c 30 29 7d 29 2c 30 29 2c 32 31 35 29 2c 70 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 76 2c 75 2c 56 2c 4e 2c 71 2c 61 29 7b 69 66 28 21 47 28 74 72 75 65 2c 79 2c 76 2c 74 72 75 65 29 29 7b 69 66 28 61 3d 28 4e 3d 28 56 3d 53 28 28 76 3d 53 28 28 76 3d 77 28 28 56 3d 77 28 28 61 3d 77 28 79 29 2c 79 29 29 2c 79 29 29 2c 4e 3d 77 28 79 29 2c 79 29 2c 76 29 2c 79 29 2c 56 29 2c 53 28 79 2c 4e 29 29 2c 53 28 79 2c 61 29 29 2c 4f 5a 28 61 29 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 71 20 69 6e 20 75 3d 5b 5d 2c 61 29 75 2e 70 75 73 68 28 71 29 3b 61 3d 75 7d 69 66 28 79 2e 48 3d 3d 79 29 66 6f 72 28 76 3d 76 3e 30 3f 76 3a 31 2c 79 3d 61 2e 6c 65 6e 67 74 68 2c 71 3d 30 3b 71 3c 79 3b 71 2b 3d Data Ascii: V)),S(y,u)),v),u in V\|0)}),0),215),p,function(y,v,u,V,N,q,a){if(!G(true,y,v,true)){if(a=(N=(V=S((v=S((v=w((V=w((a=w(y),y)),y)),N=w(y),y),v),y),V),S(y,N)),S(y,a)),OZ(a)=="object"){for(q in u=[],a)u.push(q);a=u}if(y.H==y)for(v=v>0?v:1,y=a.length,q=0;q<y;q+=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49933	157.240.251.9	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	1201	OUT	GET /signals/config/473259996747529?v=2.9.174&r=stable&domain=www.riparide.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-dLKxULSa' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 02:41:47 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 02:41:47 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 02:41:47 UTC	13815	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 Data Ascii: totype:"@@prototype")?"symbol":typeof a};function i(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function j(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(t
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 61 72 6e 28 22 5b 66 62 70 69 78 65 6c 5d 20 22 2b 64 2e 69 64 2b 22 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 20 47 6f 20 74 6f 20 45 76 65 6e 74 73 20 4d 61 6e 61 67 65 72 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 22 29 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 Data Ascii: arn("[fbpixel] "+d.id+" is unavailable. Go to Events Manager to learn more"))})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.prohibitedsources");f.registerPlugin&&f.registerPlugin("fbevents.plugins.prohibiteds
2024-10-31 02:41:47 UTC	16384	IN	Data Raw: 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 Data Ascii: s[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plugins.estruleengine",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";v
2024-10-31 02:41:47 UTC	2568	IN	Data Raw: 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 67 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 68 3d 67 2e 6c 6f 67 45 72 72 6f 72 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 65 6e 74 45 76 65 6e 74 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 Data Ascii: f.getFbeventsModules("SignalsFBEventsPlugin");var d=f.getFbeventsModules("SignalsParamList"),g=f.getFbeventsModules("SignalsFBEventsLogging"),h=g.logError,i=f.getFbeventsModules("SignalsFBEventsSendEventEvent"),j=f.getFbeventsModules("signalsFBEventsSendE
2024-10-31 02:41:47 UTC	12133	IN	Data Raw: 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 Data Ascii: tsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49934	157.240.253.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	1052	OUT	GET /tr/?id=473259996747529&ev=PageView&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505811&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=0&o=4126&fbp=fb.1.1730342505808.34896390581771102&cs_est=true&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498576-8bb72090-608e-4272-892d-94437e7a3f4a&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=120, rtx=0, c=10, mss=1380, tbw=3403, tp=-1, tpl=-1, uplat=5, ullat=5 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 02:41:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49936	157.240.253.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	1167	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=473259996747529&ev=PageView&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505811&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=0&o=4126&fbp=fb.1.1730342505808.34896390581771102&cs_est=true&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498576-8bb72090-608e-4272-892d-94437e7a3f4a&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	1000	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431764479278084449", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431764479278084449"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 02:41:47 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 02:41:47 UTC	1754	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-31 02:41:47 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-10-31 02:41:47 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49935	157.240.253.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	1146	OUT	GET /tr/?id=473259996747529&ev=Adventure%20Viewed&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505813&cd[adventure_id]=28758&cd[adventure_title]=Marom%20Waterfalls&cd[adventure_type]=Waterfall&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=1&o=4126&fbp=fb.1.1730342505808.34896390581771102&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498639-72092d94-437e-4a3f-8a21-798365d76fbc&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=123, rtx=0, c=10, mss=1380, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 02:41:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49940	54.175.0.51	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	615	OUT	POST /messenger/web/launcher_settings HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 392 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	392	OUT	Data Raw: 61 70 70 5f 69 64 3d 61 68 6c 67 32 34 6d 75 26 76 3d 33 26 67 3d 34 31 35 30 31 36 61 32 31 32 31 38 32 61 32 33 30 63 64 33 62 30 37 36 62 37 39 35 37 66 64 61 32 62 31 38 65 33 35 35 26 73 3d 66 62 37 39 66 30 61 39 2d 65 66 34 38 2d 34 66 63 39 2d 62 39 62 62 2d 61 32 62 62 65 62 34 63 35 61 32 38 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 30 31 62 61 61 33 35 31 31 30 66 63 36 33 31 38 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 4d 61 72 6f 6d 25 32 30 57 61 74 65 72 66 61 6c 6c 73 25 32 30 25 37 43 25 Data Ascii: app_id=ahlg24mu&v=3&g=415016a212182a230cd3b076b7957fda2b18e355&s=fb79f0a9-ef48-4fc9-b9bb-a2bbeb4c5a28&r=&platform=web&installation_type=js-snippet&Idempotency-Key=01baa35110fc6318&internal=&is_intersection_booted=false&page_title=Marom%20Waterfalls%20%7C%
2024-10-31 02:41:47 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.riparide.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: a75625d8fef313fdcf5a7e59b8a9f52f5cf86444 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 00182u8pukhr2d294260 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"99a3e2797fd6ab567080b3cfc5c1448a" X-Runtime: 0.029958 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0a3ded630387c80e2
2024-10-31 02:41:47 UTC	246	IN	Data Raw: 66 30 0d 0a 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 22 72 69 67 68 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 63 62 38 39 36 61 22 2c 22 68 61 73 5f 72 65 71 75 69 72 65 64 5f 66 65 61 74 75 72 65 73 22 3a 74 72 75 65 2c 22 68 6f 72 69 7a 6f 6e 74 61 6c 5f 70 61 64 64 69 6e 67 22 3a 32 30 2c 22 69 6e 73 74 61 6e 74 5f 62 6f 6f 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6c 61 75 6e 63 68 65 72 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 6e 75 6c 6c 2c 22 73 65 63 6f 6e 64 61 72 79 5f 63 6f 6c 6f 72 22 3a 22 23 30 63 36 37 37 36 22 2c 22 73 68 6f 77 5f 6c 61 75 6e 63 68 65 72 22 3a 74 72 75 65 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 31 37 33 30 32 39 33 33 34 31 2c 22 76 65 72 74 69 63 61 6c 5f 70 61 64 64 69 6e 67 22 3a 32 30 7d 0d 0a Data Ascii: f0{"alignment":"right","color":"#cb896a","has_required_features":true,"horizontal_padding":20,"instant_boot_enabled":true,"launcher_logo_url":null,"secondary_color":"#0c6776","show_launcher":true,"updated_at":1730293341,"vertical_padding":20}
2024-10-31 02:41:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49939	54.175.0.51	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	602	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 428 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.riparide.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:47 UTC	428	OUT	Data Raw: 61 70 70 5f 69 64 3d 61 68 6c 67 32 34 6d 75 26 76 3d 33 26 67 3d 34 31 35 30 31 36 61 32 31 32 31 38 32 61 32 33 30 63 64 33 62 30 37 36 62 37 39 35 37 66 64 61 32 62 31 38 65 33 35 35 26 73 3d 65 35 33 32 62 32 66 65 2d 35 32 62 37 2d 34 31 36 66 2d 62 66 64 32 2d 32 33 64 36 33 38 36 61 61 37 34 64 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 33 37 66 35 36 39 34 62 35 65 38 32 31 35 65 66 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 4d 61 72 6f 6d 25 32 30 57 61 74 65 72 66 61 6c 6c 73 25 Data Ascii: app_id=ahlg24mu&v=3&g=415016a212182a230cd3b076b7957fda2b18e355&s=e532b2fe-52b7-416f-bfd2-23d6386aa74d&r=&platform=web&installation_type=js-snippet&Idempotency-Key=37f5694b5e8215ef&internal=%7B%7D&is_intersection_booted=false&page_title=Marom%20Waterfalls%
2024-10-31 02:41:47 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:41:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://www.riparide.com Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: a75625d8fef313fdcf5a7e59b8a9f52f5cf86444 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 0017880sq0j937fnd040 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"d68599ba96868b65ccb38b917ebffd4a" X-Runtime: 0.222621 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-0a3ded630387c80e2
2024-10-31 02:41:47 UTC	3182	IN	Data Raw: 63 36 37 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 69 70 61 72 69 64 65 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 22 57 65 26 23 33 39 3b 72 65 20 68 65 72 65 20 74 6f 20 69 6e 73 70 69 72 65 20 79 6f 75 20 74 6f 20 6c 69 76 65 20 66 75 6c 6c 79 2e 20 41 73 6b 20 75 73 20 61 6e 79 74 68 69 6e 67 20 f0 9f 99 82 22 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 Data Ascii: c67{"app":{"name":"Riparide","audio_enabled":true,"show_powered_by":true,"team_intro":"We're here to inspire you to live fully. Ask us anything ","team_greeting":"Hi there ","messenger_background":null,"expected_response_delay_translation_ke
2024-10-31 02:41:47 UTC	2957	IN	Data Raw: 62 38 36 0d 0a 22 23 30 63 36 37 37 36 22 2c 22 73 68 6f 77 5f 6c 61 75 6e 63 68 65 72 22 3a 74 72 75 65 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 31 37 33 30 32 39 33 33 34 31 2c 22 76 65 72 74 69 63 61 6c 5f 70 61 64 64 69 6e 67 22 3a 32 30 7d 2c 22 6d 6f 64 75 6c 65 73 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 5f 74 72 61 63 6b 69 6e 67 5f 69 64 22 3a 22 55 41 2d 34 32 33 35 36 34 31 35 2d 31 22 7d 2c 22 72 74 6d 22 3a 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 65 78 75 73 2d 77 65 62 73 6f 63 6b 65 74 2d 61 2e 69 6e 74 65 72 63 6f 6d 2e 69 6f 2f 70 75 62 73 75 62 2f 35 2d 6e 65 61 66 6f 75 57 30 4b 49 75 4a 34 68 53 5f 36 34 77 4c 67 44 58 36 70 52 56 58 6f 49 42 49 46 Data Ascii: b86"#0c6776","show_launcher":true,"updated_at":1730293341,"vertical_padding":20},"modules":{"messages":{"google_analytics_tracking_id":"UA-42356415-1"},"rtm":{"endpoints":["https://nexus-websocket-a.intercom.io/pubsub/5-neafouW0KIuJ4hS_64wLgDX6pRVXoIBIF
2024-10-31 02:41:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49938	18.245.46.19	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	360	OUT	GET /vendor.6349e54f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 196869 Connection: close Date: Thu, 31 Oct 2024 02:41:49 GMT Last-Modified: Wed, 30 Oct 2024 17:25:01 GMT ETag: "72afb86f841a4306b6702132c561fde7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: D06sMoBRmW6l7f6MJ82APJALF7dSQSwc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ca751e0315de05e656597e32136af94e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1Cem1mY-efxm49xp2T_Ia_tHMwZymnYTpqqDk7skG1mf-PwgE3ALfA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-10-31 02:41:48 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 7f db 38 ae 30 fc ff fb 29 1c 6d 27 23 d5 8a 63 3b 71 2e 72 55 9f b4 4d a7 3d db db 69 d2 b9 ac eb c9 ca 12 6d 6b 22 4b 1e 49 76 92 89 fd 7c f6 17 00 49 89 ba 38 4d 67 cf fb 7b de 9d 6d 2c 51 bc 80 20 08 80 20 08 ee 3f dd 69 bc 8e e2 46 e0 bb 2c 4c 58 c3 0f 27 51 3c 77 52 3f 0a 1b 8b 80 39 90 94 30 d6 58 b1 d0 8b e2 d6 d1 c1 e1 29 eb 1d 4e 5a 7f 24 ad 77 6f 5f 9e 7f b8 38 6f a5 b7 69 e3 e9 fe ff a3 27 2c 98 b4 6e d8 78 e1 b8 d7 2f 67 cb f0 da 0f 53 16 bb d1 fc ea 8f c4 7e e8 e3 7a 3d 1c 19 ad c5 32 99 e9 c3 e1 61 a7 db 19 99 f7 dd de 49 a7 67 4d 96 a1 8b 90 e8 cc 4c cd d0 b8 d7 96 08 4e 1a fb 6e aa f5 c3 96 a7 a7 e6 fd 59 9e cb b8 8f 59 ba 8c c3 c6 7c b3 31 fa 2b 27 6e c4 76 a8 1f 9d b4 4f 3a 86 19 c1 e3 61 fb e0 b4 Data Ascii: {80)m'#c;q.rUM=imk"KIv\|I8Mg{m,Q ?iF,LX'Q<wR?90X)NZ$wo_8oi',nx/gS~z=2aIgMLNnYY\|1+'nvO:a
2024-10-31 02:41:48 UTC	400	IN	Data Raw: 9f 1e 59 c2 ee 28 d2 62 5b 3b bf c5 98 de 20 b9 9d 2c 30 ac 06 c8 a7 18 72 6b 8a 1f 37 05 b9 ba ff fb 70 af 39 6a df 8a 7d a3 11 24 fb 78 c1 e0 ef ed f1 b0 dd e1 af 09 be 46 90 e3 98 bf 2f b3 ed 68 8c b4 55 f6 51 0f 5b d3 dd 5d f9 a7 c5 63 1a 82 00 e3 0f 94 08 82 b1 52 0a 7b b6 bb 9b ff ad 16 a4 be 4f 6c 77 bd 0e d6 eb d7 12 35 9a e2 6d af 19 30 0c de f6 d8 8b 20 2e b9 ee e0 dc 9a 33 5b aa 11 ca c5 15 ca 75 df ad 57 30 7f 5a 61 74 83 ab 61 35 62 4f 76 57 94 d8 a6 96 57 4a ee e0 09 25 a5 5b 20 c9 33 b4 63 74 a8 42 e8 1b ee dd 2f 2e 0e ac 86 92 a4 b0 7b 35 a7 59 cb 61 3f 59 5d 08 6a 82 a4 7a 72 60 43 4e 08 da 90 7f 10 d1 32 47 90 c1 93 21 29 37 4a d8 cd 0f ce 07 84 81 22 71 ca 23 84 6a 77 e4 2d 0e 14 2f f4 e3 64 90 3d 81 60 c6 83 76 18 d7 71 80 11 49 ad 74 Data Ascii: Y(b[; ,0rk7p9j}$xF/hUQ[]cR{Olw5m0 .3[uW0Zata5bOvWWJ%[ 3ctB/.{5Ya?Y]jzr`CN2G!)7J"q#jw-/d=`vqIt
2024-10-31 02:41:48 UTC	861	IN	Data Raw: 45 4c b2 7d 71 d1 03 de d9 02 f3 5e 9e 2b c2 6b 59 0b 51 7c b2 83 6d 7b 6e f1 fe 3c 18 4e 98 a1 e1 73 9c 00 21 ba c6 78 bb bb 6c 2f 78 6e 3b 6a c0 9e ec 5a 6b 9d d8 f3 95 42 79 78 2e bc bf b4 61 c1 70 e9 cf 59 b4 4c f5 1b b3 cc 08 61 65 b1 a7 43 d3 d9 08 78 83 99 1e 9a 0e 26 06 20 2c 42 22 e5 42 dc 9f fc 46 52 d9 c3 29 de d6 33 86 2f 96 ae f4 3b 29 44 f6 51 e0 04 21 86 60 f2 88 68 f9 15 32 3e 1d 2c 44 33 af b8 f5 2f 43 c3 52 f6 a8 46 da 06 90 bd d4 c7 14 28 80 83 93 6c 74 97 da f1 8c 0c e6 72 d6 31 64 d9 94 11 cf 0f 25 94 b2 82 50 cd 82 2c db 73 18 f8 f5 ba 6d 0a 8a 05 72 ca 69 14 b8 be ee d9 1a 30 c7 5f 1c 3f 25 1a 35 06 0b 7d ae 87 2d 91 46 45 53 c3 72 80 fa 1e 22 e6 a9 61 5e 00 53 81 c5 68 50 b8 7c 3b bb 9a 7c 77 d7 85 46 63 09 e6 d2 20 e2 8e 6c 17 c6 Data Ascii: EL}q^+kYQ\|m{n<Ns!xl/xn;jZkByx.apYLaeCx& ,B"BFR)3/;)DQ!`h2>,D3/CRF(ltr1d%P,smri0_?%5}-FESr"a^ShP\|;\|wFc l
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: c4 d1 71 69 74 f6 fe 48 5a 1a e8 3a f7 7e e8 c6 a5 73 c4 00 0a 0c ab 3f 2f c6 94 40 3b c6 46 52 e7 f2 db 23 7a 95 f8 e1 b5 9d d4 0d 25 8c cc 05 7e ac 8c 0b 2f 53 1a 96 0a 09 17 aa 2f 8d a0 e8 cc 96 aa f3 0c ba 53 19 10 de e3 92 e5 46 29 cb bf 63 41 3a 36 4c 98 55 ef 8e 2f de ae 9b c7 f9 a4 2a fc d0 4f 7d 27 78 e1 24 ec 15 0b 9c 3b 19 19 1c a4 75 9e 26 ef 7a 85 a5 71 34 99 bc 07 96 e6 2f 60 b4 80 b8 45 66 3f fc cc 8f 16 c7 59 69 91 10 f1 04 c2 95 6e d4 21 bd 1e 8d 78 8b cb db 32 6c b5 10 17 91 85 e5 4a 42 72 6b 7d cf 2b 3d 35 14 19 28 61 36 69 69 ca c3 d5 56 0a f0 08 5f fc 5c 35 77 48 2e 22 a4 84 0e 43 ca 80 72 9d 75 e0 7d 7f dd 2a f4 db 11 b8 bd ad ca 00 9b 65 92 cf 81 a9 3d 95 de e0 bb f0 94 4b 37 78 58 e7 26 e3 34 99 6b 78 5c e8 df 3f e6 50 00 5e 83 83 Data Ascii: qitHZ:~s?/@;FR#z%~/S/SF)cA:6LU/O}'x$;u&zq4/`Ef?Yin!x2lJBrk}+=5(a6iiV_\5wH."Cru}e=K7xX&4kx\?P^
2024-10-31 02:41:48 UTC	1024	IN	Data Raw: 28 37 b8 76 6e 27 55 75 5b 07 c5 40 3e 7a 05 7d 5a 64 a4 46 79 5d 9c 3b 78 40 ca e1 d2 f1 bf 2b 8e 47 b9 ba e3 00 ea f5 5c 8f 25 b4 0a d7 d4 eb 5f ac 6f da 4f f0 f3 b4 6a f7 94 21 aa d8 b7 ee 0c da 90 c8 ff 5c ea a8 7b 2e 2e ca 30 c3 d8 3e f3 ae 95 d6 5e dd d8 57 78 f8 17 d4 c4 29 0a 93 08 38 73 92 a7 cb e7 66 c8 0a e3 7a 2a 25 0d 0c ad 38 b9 2f 5a 59 ac a6 88 cb 70 ea 7f 0c 1d d4 7b 5f 0b 52 7e d3 70 4e 59 3d 01 87 eb fe a5 3e 4c 0a 16 ef 3a f4 60 59 dd 3f c3 ee 5a 51 28 6b 0d 4d f1 4e b9 38 55 a9 82 34 7f d0 9d 01 f3 a5 08 df 3d 75 fe 8e 26 fe 3e 6a e2 71 cd ae c5 10 d6 6d 5f f4 00 ff f5 c2 69 cd 7f 68 97 f6 89 e1 06 3a 88 87 aa 6c 4f 2f 34 45 89 64 3e d4 59 14 0d 0d 0c fc fd 7a bd 54 34 47 3d 70 75 7e 1a 79 52 30 5b 95 72 0b 59 bc 9c b6 75 aa 90 4a f8 Data Ascii: (7vn'Uu[@>z}ZdFy];x@+G\%_oOj!\{..0>^Wx)8sfz*%8/ZYp{_R~pNY=>L:`Y?ZQ(kMN8U4=u&>jqm_ih:lO/4Ed>YzT4G=pu~yR0[rYuJ
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: 4e ae 12 34 10 4b 4e 37 a9 53 e2 c9 94 1b ce 33 03 e4 1a 20 95 03 fc a7 cd 93 54 3b 7b 74 43 b9 3a f8 8b 84 2d 90 7e 1b 98 85 43 48 17 16 64 64 fb a1 e5 fc 21 ca e2 19 66 dd b0 52 93 d1 ad 19 92 9c db 5a fc a2 73 1c e7 45 f7 0c 1d 39 f1 ab 69 41 8b 15 58 5f 17 bf 5a bf 23 fb 81 3d 46 51 e5 b5 62 46 98 5b 23 fc a2 06 16 c1 01 31 1c 09 bd be 60 a5 ea a1 e4 de 70 ee 95 61 f6 4b 55 c7 71 5e 88 ed c7 f4 2f 3a 77 eb cf a1 f3 4f 14 04 64 e6 99 12 78 62 6e 44 eb bc e0 27 e4 7b 80 e6 a8 4c 69 21 a9 4c 14 aa ac 32 a5 15 46 b3 8b 93 96 27 c2 e3 c7 d4 5a d6 7a a7 da 59 c9 ac 63 8c a2 2d 9d 38 aa 69 8a 89 0b 14 b2 a7 ad b0 02 ee 13 6b 11 4d 21 36 95 75 ec 57 74 b0 4c 5f e8 d9 57 0d 33 9c 6b 98 c6 a7 2a c7 f7 0c 00 e0 08 d5 58 ed 61 e6 26 fc e1 a5 15 02 1a d1 78 8d 4b Data Ascii: N4KN7S3 T;{tC:-~CHdd!fRZsE9iAX_Z#=FQbF[#1`paKUq^/:wOdxbnD'{Li!L2F'ZzYc-8ikM!6uWtL_W3k*Xa&xK
2024-10-31 02:41:48 UTC	1024	IN	Data Raw: b1 95 f2 f0 ba 3c 5b 0f 5e d3 5b 82 55 40 24 be 4f e7 db d6 1c b2 94 89 fa ae 68 21 6a dd 14 cb 79 af db 20 03 86 e1 39 3a 4c 74 3b d7 91 80 76 9c 07 77 02 f5 97 09 f4 21 db 98 06 28 8e e9 e7 fb 8f 75 58 18 f3 2c 60 97 01 f2 ba 55 89 c1 f5 a0 d6 5a af 6b 08 2b ed 97 cb f1 37 f5 12 22 fe 51 22 b3 15 67 90 45 91 7c 2e 1f 0f 42 0f d0 df cf 60 bf 27 76 77 d7 af c6 55 13 24 b5 6a ee ef 4f 34 f8 b9 b2 97 07 07 a6 3e b3 eb 0d 06 96 a7 d6 f5 6a bd a9 55 e9 07 74 98 65 e8 37 b6 8b 44 4b 06 f3 c8 9a 7b b0 35 40 50 d6 6b 84 68 83 31 a7 62 dc 07 94 91 12 56 64 b8 70 96 b9 67 0c d4 c0 76 61 07 9d 18 da 4b 8c 1d d8 0b 2a 4a de 9b 6a ba bb ab a2 87 19 1e 11 6a da 3e 02 0d 87 d5 aa 3e da b5 61 be aa 6e c5 0e 2b ab 03 db 1c cc f6 46 d6 6c 17 cf 33 ab 2b 4d db 1d 1d d8 75 Data Ascii: <[^[U@$Oh!jy 9:Lt;vw!(uX,`UZk+7"Q"gE\|.B`'vwU$jO4>jUte7DK{5@Pkh1bVdpgvaK*Jjj>>an+Fl3+Mu
2024-10-31 02:41:48 UTC	8949	IN	Data Raw: 09 c1 a8 60 9e 1e 83 06 69 08 ff 0a 77 dd 2d d2 19 34 4c 43 e4 d3 74 32 8d 53 29 85 33 a5 de ea 19 02 23 91 cd c1 89 cd 87 c1 8e 33 45 7c f1 95 00 88 f7 7e 76 47 0a 86 19 6b 29 0a fb 0a b6 b0 59 3f 38 73 02 99 00 83 82 21 57 31 31 8d 58 4b b4 09 72 8e ff 22 3c 06 b0 48 66 e8 ee b5 e9 5f 7d 86 e6 88 4d ff c2 ef 88 f6 63 29 68 b8 9d ae 35 e3 48 31 bc 92 69 a9 4e d2 30 48 6d ec 0c 9d 91 6b bb ec 26 74 8d 1e 43 c7 e4 c9 d4 19 07 84 c1 04 8f c7 0c 2a b7 74 0a 7b d6 23 d1 7d 70 b4 93 11 e5 34 21 2a 43 7f 7e 7e 83 dd 96 f7 9a 88 17 71 f3 c2 4b 0e f1 9c e7 5e 91 dd 64 e0 c2 63 ac 27 5f 92 9d f4 28 c1 bf 62 f9 ac 15 12 ca 5a 40 20 3d 9e ee fa 34 93 f3 46 26 ad e2 a8 92 53 c6 d8 c3 23 a3 47 64 a0 59 cf fa 9d 85 0e 47 33 64 41 f0 17 a0 63 21 30 83 56 c3 a9 2c 15 21 Data Ascii: `iw-4LCt2S)3#3E\|~vGk)Y?8s!W11XKr"<Hf_}Mc)h5H1iN0Hmk&tCt{#}p4!C~~qK^dc'_(bZ@ =4F&S#GdYG3dAc!0V,!
2024-10-31 02:41:48 UTC	15990	IN	Data Raw: e2 99 a3 96 ea 20 d3 2c 78 b5 8b 21 19 4c dc 7c 88 43 c7 8f 60 97 85 29 bc 69 39 3a f9 6f af 57 b1 fb 9e e4 e2 7a dd 25 93 2b dd 43 ae da 2e 7c 66 d1 91 4c cd b0 9d b9 8a be 66 a6 72 65 3e f7 b9 1a 8d ad 96 60 df 28 2a 90 19 54 b3 5c 81 2c 9c e7 1e 01 6a 97 44 a1 b9 2b e7 2c b1 ab f1 30 fb 45 b8 f6 b0 14 e3 6a dc 34 b9 3f bd de 28 98 e0 22 c5 82 b8 eb 6d c3 df 46 c8 81 cf 45 ce 82 14 4b 1a 53 ca d0 dd 9f 66 ae f9 36 e5 92 f3 84 4b e6 b5 8b 83 cf 22 0d 12 8b 68 12 af 9c 43 5e 39 35 67 4a 61 2e 85 00 dd 7a 20 50 32 8b ea bd 75 b3 d9 6a 17 f5 c0 e3 08 c8 64 58 c1 83 45 13 c2 b2 22 6d dd ba ab 77 41 08 6b 07 22 e3 bc 02 71 27 9d 59 8b d4 df bd 01 bd c3 5d df e3 d4 2d 38 4a 47 da dc 4e 0a 9e 27 a9 17 1c 41 77 78 ed f3 2a 75 88 cf ec 04 a0 e7 26 9d 9c d7 76 84 Data Ascii: ,x!L\|C`)i9:oWz%+C.\|fLfre>`(T\,jD+,0Ej4?("mFEKSf6K"hC^95gJa.z P2ujdXE"mwAk"q'Y]-8JGN'Awxu&v
2024-10-31 02:41:48 UTC	394	IN	Data Raw: 85 06 3a 20 9c 06 61 e4 bd 04 16 da 85 d5 d9 be 58 4c 63 7f 0a 05 74 8d 0b 54 2b 70 06 77 61 c5 59 a9 48 89 2e e9 ef c8 1d ca 14 76 69 0c f2 c9 dc c1 26 da be 85 07 55 fe c0 4d 42 b7 e7 ba 29 27 bb 4e e6 c8 c6 80 97 a7 b0 1c e2 3b 7c 18 1b a3 2c 01 9c 11 d1 37 22 42 cd f2 93 f7 f2 29 de 25 f5 ba 5e af 3f 50 e7 4c 45 4e 42 49 32 23 12 fd e0 d9 2a d6 f2 7f c7 6c e5 ac bf 77 b6 b6 2b ad ea bd 90 90 34 a5 ad c4 02 36 99 ba 99 e8 45 e2 34 3f 73 da 22 04 f8 a9 83 02 50 d5 06 51 66 67 e0 8e 86 3b 16 cd 63 67 9d 6e 23 5c f0 e4 3c 17 87 4c d9 20 63 6c db 18 96 63 6f 1e 9b 86 7b 32 32 80 4c 22 54 1e f0 43 4c ed f9 f7 33 93 02 5a a5 e3 cb 39 c7 91 0b 15 ff 11 0d 16 11 3a 87 ea 43 62 25 6e b8 59 6a 13 61 62 2b 98 b3 90 23 f0 68 70 01 22 8c 25 ae 88 0b 8c 5e 5e 10 78 Data Ascii: : aXLctT+pwaYH.vi&UMB)'N;\|,7"B)%^?PLENBI2#*lw+46E4?s"PQfg;cgn#\<L clco{22L"TCL3Z9:Cb%nYjab+#hp"%^^x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49937	157.240.253.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:47 UTC	1238	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=473259996747529&ev=Adventure%20Viewed&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505813&cd[adventure_id]=28758&cd[adventure_title]=Marom%20Waterfalls&cd[adventure_type]=Waterfall&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=1&o=4126&fbp=fb.1.1730342505808.34896390581771102&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498639-72092d94-437e-4a3f-8a21-798365d76fbc&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.riparide.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431764479884576463", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431764479884576463"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 02:41:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 02:41:48 UTC	1674	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-31 02:41:48 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49941	157.240.251.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:48 UTC	816	OUT	GET /tr/?id=473259996747529&ev=PageView&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505811&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=0&o=4126&fbp=fb.1.1730342505808.34896390581771102&cs_est=true&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498576-8bb72090-608e-4272-892d-94437e7a3f4a&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=179, rtx=0, c=10, mss=1380, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 02:41:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49943	157.240.251.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:48 UTC	910	OUT	GET /tr/?id=473259996747529&ev=Adventure%20Viewed&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505813&cd[adventure_id]=28758&cd[adventure_title]=Marom%20Waterfalls&cd[adventure_type]=Waterfall&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=1&o=4126&fbp=fb.1.1730342505808.34896390581771102&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498639-72092d94-437e-4a3f-8a21-798365d76fbc&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=121, rtx=0, c=10, mss=1380, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 02:41:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49944	151.101.192.176	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:48 UTC	353	OUT	GET /out-4.5.43.js HTTP/1.1 Host: m.stripe.network Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88751 Cache-Control: max-age=300, public Content-Type: text/javascript; charset=utf-8 strict-transport-security: max-age=31556926; includeSubDomains; preload x-content-type-options: nosniff server: Fastly Accept-Ranges: bytes Date: Thu, 31 Oct 2024 02:41:48 GMT Via: 1.1 varnish Age: 226 X-Request-ID: a8eadaa0-1dab-47d4-9b78-c747291a30e6 X-Served-By: cache-dfw-kdal2120084-DFW X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1730342508.490103,VS0,VE2 Vary: Accept-Encoding, Origin
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: 76 61 72 20 53 74 72 69 70 65 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 5f 2e 6c 3d 21 30 2c 5f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 68 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 68 28 65 2c 74 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: (e){return function(e){if(Array.isArray(e))return h(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(!e)return;if("string"==typeof e)return h(e,t);var n=Object.pr
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: 7b 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6f 72 69 67 69 6e 61 74 69 6e 67 53 63 72 69 70 74 3a 22 6d 22 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 22 2a 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 62 74 6f 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 Data Ascii: {t.postMessage(JSON.stringify({originatingScript:"m",payload:e}),"*")}}catch(e){}},f=function(){return window.btoa\|\|function(e){return e}},s=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:function(){},n=arguments.length>2&&void 0
2024-10-31 02:41:48 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 28 65 29 7d 29 29 7d 29 3a 28 6e 5b 65 5d 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 45 3a 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 79 28 29 3b 64 65 6c 65 74 65 20 74 5b 65 5d 2c 30 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 6c 28 29 5b 73 5d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 76 61 72 20 74 3d 79 28 29 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 6e Data Ascii: nction(t){n[t]=e[t]})),function(){Object.keys(e).forEach((function(t){b(e)}))}):(n[e]=void 0===t?E:t,function(){b(e)})}function b(e){var t=y();delete t[e],0==Object.keys(t).length&&delete l()[s]}function R(e){var t=y(),n=Object.keys(e),r={};function _(){n
2024-10-31 02:41:49 UTC	16384	IN	Data Raw: 65 6e 64 65 6e 63 79 5f 5f 22 2c 62 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 73 65 74 5f 5f 22 2c 52 29 2c 4c 28 22 5f 5f 72 65 73 65 74 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 52 65 73 65 74 44 65 70 65 6e 64 65 6e 63 79 5f 5f 22 2c 70 29 2c 4c 28 22 5f 5f 77 69 74 68 5f 5f 22 2c 6d 29 2c 4c 28 22 5f 5f 52 65 77 69 72 65 41 50 49 5f 5f 22 2c 64 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 28 33 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 28 32 29 2c 5f 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: endency__",b),L("__Rewire__",R),L("__set__",R),L("__reset__",p),L("__ResetDependency__",p),L("__with__",m),L("__RewireAPI__",d))}).call(this,n(3))},function(e,t,n){"use strict";(function(e){var r=n(2),_=n(1),o=n(0);function i(e){return i="function"==typeo
2024-10-31 02:41:49 UTC	6831	IN	Data Raw: 70 52 65 71 75 65 73 74 29 3b 74 72 79 7b 5f 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 76 61 72 20 6f 3b 6f 3d 22 68 74 74 70 73 3a 2f 2f 6d 2e 73 74 72 69 70 65 2e 63 6f 6d 2f 22 2b 74 3b 76 61 72 20 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 7d 29 2c 32 65 33 29 3b 5f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 5f 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 26 26 68 28 22 77 69 6e 22 29 2e 53 74 72 69 70 65 4d 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 3b 76 61 72 20 65 3d 5f 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 32 30 30 3d 3d 3d 5f 2e 73 74 Data Ascii: pRequest);try{_.withCredentials=!0}catch(e){}var o;o="https://m.stripe.com/"+t;var i=setTimeout((function(){r()}),2e3);_.onreadystatechange=function(){if(_.readyState===XMLHttpRequest.DONE&&h("win").StripeM){clearTimeout(i);var e=_.responseText;200===_.st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49945	44.193.22.131	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:48 UTC	374	OUT	GET /messenger/web/launcher_settings HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	4419	IN	HTTP/1.1 406 Not Acceptable Date: Thu, 31 Oct 2024 02:41:48 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 00175q42bb31sv6rbiag X-Runtime: 0.009827 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com app.goentri.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io nexus-websocket-overflow.intercom.io via.intercom.io w [TRUNCATED] Server: nginx
2024-10-31 02:41:48 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49942	157.240.251.35	443	3616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:41:48 UTC	853	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=473259996747529&ev=PageView&dl=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&rl=&if=false&ts=1730342505811&sw=1280&sh=1024&ud[external_id]=2063d3eb6f89abdb41680674ad7c6af20c4977bb0cd6a74a51045057922daa4a&v=2.9.174&r=stable&a=seg&ec=0&o=4126&fbp=fb.1.1730342505808.34896390581771102&cs_est=true&ler=empty&cdl=API_unavailable&it=1730342502404&coo=false&dpo=LDU&dpoco=0&dpost=0&eid=ajs-next-1730342498576-8bb72090-608e-4272-892d-94437e7a3f4a&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 02:41:48 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431764484810464196", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431764484810464196"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 02:41:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 02:41:48 UTC	1730	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Target ID:	0
Start time:	22:41:11
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:41:16
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2332,i,3265026577557954252,15893873326536962339,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:41:18
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.riparide.com/adventures/28758-marom-waterfalls"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Form action: //riparide.us2.list-manage.com/subscribe/post?u=7b235a0b84e1f694020e638b5&id=cd3dc805a2 riparide list-manage

Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WDTTRC
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/871543968?random=1730342488859&cv=11&fst=1730342488859&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0h2z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/740117353?random=1730342490526&cv=11&fst=1730342490526&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z872703833za201zb72703833&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.riparide.com%2Fadventures%2F28758-marom-waterfalls&hn=www.googleadservices.com&frm=0&tiba=Marom%20Waterfalls%20%7C%20Riparide&npa=0&pscdl=noapi&auid=194757565.1730342486&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1

Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No favicon
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No favicon
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No favicon
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No favicon
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No favicon

Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No <meta name="author".. found
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No <meta name="author".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="author".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="author".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="author".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="author".. found

Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No <meta name="copyright".. found
Source: https://www.riparide.com/adventures/28758-marom-waterfalls	HTTP Parser: No <meta name="copyright".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="copyright".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="copyright".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="copyright".. found
Source: https://www.riparide.com/listings?type=accommodation	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_301.2.dr	String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_301.2.dr	String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)
Source: chromecache_451.2.dr, chromecache_317.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_328.2.dr	String found in binary or memory: </p></div><div class="SocialMenu__SocialLinks-sc-scwf3-0 hIhpHz"><a href="https://instagram.com/riparide" target="_blank" rel="noopener noreferrer" aria-label="Instagram"><svg viewBox="0 0 448 512"><path fill="currentColor" d="M224.1 141c-63.6 0-114.9 51.3-114.9 114.9s51.3 114.9 114.9 114.9S339 319.5 339 255.9 287.7 141 224.1 141zm0 189.6c-41.1 0-74.7-33.5-74.7-74.7s33.5-74.7 74.7-74.7 74.7 33.5 74.7 74.7-33.6 74.7-74.7 74.7zm146.4-194.3c0 14.9-12 26.8-26.8 26.8-14.9 0-26.8-12-26.8-26.8s12-26.8 26.8-26.8 26.8 12 26.8 26.8zm76.1 27.2c-1.7-35.9-9.9-67.7-36.2-93.9-26.2-26.2-58-34.4-93.9-36.2-37-2.1-147.9-2.1-184.9 0-35.8 1.7-67.6 9.9-93.9 36.1s-34.4 58-36.2 93.9c-2.1 37-2.1 147.9 0 184.9 1.7 35.9 9.9 67.7 36.2 93.9s58 34.4 93.9 36.2c37 2.1 147.9 2.1 184.9 0 35.9-1.7 67.7-9.9 93.9-36.2 26.2-26.2 34.4-58 36.2-93.9 2.1-37 2.1-147.8 0-184.8zM398.8 388c-7.8 19.6-22.9 34.7-42.6 42.6-29.5 11.7-99.5 9-132.1 9s-102.7 2.6-132.1-9c-19.6-7.8-34.7-22.9-42.6-42.6-11.7-29.5-9-99.5-9-132.1s-2.6-102.7 9-132.1c7.8-19.6 22.9-34.7 42.6-42.6 29.5-11.7 99.5-9 132.1-9s102.7-2.6 132.1 9c19.6 7.8 34.7 22.9 42.6 42.6 11.7 29.5 9 99.5 9 132.1s2.7 102.7-9 132.1z"></path></svg></a><a href="https://www.facebook.com/pages/Riparide/226117010788780" target="_blank" rel="noopener noreferrer" aria-label="Facebook"><svg viewBox="0 0 448 512"><path fill="currentColor" d="M448 56.7v398.5c0 13.7-11.1 24.7-24.7 24.7H309.1V306.5h58.2l8.7-67.6h-67v-43.2c0-19.6 5.4-32.9 33.5-32.9h35.8v-60.5c-6.2-.8-27.4-2.7-52.2-2.7-51.6 0-87 31.5-87 89.4v49.9h-58.4v67.6h58.4V480H24.7C11.1 480 0 468.9 0 455.3V56.7C0 43.1 11.1 32 24.7 32h398.5c13.7 0 24.8 11.1 24.8 24.7z"></path></svg></a><a href="https://www.pinterest.com.au/riparide/" target="_blank" rel="noopener noreferrer" aria-label="Pinterest"><svg viewBox="0 0 448 512"><g fill="currentColor"><path d="M448 256c0 123.7-100.3 224-224 224-23.1 0-45.3-3.5-66.3-10 9.1-14.9 22.8-39.3 27.8-58.7 2.7-10.5 13.9-53.3 13.9-53.3 7.3 13.9 28.6 25.7 51.3 25.7 67.6 0 116.2-62.1 116.2-139.4 0-74-60.4-129.3-138.1-129.3-96.6 0-148 64.9-148 135.6 0 32.9 17.5 73.8 45.4 86.8 4.2 2 6.5 1.1 7.5-3 .7-3.1 4.5-18.3 6.2-25.4.5-2.3.3-4.2-1.5-6.4-9.1-11.3-16.5-31.9-16.5-51.1 0-49.4 37.4-97.2 101.2-97.2 55 0 93.6 37.5 93.6 91.1 0 60.6-30.6 102.6-70.5 102.6-21.9 0-38.5-18.2-33.1-40.5 6.3-26.6 18.5-55.4 18.5-74.6 0-17.2-9.2-31.5-28.4-31.5-22.5 0-40.6 23.2-40.6 54.4 0 19.9 6.7 33.2 6.7 33.2s-22.1 93.8-26.2 111.3c-4.5 19.3-2.7 46.6-.8 64.3C59.1 432 0 350.9 0 256 0 132.3 100.3 32 224 32s224 100.3 224 224z"></path></g></svg></a></div><div class="Footer__Footnote-sc-167sdbp-8 iKTAiF"><div>#LIVEFULLY WITH RIPARIDE</div><div class="Footer__Bullet-sc-167sdbp-5 cRBWCp"> equals www.facebook.com (Facebook)
Source: chromecache_270.2.dr, chromecache_379.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_270.2.dr, chromecache_379.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_396.2.dr, chromecache_392.2.dr, chromecache_456.2.dr, chromecache_241.2.dr, chromecache_346.2.dr, chromecache_376.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_237.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_237.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_237.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_451.2.dr, chromecache_317.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1017824523","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.riparide.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.rollbar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: assets.riparide.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: api.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.network
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic	DNS traffic detected: DNS query: m.stripe.com
Source: global traffic	DNS traffic detected: DNS query: stripe.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.riparide.com/adventures/28758-marom-waterfalls

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Windows Analysis Report
http://www.riparide.com/adventures/28758-marom-waterfalls