Edit tour

Windows Analysis Report
https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true

Overview

General Information

Sample URL:	https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=tru
Analysis ID:	1337758
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

HTML body contains low number of good links

Found iframes

HTML title does not match URL

Creates files inside the system directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1992,i,17641838433198895502,15530534655390475441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://workforce.faa.gov/app/faa-wf_samlafnframesprod_1/exk2kazqp5bPMBW464h7/sso/saml?SAMLRequest=lVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%2FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%2Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%2BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%2By4%2B7YM9vDy2YZ5dX%2F6ZRtPdzCVS7gBm1o%2BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%2Bsus7JzVpZClkA%2FfB5ufQMR%2FbreZnd1utiPBQZSob3r0%2F2T6GzWNefbEbDEfe%2BWja%2F2x6u8NwVu%2FbPGvynP3o9RZuOWD%2FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%2BduM7%2FngjSrsaoRwbEHValhqJmLs4637%2B1ItX&RelayState=https%3A%2F%2Ffaaframes.servicenowservices.com%2Fnav_to.do%3Furi%3Dx_nuvo_otam_asset_action.do%253Fsys_id%3D88970e5e875679905e9ab889cebb35d8%2526sysparm_stack%3Dx_nuvo_otam_asset_action_list.do%253Fsysparm_query%3Dactive%3Dtrue

HTTP Parser: Number of links: 1

HTTP Parser: Iframe src: https://login.okta.com/discovery/iframe.html

HTTP Parser: Title: FAA-wf - Sign In does not match URL

HTTP Parser: No <meta name="author".. found

Source: https://login.okta.com/discovery/iframe.html

HTTP Parser: No favicon

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.55.184.112:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.58:443 -> 192.168.2.17:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.67.144.177:443 -> 192.168.2.17:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49771 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: faaframes.servicenowservices.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.184.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.84
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 13.67.144.177
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.58
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.149Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253Dtrue HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /styles/css_includes_doctype.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /styles/heisenberg/source_sans_pro.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /styles/heisenberg/heisenberg_all.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /uxasset/externals/service-worker/loader.jsdbx?uxpcb=1699018416188&sysparm_substitute=false HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /ConditionalFocus.jsdbx?v=05-25-2023_0917&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/doctype/js_includes_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/js_includes_customer.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/doctype/js_includes_legacy.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/app.guided_tours/js_guided_tours_includes.jsx?v=05-25-2023_0917 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/doctype/js_includes_last_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/heisenberg/heisenberg_all.jsx?v=05-25-2023_0917 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/js_includes_list_edit_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/transaction_scope_includes.jsx?v=05-25-2023_0917 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /scripts/doctype/z_last_include.jsx?v=05-25-2023_0917 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /api/now/ui/date_time/legacy HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-UserToken: 54316ada879a79905e9ab889cebb35b27e6e3d21f9f65a13adf91d46a2e456829700d9f3sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faaframes.servicenowservices.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fworkforce.faa.gov%2Fapp%2Ffaa-wf_samlafnframesprod_1%2Fexk2kazqp5bPMBW464h7%2Fsso%2Fsaml%3FSAMLRequest%3DlVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%252FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%252Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%252BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%252By4%252B7YM9vDy2YZ5dX%252F6ZRtPdzCVS7gBm1o%252BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%252Bsus7JzVpZClkA%252FfB5ufQMR%252FbreZnd1utiPBQZSob3r0%252F2T6GzWNefbEbDEfe%252BWja%252F2x6u8NwVu%252FbPGvynP3o9RZuOWD%252FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%252BduM7%252FngjSrsaoRwbEHValhqJmLs4637%252B1ItX%26RelayState%3Dhttps%253A%252F%252Ffaaframes.servicenowservices.com%252Fnav_to.do%253Furi%253Dx_nuvo_otam_asset_action.do%25253Fsys_id%253D88970e5e875679905e9ab889cebb35d8%252526sysparm_stack%253Dx_nuvo_otam_asset_action_list.do%25253Fsysparm_query%253Dactive%253DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /styles/retina_icons/retina_icons.woff?9422059df1ee7f9296a4faedc96ddd89 HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faaframes.servicenowservices.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://faaframes.servicenowservices.com/styles/heisenberg/heisenberg_all.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=systemAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /styles/fonts/source-sans-pro/SourceSansPro-Regular.otf.woff HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faaframes.servicenowservices.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://faaframes.servicenowservices.com/styles/heisenberg/source_sans_pro.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=systemAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /app/faa-wf_samlafnframesprod_1/exk2kazqp5bPMBW464h7/sso/saml?SAMLRequest=lVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%2FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%2Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%2BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%2By4%2B7YM9vDy2YZ5dX%2F6ZRtPdzCVS7gBm1o%2BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%2Bsus7JzVpZClkA%2FfB5ufQMR%2FbreZnd1utiPBQZSob3r0%2F2T6GzWNefbEbDEfe%2BWja%2F2x6u8NwVu%2FbPGvynP3o9RZuOWD%2FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%2BduM7%2FngjSrsaoRwbEHValhqJmLs4637%2B1ItX&RelayState=https%3A%2F%2Ffaaframes.servicenowservices.com%2Fnav_to.do%3Furi%3Dx_nuvo_otam_asset_action.do%253Fsys_id%3D88970e5e875679905e9ab889cebb35d8%2526sysparm_stack%3Dx_nuvo_otam_asset_action_list.do%253Fsysparm_query%3Dactive%3Dtrue HTTP/1.1Host: workforce.faa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=4644400ba149e16e2dfe645b1dc05b0465b8845c4cb4b22709f764cf9fa24ec2999ae06cfb6b3be4d9b5186eee5d82bb HTTP/1.1Host: workforce.faa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://workforce.faa.gov/app/faa-wf_samlafnframesprod_1/exk2kazqp5bPMBW464h7/sso/saml?SAMLRequest=lVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%2FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%2Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%2BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%2By4%2B7YM9vDy2YZ5dX%2F6ZRtPdzCVS7gBm1o%2BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%2Bsus7JzVpZClkA%2FfB5ufQMR%2FbreZnd1utiPBQZSob3r0%2F2T6GzWNefbEbDEfe%2BWja%2F2x6u8NwVu%2FbPGvynP3o9RZuOWD%2FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%2BduM7%2FngjSrsaoRwbEHValhqJmLs4637%2B1ItX&RelayState=https%3A%2F%2Ffaaframes.servicenowservices.com%2Fnav_to.do%3Furi%3Dx_nuvo_otam_asset_action.do%253Fsys_id%3D88970e5e875679905e9ab889cebb35d8%2526sysparm_stack%3Dx_nuvo_otam_asset_action_list.do%253Fsysparm_query%3Dactive%3DtrueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=2EB5BF333512BB28113F460842234D8F; t=default; DT=DI14vq6sK2rQyC-sUCHax1oiw
Source: global traffic	HTTP traffic detected: GET /api/now/ui/date_time/legacy HTTP/1.1Host: faaframes.servicenowservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; JSESSIONID=17EAC157F773E4B60443120530FFDDB8; glide_user_route=glide.cf95356e0fed0ec0465c513117e543d5
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.css HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/custom-signin.241e0fb439244dc50c5929c0513a6765.css HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/js/okta-sign-in.min.js HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/devkitAll.css HTTP/1.1Host: myaccessreg.faa.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bco/1/fs04kpcmvz4PyXsgh4h7 HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bco/1/fs04kpcmvz4PyXsgh4h7 HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/mvc/loginpage/initLoginPage.pack.d05a8c2e6bdf6d212b92af4d6b9cfefe.js HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-light-webfont.woff HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://workforce.faa.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-regular-webfont.woff HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://workforce.faa.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/image/fileStoreRecord?id=fs04kpcmw1jTK62eN4h7 HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /discovery/iframe.html HTTP/1.1Host: login.okta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://workforce.faa.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WamsDkd9cfVEPuS&MD=aohfRh5E HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /bc/image/fileStoreRecord?id=fs04kpcmw1jTK62eN4h7 HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/discoveryIframe-ea9230c42a202475efd8.min.js HTTP/1.1Host: login.okta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.okta.com/discovery/iframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.11.2/img/ui/forms/checkbox-sign-in-widget.png HTTP/1.1Host: ok10static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idp/idx/introspect HTTP/1.1Host: workforce.faa.govConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=default; DT=DI14vq6sK2rQyC-sUCHax1oiw; JSESSIONID=BDFBF7460A7B834084F6C13E51F89070
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?5e7f48c69ef82fd24e4e286a55c1013c HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: ed3269487071b07864828ad1169325d0.azr.footprintdns.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WamsDkd9cfVEPuS&MD=aohfRh5E HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000009E98101404 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: chromecache_104.1.dr	String found in binary or memory: http://github.com/kriskowal/q/raw/master/LICENSE
Source: chromecache_104.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_117.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_104.1.dr	String found in binary or memory: http://mths.be/placeholder
Source: chromecache_104.1.dr	String found in binary or memory: http://qtip2.com
Source: chromecache_104.1.dr	String found in binary or memory: http://typingdna.com
Source: chromecache_104.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_104.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.
Source: chromecache_104.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_103.1.dr	String found in binary or memory: http://www.quirksmode.org/css/box.html
Source: chromecache_117.1.dr	String found in binary or memory: http://www.webcolors.freeserve.co.uk/names140.htm
Source: chromecache_104.1.dr	String found in binary or memory: https://api.typingdna.com/scripts/typingdna.js
Source: chromecache_109.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=824647
Source: chromecache_109.1.dr	String found in binary or memory: https://demonightlypolaris.service-now.com/now
Source: chromecache_104.1.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_109.1.dr	String found in binary or memory: https://developers.google.com/web/updates/2019/09/fresher-sw#updateviacache
Source: chromecache_110.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_110.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_103.1.dr	String found in binary or memory: https://github.com/endtwist/fontcustom/blob/master/lib/fontcustom/templates/fontcustom.css
Source: chromecache_104.1.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_104.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_104.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_104.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_109.1.dr	String found in binary or memory: https://mzl.la/2XDhn1e
Source: chromecache_104.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_104.1.dr	String found in binary or memory: https://typingdna.com/scripts/typingdna.js
Source: chromecache_109.1.dr	String found in binary or memory: https://www.chromestatus.com/feature/4609574738853888

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI

Source: unknown	HTTPS traffic detected: 23.55.184.112:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.58:443 -> 192.168.2.17:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.67.144.177:443 -> 192.168.2.17:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49771 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_6172_1650580181

Jump to behavior

Source: classification engine

Classification label: clean2.win@16/43@30/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1992,i,17641838433198895502,15530534655390475441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1992,i,17641838433198895502,15530534655390475441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: chromecache_99.1.dr	Binary or memory string: select.onchange.call(select, null, fromSetTemplateValue);
Source: chromecache_99.1.dr	Binary or memory string: selectionObj.label = o['label'] \|\| this.getEmailAddressFromACResultXML(o.XML);
Source: chromecache_99.1.dr	Binary or memory string: selectionObj.label = acItem['label'] \|\| this.getEmailAddressFromACResultXML(acItem.XML);
Source: chromecache_99.1.dr	Binary or memory string: selectionObj.label = values[0]['label'] \|\| this.getEmailAddressFromACResultXML(values[0].XML);

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://js.foundation/	0%	URL Reputation	safe
http://typingdna.com	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/ConditionalFocus.jsdbx?v=05-25-2023_0917&c=7_88	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/js_includes_customer.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/fs/bco/1/fs04kpcmvz4PyXsgh4h7	0%	Avira URL Cloud	safe
https://mzl.la/2XDhn1e	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.d05a8c2e6bdf6d212b92af4d6b9cfefe.js	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/transaction_scope_includes.jsx?v=05-25-2023_0917	0%	Avira URL Cloud	safe
https://ed3269487071b07864828ad1169325d0.azr.footprintdns.com/apc/trans.gif?5e7f48c69ef82fd24e4e286a55c1013c	0%	Avira URL Cloud	safe
http://typingdna.com	0%	Virustotal		Browse
https://faaframes.servicenowservices.com/styles/fonts/source-sans-pro/SourceSansPro-Regular.otf.woff	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/styles/retina_icons/retina_icons.woff?9422059df1ee7f9296a4faedc96ddd89	0%	Avira URL Cloud	safe
https://api.typingdna.com/scripts/typingdna.js	0%	Avira URL Cloud	safe
https://mzl.la/2XDhn1e	0%	Virustotal		Browse
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/loginpage/css/custom-signin.241e0fb439244dc50c5929c0513a6765.css	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/bc/image/fileStoreRecord?id=fs04kpcmw1jTK62eN4h7	0%	Avira URL Cloud	safe
http://www.webcolors.freeserve.co.uk/names140.htm	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.css	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/styles/css_includes_doctype.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_last_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	0%	Avira URL Cloud	safe
https://api.typingdna.com/scripts/typingdna.js	0%	Virustotal		Browse
http://www.webcolors.freeserve.co.uk/names140.htm	0%	Virustotal		Browse
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/img/ui/forms/checkbox-sign-in-widget.png	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/js_includes_list_edit_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/api/now/ui/date_time/legacy	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/styles/heisenberg/heisenberg_all.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_legacy.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/doctype/z_last_include.jsx?v=05-25-2023_0917	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/styles/heisenberg/source_sans_pro.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	0%	Avira URL Cloud	safe
http://qtip2.com	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/js/okta-sign-in.min.js	0%	Avira URL Cloud	safe
https://typingdna.com/scripts/typingdna.js	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-regular-webfont.woff	0%	Avira URL Cloud	safe
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-light-webfont.woff	0%	Avira URL Cloud	safe
http://mths.be/placeholder	0%	Avira URL Cloud	safe
https://faaframes.servicenowservices.com/scripts/heisenberg/heisenberg_all.jsx?v=05-25-2023_0917	0%	Avira URL Cloud	safe
http://qtip2.com	0%	Virustotal		Browse
https://faaframes.servicenowservices.com/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=05-25-2023_0917	0%	Avira URL Cloud	safe
http://mths.be/placeholder	0%	Virustotal		Browse
https://typingdna.com/scripts/typingdna.js	0%	Virustotal		Browse

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	142.251.33.77	true	false	high
myaccessreg.faa.gov	155.178.69.64	true	false	high
faaframes.servicenowservices.com	149.96.186.81	true	false	unknown
d3pg5ikktvrv74.cloudfront.net	18.172.170.108	true	false	high
www.google.com	142.250.217.100	true	false	high
clients.l.google.com	142.251.33.78	true	false	high
ok10-crtr-custom-domains-41811ec0e0ad12fb.elb.us-east-2.amazonaws.com	3.15.167.137	true	false	high
d37qf8t9pe6csu.cloudfront.net	3.163.165.100	true	false	high
use.fontawesome.com	unknown	unknown	false	high
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.transportation.gov	unknown	unknown	false	high
ok10static.oktacdn.com	unknown	unknown	false	unknown
workforce.faa.gov	unknown	unknown	false	high
login.okta.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok10static.oktacdn.com/fs/bco/1/fs04kpcmvz4PyXsgh4h7	false	Avira URL Cloud: safe	unknown
https://login.okta.com/discovery/iframe.html	false		high
https://faaframes.servicenowservices.com/scripts/js_includes_customer.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	false	Avira URL Cloud: safe	unknown
https://login.okta.com/discovery/iframe.html	false		high
https://faaframes.servicenowservices.com/ConditionalFocus.jsdbx?v=05-25-2023_0917&c=7_88	false	Avira URL Cloud: safe	unknown
https://ok10static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.d05a8c2e6bdf6d212b92af4d6b9cfefe.js	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/transaction_scope_includes.jsx?v=05-25-2023_0917	false	Avira URL Cloud: safe	unknown
https://ed3269487071b07864828ad1169325d0.azr.footprintdns.com/apc/trans.gif?5e7f48c69ef82fd24e4e286a55c1013c	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/styles/fonts/source-sans-pro/SourceSansPro-Regular.otf.woff	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true	false		unknown
https://workforce.faa.gov/api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=4644400ba149e16e2dfe645b1dc05b0465b8845c4cb4b22709f764cf9fa24ec2999ae06cfb6b3be4d9b5186eee5d82bb	false		high
https://faaframes.servicenowservices.com/styles/retina_icons/retina_icons.woff?9422059df1ee7f9296a4faedc96ddd89	false	Avira URL Cloud: safe	unknown
https://myaccessreg.faa.gov/css/devkitAll.css	false		high
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	false	Avira URL Cloud: safe	unknown
https://workforce.faa.gov/idp/idx/introspect	false		high
https://ok10static.oktacdn.com/assets/loginpage/css/custom-signin.241e0fb439244dc50c5929c0513a6765.css	false	Avira URL Cloud: safe	unknown
https://ok10static.oktacdn.com/bc/image/fileStoreRecord?id=fs04kpcmw1jTK62eN4h7	false	Avira URL Cloud: safe	unknown
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/css/okta-sign-in.min.css	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/styles/css_includes_doctype.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_last_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	false	Avira URL Cloud: safe	unknown
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/img/ui/forms/checkbox-sign-in-widget.png	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/js_includes_list_edit_doctype.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/api/now/ui/date_time/legacy	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://faaframes.servicenowservices.com/styles/heisenberg/heisenberg_all.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/doctype/js_includes_legacy.jsx?v=05-25-2023_0917&lp=Sun_May_14_12_45_34_PDT_2023&c=7_88	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/doctype/z_last_include.jsx?v=05-25-2023_0917	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/styles/heisenberg/source_sans_pro.cssx?v=05-25-2023_0917&c=fc012215879ef1905e9ab889cebb35fc&theme=system	false	Avira URL Cloud: safe	unknown
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000009E98101404	false		high
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/js/okta-sign-in.min.js	false	Avira URL Cloud: safe	unknown
https://login.okta.com/lib/discoveryIframe-ea9230c42a202475efd8.min.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.149&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-regular-webfont.woff	false	Avira URL Cloud: safe	unknown
https://ok10static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.11.2/font/montserrat-okta-light-webfont.woff	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/heisenberg/heisenberg_all.jsx?v=05-25-2023_0917	false	Avira URL Cloud: safe	unknown
https://faaframes.servicenowservices.com/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=05-25-2023_0917	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://typingdna.com	chromecache_104.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_104.1.dr	false		high
https://developers.google.com/web/updates/2019/09/fresher-sw#updateviacache	chromecache_109.1.dr	false		high
https://mzl.la/2XDhn1e	chromecache_109.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_117.1.dr	false		high
https://fontawesome.com/license/free	chromecache_110.1.dr	false		high
https://fontawesome.com	chromecache_110.1.dr	false		high
http://www.opensource.org/licenses/mit-license.html	chromecache_104.1.dr	false		high
https://api.typingdna.com/scripts/typingdna.js	chromecache_104.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://demonightlypolaris.service-now.com/now	chromecache_109.1.dr	false		high
http://www.quirksmode.org/css/box.html	chromecache_103.1.dr	false		high
http://www.webcolors.freeserve.co.uk/names140.htm	chromecache_117.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_104.1.dr	false		high
https://developers.google.com/open-source/licenses/bsd	chromecache_104.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=824647	chromecache_109.1.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0.	chromecache_104.1.dr	false		high
https://www.chromestatus.com/feature/4609574738853888	chromecache_109.1.dr	false		high
http://github.com/kriskowal/q/raw/master/LICENSE	chromecache_104.1.dr	false		high
https://jquery.org/license	chromecache_104.1.dr	false		high
https://jquery.com/	chromecache_104.1.dr	false		high
http://qtip2.com	chromecache_104.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://typingdna.com/scripts/typingdna.js	chromecache_104.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_104.1.dr	false		high
http://mths.be/placeholder	chromecache_104.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_104.1.dr	false		high
https://js.foundation/	chromecache_104.1.dr	false	URL Reputation: safe	unknown
https://github.com/endtwist/fontcustom/blob/master/lib/fontcustom/templates/fontcustom.css	chromecache_103.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
155.178.69.64	myaccessreg.faa.gov	United States	4046	FAAUS	false
3.163.165.100	d37qf8t9pe6csu.cloudfront.net	United States	16509	AMAZON-02US	false
18.172.170.108	d3pg5ikktvrv74.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.251.33.78	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.217.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.15.167.137	ok10-crtr-custom-domains-41811ec0e0ad12fb.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
142.251.33.77	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.69.206	unknown	United States	15169	GOOGLEUS	false
149.96.186.81	faaframes.servicenowservices.com	United States	397182	SERVICENOW-WAVEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1337758
Start date and time:	2023-11-06 17:07:51 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@16/43@30/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 172.217.14.195, 34.104.35.123, 172.64.103.11, 172.64.102.11, 23.196.197.101, 142.250.69.202, 172.217.14.234, 142.251.33.106, 142.251.211.234, 142.250.217.74, 142.251.215.234, 142.250.217.106, 142.251.33.74, 172.217.14.202, 142.250.217.99, 192.229.211.108
Excluded domains from analysis (whitelisted): www.dot.gov.edgekey.net, ocsp.digicert.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, e7202.dsca.akamaiedge.net, use.fontawesome.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 6 15:08:23 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.990343788240558
Encrypted:	false
SSDEEP:	48:8XcZdqTT7onHdidAKZdA1JehwiZUklqehRy+3:8MW07ey
MD5:	C5CE768F6A173AAD11F0A6918BFEE026
SHA1:	EE78A5AA505312735472823CCC240031991425EA
SHA-256:	32B9C2CB82F9A9775D38FABCD4AF92845CE8FEC0D09E1A2C476D3FEAA851DA39
SHA-512:	011225CCFFA40A68A64CAD15E95A0BFF836310434D58556F24162B705227175250CF4A739231D77FF2097F0B29E75603EC03C5C3A61A16B83C90E342BCE02541
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......x........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IfW......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VfW......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VfW......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VfW.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VfW.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 6, 2023 17:08:22.758655071 CET	57162	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.758783102 CET	53315	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.767296076 CET	49718	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.767520905 CET	58222	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.768014908 CET	58609	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.768426895 CET	63750	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:22.873739958 CET	53	53311	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.920682907 CET	53	58222	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.920753002 CET	53	58609	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.920792103 CET	53	49718	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.922127962 CET	53	63750	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.937025070 CET	53	57162	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:22.938749075 CET	53	53315	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:23.764899969 CET	53	53869	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:27.175935030 CET	62401	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:27.176145077 CET	59117	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:27.328927994 CET	53	62401	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:27.330476999 CET	53	59117	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:28.180192947 CET	63532	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:28.180476904 CET	65153	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:28.360233068 CET	53	63532	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:28.377801895 CET	53	65153	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.266045094 CET	56587	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.266230106 CET	51754	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.440793037 CET	53	56587	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.443677902 CET	53	51754	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.726342916 CET	49527	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.726763964 CET	57870	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.727736950 CET	50904	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.727971077 CET	63306	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.728667974 CET	61046	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.728971958 CET	61858	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:29.880742073 CET	53	57870	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.881040096 CET	53	49527	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.883369923 CET	53	63306	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:29.885705948 CET	53	50904	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:31.013571978 CET	54693	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:31.013767958 CET	62630	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:31.651253939 CET	51390	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:31.651407003 CET	56113	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:31.805320024 CET	53	56113	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:31.805939913 CET	53	51390	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:32.278960943 CET	55274	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:32.279118061 CET	64283	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:33.263420105 CET	61428	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:33.263698101 CET	53533	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:33.417519093 CET	53	61428	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:33.418695927 CET	53	53533	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:33.559674025 CET	57315	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:33.559922934 CET	58580	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:08:33.716123104 CET	53	57315	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:33.811933041 CET	53	64336	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:35.787208080 CET	53	58580	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:40.803965092 CET	53	64106	1.1.1.1	192.168.2.17
Nov 6, 2023 17:08:59.788609028 CET	53	61223	1.1.1.1	192.168.2.17
Nov 6, 2023 17:09:16.966655016 CET	138	138	192.168.2.17	192.168.2.255
Nov 6, 2023 17:09:22.456027985 CET	53	55523	1.1.1.1	192.168.2.17
Nov 6, 2023 17:09:22.837276936 CET	53	60106	1.1.1.1	192.168.2.17
Nov 6, 2023 17:09:50.707391977 CET	53	63763	1.1.1.1	192.168.2.17
Nov 6, 2023 17:09:52.183835030 CET	55277	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:09:52.184160948 CET	53782	53	192.168.2.17	1.1.1.1
Nov 6, 2023 17:09:52.337094069 CET	53	55277	1.1.1.1	192.168.2.17
Nov 6, 2023 17:09:52.338094950 CET	53	53782	1.1.1.1	192.168.2.17

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:16 UTC	0	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-06 16:08:17 UTC	0	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 Cache-Control: public, max-age=68081 Date: Mon, 06 Nov 2023 16:08:17 GMT Connection: close X-CID: 2

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:17 UTC	0	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-06 16:08:17 UTC	0	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=68069 Date: Mon, 06 Nov 2023 16:08:17 GMT Content-Length: 55 Connection: close X-CID: 2
2023-11-06 16:08:17 UTC	1	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:25 UTC	81	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:25 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 1541 Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:25 GMT Cache-Control: private Last-Modified: Thu, 25 May 2023 16:23:32 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:25 UTC	82	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 22 3b 0a 73 72 63 3a 20 75 72 6c 28 22 2f 73 74 79 6c 65 73 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 2d 73 61 6e 73 2d 70 72 6f 2f 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 52 65 67 75 6c 61 72 2e 65 6f 74 22 29 3b 0a 73 72 63 3a 20 75 72 6c 28 22 2f 73 74 79 6c 65 73 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 2d 73 61 6e 73 2d 70 72 6f 2f 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 52 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 2f 73 74 79 6c 65 73 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 2d 73 61 6e 73 2d 70 72 6f 2f 53 6f 75 72 Data Ascii: @font-face {font-family: "SourceSansPro";src: url("/styles/fonts/source-sans-pro/SourceSansPro-Regular.eot");src: url("/styles/fonts/source-sans-pro/SourceSansPro-Regular.eot?#iefix") format("embedded-opentype"), url("/styles/fonts/source-sans-pro/Sour

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:26 UTC	796	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:26 GMT Cache-Control: private Last-Modified: Thu, 25 May 2023 16:23:32 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:26 UTC	796	IN	Data Raw: 31 65 38 62 0d 0a 2f 2a 21 20 52 45 53 4f 55 52 43 45 3a 20 2f 73 63 72 69 70 74 73 2f 6a 73 5f 69 6e 63 6c 75 64 65 73 5f 63 75 73 74 6f 6d 65 72 2e 6a 73 20 2a 2f 0a 2f 2a 21 20 52 45 53 4f 55 52 43 45 3a 20 43 6f 6e 6e 65 63 74 69 6f 6e 55 74 69 6c 73 20 2a 2f 0a 76 61 72 20 43 6f 6e 6e 65 63 74 69 6f 6e 55 74 69 6c 73 20 3d 20 7b 0a 67 65 74 53 79 73 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 63 6f 6e 6e 47 52 20 3d 20 6e 65 77 20 47 6c 69 64 65 52 65 63 6f 72 64 28 22 73 79 73 5f 63 6f 6e 6e 65 63 74 69 6f 6e 22 29 3b 0a 63 6f 6e 6e 47 52 2e 61 64 64 51 75 65 72 79 28 27 61 63 74 69 76 65 27 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 6e 47 52 2e 61 64 64 51 75 65 72 79 28 22 63 6f 6e 6e 65 63 74 69 6f 6e 5f 61 6c Data Ascii: 1e8b/! RESOURCE: /scripts/js_includes_customer.js //! RESOURCE: ConnectionUtils /var ConnectionUtils = {getSysConnection: function() {var connGR = new GlideRecord("sys_connection");connGR.addQuery('active', true);connGR.addQuery("connection_al
2023-11-06 16:08:26 UTC	808	IN	Data Raw: 6d 65 29 20 7b 0a 76 61 72 20 63 6f 64 65 20 3d 20 67 5f 66 6f 72 6d 2e 67 65 74 56 61 6c 75 65 28 66 69 65 6c 64 4e 61 6d 65 29 3b 0a 76 61 72 20 72 63 20 3d 20 74 72 75 65 3b 0a 69 66 28 22 67 6c 6f 62 61 6c 22 20 3d 3d 20 73 63 6f 70 65 4e 61 6d 65 29 0a 72 65 74 75 72 6e 20 72 63 3b 0a 63 6f 64 65 20 3d 20 72 65 6d 6f 76 65 43 6f 6d 6d 65 6e 74 73 46 72 6f 6d 43 6c 69 65 6e 74 53 63 72 69 70 74 28 63 6f 64 65 29 3b 0a 63 6f 64 65 20 3d 20 72 65 6d 6f 76 65 53 70 61 63 65 73 46 72 6f 6d 43 6c 69 65 6e 74 53 63 72 69 70 74 28 63 6f 64 65 29 3b 0a 63 6f 64 65 20 3d 20 72 65 6d 6f 76 65 4e 65 77 6c 69 6e 65 73 46 72 6f 6d 43 6c 69 65 6e 74 53 63 72 69 70 74 28 63 6f 64 65 29 3b 0a 76 61 72 20 72 65 71 75 69 72 65 64 53 74 61 72 74 20 3d 20 20 22 76 61 72 Data Ascii: me) {var code = g_form.getValue(fieldName);var rc = true;if("global" == scopeName)return rc;code = removeCommentsFromClientScript(code);code = removeSpacesFromClientScript(code);code = removeNewlinesFromClientScript(code);var requiredStart = "var
2023-11-06 16:08:26 UTC	852	IN	Data Raw: 5f 66 6f 72 6d 2e 67 65 74 56 61 6c 75 65 28 73 74 61 72 74 44 61 74 65 46 69 65 6c 64 29 3b 0a 76 61 72 20 65 6e 64 44 61 74 65 20 3d 20 67 5f 66 6f 72 6d 2e 67 65 74 56 61 6c 75 65 28 65 6e 64 44 61 74 65 46 69 65 6c 64 29 3b 0a 76 61 72 20 66 6f 72 6d 61 74 20 3d 20 67 5f 75 73 65 72 5f 64 61 74 65 5f 66 6f 72 6d 61 74 3b 0a 69 66 20 28 73 74 61 72 74 44 61 74 65 20 3d 3d 3d 20 22 22 20 7c 7c 20 65 6e 64 44 61 74 65 20 3d 3d 3d 20 22 22 29 0a 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 76 61 72 20 73 74 61 72 74 44 61 74 65 46 6f 72 6d 61 74 20 3d 20 67 65 74 44 61 74 65 46 72 0d 0a 39 34 32 0d 0a 6f 6d 46 6f 72 6d 61 74 28 73 74 61 72 74 44 61 74 65 2c 20 66 6f 72 6d 61 74 29 3b 0a 76 61 72 20 65 6e 64 44 61 74 65 46 6f 72 6d 61 74 20 3d 20 67 65 74 44 61 Data Ascii: _form.getValue(startDateField);var endDate = g_form.getValue(endDateField);var format = g_user_date_format;if (startDate === "" \|\| endDate === "")return true;var startDateFormat = getDateFr942omFormat(startDate, format);var endDateFormat = getDa

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:23 UTC	2	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2023-11-06 16:08:23 UTC	2	OUT	Data Raw: 20 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:27 UTC	1735	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 1229 Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:27 GMT Cache-Control: private Last-Modified: Sat, 14 Oct 2023 04:10:45 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:27 UTC	1736	IN	Data Raw: 2f 2a 21 20 52 45 53 4f 55 52 43 45 3a 20 2f 73 63 72 69 70 74 73 2f 74 72 61 6e 73 61 63 74 69 6f 6e 5f 73 63 6f 70 65 5f 69 6e 63 6c 75 64 65 73 2e 6a 73 20 2a 2f 0a 2f 2a 21 20 52 45 53 4f 55 52 43 45 3a 20 2f 73 63 72 69 70 74 73 2f 73 63 6f 70 65 2f 47 6c 69 64 65 54 72 61 6e 73 61 63 74 69 6f 6e 53 63 6f 70 65 2e 6a 73 20 2a 2f 0a 76 61 72 20 47 6c 69 64 65 54 72 61 6e 73 61 63 74 69 6f 6e 53 63 6f 70 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 53 59 53 50 41 52 4d 5f 54 52 41 4e 41 53 41 43 54 49 4f 4e 5f 53 43 4f 50 45 20 3d 20 27 73 79 73 70 61 72 6d 5f 74 72 61 6e 73 61 63 74 69 6f 6e 5f 73 63 6f 70 65 27 3b 0a 76 61 72 20 53 59 53 50 41 52 4d 5f 52 45 43 4f 52 44 5f 53 43 4f 50 45 20 3d 20 27 73 79 73 70 61 72 6d 5f 72 65 Data Ascii: /! RESOURCE: /scripts/transaction_scope_includes.js //! RESOURCE: /scripts/scope/GlideTransactionScope.js /var GlideTransactionScope = (function() {var SYSPARM_TRANASACTION_SCOPE = 'sysparm_transaction_scope';var SYSPARM_RECORD_SCOPE = 'sysparm_re

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:27 UTC	1745	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 1274 Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:27 GMT Cache-Control: private Last-Modified: Thu, 25 May 2023 16:23:32 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:27 UTC	1745	IN	Data Raw: 2f 2a 21 20 52 45 53 4f 55 52 43 45 3a 20 2f 73 63 72 69 70 74 73 2f 64 6f 63 74 79 70 65 2f 7a 5f 6c 61 73 74 5f 69 6e 63 6c 75 64 65 2e 6a 73 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 4e 4f 57 2e 78 70 65 72 66 2e 6c 6f 61 64 65 64 46 75 6e 63 74 69 6f 6e 73 42 65 67 69 6e 20 3d 20 4e 4f 57 2e 78 70 65 72 66 2e 6e 6f 77 28 29 3b 0a 69 66 20 28 77 69 6e 64 6f 77 2e 69 6e 69 74 41 6e 67 75 6c 61 72 46 6f 72 6d 29 20 7b 0a 69 6e 69 74 41 6e 67 75 6c 61 72 46 6f 72 6d 28 29 3b 0a 7d 0a 61 64 64 4c 6f 61 64 45 76 65 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 47 6c 69 64 65 55 49 2e 67 65 74 28 29 2e 66 69 72 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 28 29 3b 0a 6a 73 6c 6f 67 28 22 66 69 72 65 41 6c 6c 43 68 61 6e 67 65 48 61 6e 64 6c 65 Data Ascii: /! RESOURCE: /scripts/doctype/z_last_include.js /(function () {NOW.xperf.loadedFunctionsBegin = NOW.xperf.now();if (window.initAngularForm) {initAngularForm();}addLoadEvent(function() {GlideUI.get().fireNotifications();jslog("fireAllChangeHandle

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:23 UTC	2	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-EC6-xJwGn2a2DVyevzQFfA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 06 Nov 2023 16:08:23 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6153 X-Daystart: 29303 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-11-06 16:08:23 UTC	3	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 35 33 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 39 33 30 33 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6153" elapsed_seconds="29303"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-11-06 16:08:23 UTC	4	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-11-06 16:08:23 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:29 UTC	2591	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:28 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None Server-Timing: sem_wait;dur=0, sesh_wait;dur=0 Set-Cookie: glide_user=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; secure; SameSite=None Set-Cookie: glide_user_session=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; secure; SameSite=None X-Is-Logged-In: false X-Transaction-ID: 61312eda879a X-Content-Type-Options: nosniff Pragma: no-store,no-cache Cache-Control: no-cache,no-store,must-revalidate,max-age=-1 Expires: 0 Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:29 UTC	2592	IN	Data Raw: 31 39 66 65 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 7b 22 74 69 6d 65 41 67 6f 44 61 74 65 73 22 3a 5b 5b 22 54 6f 64 61 79 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 54 6f 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 54 6f 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 54 6f 64 61 79 28 29 22 5d 2c 5b 22 59 65 73 74 65 72 64 61 79 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 5d 2c Data Ascii: 19fe{"result":{"timeAgoDates":[["Today","javascript:gs.beginningOfToday()","javascript:gs.endOfToday()","javascript:gs.endOfToday()"],["Yesterday","javascript:gs.beginningOfYesterday()","javascript:gs.endOfYesterday()","javascript:gs.endOfYesterday()"],
2023-11-06 16:08:29 UTC	2595	IN	Data Raw: 22 5d 2c 5b 22 4c 61 73 74 20 31 32 30 20 64 61 79 73 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 5d 2c 5b 22 43 75 72 72 65 6e 74 20 68 6f 75 72 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 43 75 72 72 65 6e 74 48 6f 75 72 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 43 75 72 72 65 6e 74 48 6f 75 72 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 43 75 72 72 65 Data Ascii: "],["Last 120 days","javascript:gs.beginningOfLast120Days()","javascript:gs.endOfLast120Days()","javascript:gs.beginningOfLast120Days()"],["Current hour","javascript:gs.beginningOfCurrentHour()","javascript:gs.endOfCurrentHour()","javascript:gs.endOfCurre
2023-11-06 16:08:29 UTC	2616	IN	Data Raw: 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 30 27 29 22 5d 2c 5b 22 57 65 65 6b 31 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 27 29 22 5d 2c 5b 22 57 65 65 6b 32 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 27 29 22 5d 2c 5b 22 57 65 65 6b 33 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 33 27 29 22 5d 2c 5b 22 57 65 65 6b 34 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 34 27 29 22 5d 2c 5b 22 57 65 65 6b 35 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 Data Ascii: ript:gs.datePart('week','0')"],["Week1","javascript:gs.datePart('week','1')"],["Week2","javascript:gs.datePart('week','2')"],["Week3","javascript:gs.datePart('week','3')"],["Week4","javascript:gs.datePart('week','4')"],["Week5","javascript:gs.datePart('we
2023-11-06 16:08:29 UTC	2620	IN	Data Raw: 75 61 72 74 65 72 73 22 2c 22 71 75 61 72 74 65 72 22 5d 2c 5b 22 59 65 61 72 73 22 2c 22 79 65 61 72 22 5d 5d 2c 22 74 72 65 6e 64 56 61 6c 75 65 73 57 69 74 68 46 69 65 6c 64 73 22 3a 5b 5b 22 48 6f 75 72 22 2c 22 68 6f 75 72 22 5d 2c 5b 22 44 61 79 22 2c 22 64 61 79 22 5d 2c 5b 22 57 65 65 6b 22 2c 22 77 65 65 6b 22 5d 2c 5b 22 4d 6f 6e 74 68 22 2c 22 6d 6f 6e 74 68 22 5d 2c 5b 22 71 75 61 72 74 65 72 22 2c 22 71 75 61 72 74 65 72 22 5d 2c 5b 22 59 65 61 72 22 2c 22 79 65 61 72 22 5d 5d 2c 22 77 68 65 6e 57 69 74 68 46 69 65 6c 64 73 22 3a 5b 5b 22 62 65 66 6f 72 65 22 2c 22 62 65 66 6f 72 65 22 5d 2c 5b 22 61 66 74 65 72 22 2c 22 61 66 74 65 72 22 5d 2c 5b 22 62 65 66 6f 72 65 20 6f 72 20 61 66 74 65 72 22 2c 22 62 65 66 6f 72 65 20 6f 72 20 61 66 74 Data Ascii: uarters","quarter"],["Years","year"]],"trendValuesWithFields":[["Hour","hour"],["Day","day"],["Week","week"],["Month","month"],["quarter","quarter"],["Year","year"]],"whenWithFields":[["before","before"],["after","after"],["before or after","before or aft
2023-11-06 16:08:29 UTC	2624	IN	Data Raw: 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 38 27 29 22 5d 2c 5b 22 57 65 65 6b 31 39 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 39 27 29 22 5d 2c 5b 22 57 65 65 6b 32 30 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 30 27 29 22 5d 2c 5b 22 57 65 65 6b 32 31 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 31 27 29 22 5d 2c 5b 22 57 65 65 6b 32 32 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 32 27 29 22 5d 2c 5b 22 57 65 65 6b 32 33 22 2c 22 6a 61 0d 0a 61 63 31 0d 0a 76 61 73 63 72 69 70 74 Data Ascii: ipt:gs.datePart('week','18')"],["Week19","javascript:gs.datePart('week','19')"],["Week20","javascript:gs.datePart('week','20')"],["Week21","javascript:gs.datePart('week','21')"],["Week22","javascript:gs.datePart('week','22')"],["Week23","jaac1vascript

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:29 UTC	2600	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:29 GMT Content-Type: application/font-woff;charset=UTF-8 Content-Length: 133352 Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:29 GMT Cache-Control: private Last-Modified: Thu, 25 May 2023 16:23:32 GMT X-Content-Type-Options: nosniff Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:29 UTC	2601	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 02 08 e8 00 0e 00 00 00 03 95 d0 00 02 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 f7 9c 00 00 00 3a 00 00 00 3a 8b 19 94 b1 43 46 46 20 00 00 24 b4 00 01 58 a0 00 01 d7 b3 c5 30 7f 9b 44 53 49 47 00 01 f7 d8 00 00 11 10 00 00 18 fc ca d2 bb ae 47 44 45 46 00 01 89 08 00 00 02 75 00 00 03 c2 81 ea 86 7a 47 50 4f 53 00 01 a6 44 00 00 51 57 00 01 02 16 f5 2c 24 a7 47 53 55 42 00 01 8b 80 00 00 1a c2 00 00 3c 5a 83 fa 8f 2b 4f 53 2f 32 00 00 01 a4 00 00 00 59 00 00 00 60 5d d0 d7 80 63 6d 61 70 00 00 07 68 00 00 1d 35 00 00 36 5e 8c 3c ec 35 68 65 61 64 00 00 01 44 00 00 00 34 00 00 00 36 05 66 61 7a 68 68 65 61 00 00 01 78 00 00 00 21 00 00 00 24 0a 84 0d 58 68 6d 74 78 00 01 7d 54 00 00 0b Data Ascii: wOFFOTTOBASE::CFF $X0DSIGGDEFuzGPOSDQW,$GSUB<Z+OS/2Y`]cmaph56^<5headD46fazhheax!$Xhmtx}T
2023-11-06 16:08:29 UTC	2604	IN	Data Raw: fd fc ed 8d b7 9f bd fd cc ed 38 d9 ed 2d b7 7d bb 6d cc d6 6f b6 4e d8 f4 c1 ba e1 eb 5a 6b b5 45 a6 de 67 02 32 ee 13 66 ad f9 c9 1e 62 eb 15 ac 71 01 aa ea 85 58 2f 74 37 b8 6e ae bb eb e1 7a 21 5e 6e 2f fc db 9d 85 ef b7 ff 75 57 ae b7 bb 27 bb ba d3 f5 fe 0f af df 8a 2a 3e 08 eb d3 e0 d9 ff ee 6c dd 13 60 2c 78 d1 cd 42 1c 6e fa bf c8 04 b7 c2 ad 72 eb dc 26 44 eb d7 88 d7 5f dc bf dc 6f 45 54 e4 8a 0e 2e 3a a4 a8 4a 51 35 48 15 a1 86 a2 5f f2 7a 51 28 4a 8b f2 45 47 15 d5 2a 3a bd e8 d2 a2 16 45 d7 17 75 2f ba b3 08 f7 5b 34 90 c8 9f e8 ff f4 69 df c4 b7 f4 9d 7d 8f bf 7e b2 ef ee 7b f9 fe 85 2b dc b3 9f 09 16 fb 4f fd 1e 54 c3 6a a8 82 0d 13 bc 43 72 71 d2 3a 69 9b b4 c7 55 47 fd ad e4 2a b9 4e ba e2 7b d7 ff fc 7e 49 db 6c 6d fd ef df 0b 57 97 fe Data Ascii: 8-}moNZkEg2fbqX/t7nz!^n/uW'>l`,xBnr&D_oET.:JQ5H_zQ(JEG:Eu/[4i}~{+OTjCrq:iUG*N{~IlmW
2023-11-06 16:08:29 UTC	2627	IN	Data Raw: c2 55 8a cc 0a c3 d5 0a 0f c0 da 5e 91 b9 61 e8 a0 48 ef 11 3a 2a 32 47 0c 9d 14 86 4f 86 ce 0a 21 6e 43 17 85 c5 16 5d 15 42 de 0b d7 28 2c b6 e8 ae c8 1c 31 dc ac b0 d8 a2 87 42 a8 4f a1 a7 c2 62 8b 81 0a 21 3e c3 bd 0a 4f c6 7a 9f 42 88 d5 70 bf c2 a8 97 61 90 22 f3 be 30 58 61 e4 b8 30 4c 91 19 5f 78 4c 91 fe 27 8c 54 64 7e 17 46 29 8c 9c 15 46 2b 32 cf 0b 8f 2b 2c 67 f8 84 22 33 8e f0 a4 22 fd 58 78 5e 91 59 6a 18 ab c8 6c 3d 8c 53 64 4e 17 5e 54 64 ce 1e c6 2b 32 b3 0b 13 14 99 bb 87 97 14 99 df 85 89 0a 89 ef 4c 52 64 96 17 26 2b 24 7e 34 45 91 b9 5e 98 aa 90 f8 d4 34 45 66 7c 61 ba 42 e2 5f 2f 2b 32 ef 0b 33 14 12 5f 7b 45 91 d9 5f 98 a9 90 f8 dd ab 8a cc 01 c3 2c 85 c4 07 67 2b 32 13 0c 73 14 12 7f 7c 4d 91 f9 60 98 ab 90 c4 e3 3c 45 66 85 61 be Data Ascii: U^aH:*2GO!nC]B(,1BOb!>OzBpa"0Xa0L_xL'Td~F)F+2+,g"3"Xx^Yjl=SdN^Td+2LRd&+$~4E^4Ef\|aB_/+23_{E_,g+2s\|M`<Efa
2023-11-06 16:08:29 UTC	2631	IN	Data Raw: a7 34 29 33 95 03 95 05 ca 32 65 bd 72 a2 72 a6 72 91 72 85 72 ad 72 bb b2 49 79 52 79 59 79 57 f9 4c f9 a3 12 50 2e 94 07 e5 4f 05 53 d1 94 8e 6a 4f 7d 46 f5 a5 f2 a8 12 aa 8a 6a a0 66 50 0b a8 46 6a 03 b5 8b 3a 44 9d a1 ae 51 f7 a9 97 d4 0f 14 ad 72 51 79 ab 14 aa 30 55 bc aa bd ca ac ca 52 0d 51 15 ab 6c aa 91 aa 89 aa 39 aa af 55 6b 55 db 55 87 54 67 54 d7 54 f7 55 2f 55 3f a8 e8 60 2c d8 33 38 30 38 24 38 26 d8 10 dc 3e d8 1c dc 2b 38 27 b8 20 b8 2c b8 3e 78 62 f0 17 c1 0b 83 1b 83 d7 07 ef 0c 6e 0e 3e 1d 7c 35 f8 6e f0 b3 e0 1f 83 41 88 30 c4 23 84 0c 89 0c d1 84 b4 0b 31 85 64 86 0c 0c 29 08 29 0b a9 0b 19 13 32 39 64 56 c8 e2 90 55 21 5b 42 f6 85 1c 0b b9 10 f2 6d c8 a3 90 ff 84 fc 14 d2 12 2a 0c f5 08 f5 0f 55 85 c6 87 26 86 a6 84 76 0b cd 0e cd Data Ascii: 4)32errrrrrIyRyYyWLP.OSjO}FjfPFj:DQrQy0URQl9UkUUTgTTU/U?`,3808$8&>+8' ,>xbn>\|5nA0#1d))29dVU![Bm*U&v
2023-11-06 16:08:29 UTC	2635	IN	Data Raw: 18 81 5a 8d c6 38 da 5a 65 8b 57 a3 6f 35 4b 2a ca 6b cb e0 49 98 a5 35 f5 28 5d 53 5c 65 45 39 c3 6c b5 55 88 29 a9 43 39 d5 25 23 11 85 87 e3 72 96 b3 96 14 15 d7 b0 5c 79 09 27 08 29 a8 e0 08 52 54 c3 29 aa e1 14 d5 f0 8a 6a 1c 8a 6a 1c 8a 6a 38 45 35 bc a2 1a 5e 51 8d 43 51 8d 43 91 8d 93 6c e3 24 db 78 c9 36 87 64 9b 43 b2 8d 93 6c e3 25 db 78 c9 36 87 64 9b 43 32 5c 6b 18 c1 90 30 72 19 c2 8a 85 0c 2b 95 a1 8c 50 48 19 99 0c 61 45 42 06 49 84 0c 2b 90 5b b3 d4 ec 2e 5b 8b de a4 b4 e8 76 58 ab 66 57 29 ad 9a 9d b5 90 98 51 a6 11 a5 d2 58 c2 4e 49 48 92 11 49 42 65 ac 30 1d bb 1e 41 c2 a5 4c 88 b0 52 12 d9 58 05 09 db dc c4 ae 47 90 e8 10 d1 23 62 40 ae c1 56 d1 c0 05 0c 6e b5 e1 f1 86 f9 a6 5a 98 1e 54 5b 4b e2 6b aa 46 a4 c4 57 17 a4 c2 5f 1a fc a5 Data Ascii: Z8ZeWo5K*kI5(]S\eE9lU)C9%#r\y')RT)jjj8E5^QCQCl$x6dCl%x6dC2\k0r+PHaEBI+[.[vXfW)QXNIHIBe0ALRXG#b@VnZT[KkFW_
2023-11-06 16:08:29 UTC	2639	IN	Data Raw: 65 27 35 5b d4 65 57 e9 99 8d 2b e6 cf 5b a2 6c b8 88 4d 9b 38 7e da 04 45 65 6d e3 56 62 ca 10 d8 a7 9d f9 05 2b b2 14 b4 73 44 0c 1d 4b c7 dd b7 87 e1 47 36 ee d8 49 7d 91 80 75 98 6e 19 a8 55 0c 1e f8 f5 96 41 54 59 6f ac e4 e8 c5 91 e7 14 0b c1 3e 99 31 e7 3a 10 fc 7a e1 f6 fd 3d 3b c7 0d db 47 d1 93 c4 43 2c d6 da 21 0a 02 0c b4 47 60 7a 51 22 dd a3 7e 50 cd e0 9a 1c 08 b6 f6 70 fd c1 ba 43 46 d0 23 40 2b 02 03 3f 44 60 84 0c 48 9e be 06 c9 cf c7 3e b3 3d a5 da 8d c4 36 69 17 75 4a 91 d3 3e fd 7b 9b 7a 0f dc fa 42 79 6e de e3 93 72 e2 f4 a9 f3 ff 01 01 72 d0 9d 16 82 40 ba 23 fc c7 99 0e a4 bb d3 01 e7 d4 a7 fb 2a a7 89 89 69 13 26 ce 98 ac a8 1b bb 78 fd f7 b3 81 d3 ec 3f a8 24 fa 8c 28 6d 7d fe 55 42 7f 7e c0 23 e5 9a 2b b2 41 d6 d5 27 2f 9c da 03 Data Ascii: e'5[eW+[lM8~EemVb+sDKG6I}unUATYo>1:z=;GC,!G`zQ"~PpCF#@+?D`H>=6iuJ>{zBynrr@#*i&x?$(m}UB~#+A'/
2023-11-06 16:08:29 UTC	2643	IN	Data Raw: 7d 1e 3f 06 b5 8f a5 8f 40 92 bd 4a f6 16 7c 26 96 be 3b 44 c3 ef a3 b7 c9 90 8d 17 a7 7c 8e 49 1f 0d bd fd e1 da 63 70 45 7c f8 f0 b6 b5 e0 0b dc aa a6 e8 af 1e 83 55 e0 3a 3e 2c 6f 30 1c ab d9 9b 65 cd 5f 1d 5c 7e 5c de 9c b7 86 d9 f4 e7 33 9b fe f1 95 f2 ba d1 13 aa a6 40 0f 43 e7 b0 9d 16 8c 58 39 96 24 e8 ee 76 ff 63 60 fc 51 c1 d6 4b 20 f1 82 10 74 b4 fb cb 76 6e 5c be 66 1d 35 47 34 b7 18 3b 0a 6e 0f 12 4d 2d 85 56 5a 5b 51 be a4 44 91 da a5 07 dc 8d 1f eb fe 8c 5a 72 4c d6 cb b6 ff c1 b5 dd 07 9a d7 ac 9b 54 b3 9e a2 8d e2 8a 8a 9a f1 95 0a c9 97 74 e9 15 90 70 0d d8 af c3 fe 3d 15 82 69 0d b2 58 3c ef f0 f5 d2 27 0a e2 a1 d0 4a 12 53 57 ae 9e b1 5c f1 54 74 71 fb 58 b8 0b 3c b7 e6 dc 24 70 90 24 1e ce bc 06 e6 35 83 8a 6b 02 e0 f2 04 9c 79 2e 04 Data Ascii: }?@J\|&;D\|IcpE\|U:>,o0e_\~\3@CX9$vc`QK tvn\f5G4;nM-VZ[QDZrLTtp=iX<'JSW\TtqX<$p$5ky.
2023-11-06 16:08:29 UTC	2647	IN	Data Raw: 8e 89 af 65 53 9a cd c4 b2 23 b3 b4 67 fd 4c a7 89 0d 0d bf 93 67 ab b3 f9 8b bc 09 d3 44 d8 28 e3 ae d1 d6 1e 36 4b f7 ec f1 65 41 ce a1 65 c7 0d 36 6f ed f6 3c 9b 9b 31 f7 99 78 fb 96 cd c6 8b da b5 3a b7 a0 c8 59 21 06 9b 83 07 bc b6 7b cc f1 5a c8 62 46 9b 8d 5e 9e 1b a6 1b 2a b9 75 ad 6a b4 91 13 23 89 52 37 9c 4e 0a d7 b0 0e 28 dd 51 db df 9a 96 4e d0 da 58 cf 50 9c 66 29 65 a6 29 52 61 9b 1d 82 1d 75 62 c3 6b 55 02 ed 71 9d 8e 50 7d f3 b7 45 5b db 8b 82 9d 0d 75 49 b7 a3 55 63 6d 94 b5 5f bc c8 df 57 6d a2 2e 9e bf 79 da b8 c6 86 7e 92 4e d8 e8 26 b8 f9 fa 8e 33 32 f3 6b f7 58 43 db d9 3c 93 1d 05 9b c0 49 cf 3f 3c 9f 14 68 c3 3a 5e 4c 61 2a 9f c9 d3 ac cd 82 0d 59 2b 9f d1 d8 d4 38 d3 e9 a3 4d 32 ad 9f 6c 93 25 97 7d 62 a3 94 61 99 65 4d 5a b8 bf Data Ascii: eS#gLgD(6KeAe6o<1x:Y!{ZbF^uj#R7N(QNXPf)e)RaubkUqP}E[uIUcm_Wm.y~N&32kXC<I?<h:^LaY+8M2l%}baeMZ
2023-11-06 16:08:29 UTC	2675	IN	Data Raw: 35 1f b7 36 e0 d6 29 dc 8a c6 ad a7 b8 25 23 b6 24 62 9b 21 36 14 b1 0f 11 9b 8b b8 26 88 5b 89 b8 0d 88 db 8e b8 63 88 4b 44 dc 4b c4 c9 88 b7 43 7c 05 c4 b7 40 fc 00 c4 cf 44 fc 12 c4 ef 41 7c 18 e2 93 10 ff 06 f1 14 09 36 48 70 40 42 33 24 f4 42 c2 0c 24 6c 41 42 14 12 92 90 f0 1e 89 02 12 ed 90 68 8f c4 66 48 9c 89 c4 9d 48 bc 88 c4 27 b8 6d 8d db 25 71 db 80 db d5 70 bb 27 6e 4f c2 ed 3f 71 7b 17 6e 1f c5 ed 10 dc 8e c7 ed 67 b8 63 8d 3b d5 71 c7 15 77 66 e3 ce 2b 24 d5 41 d2 ef 48 6a 87 a4 be 48 5a 81 a4 27 48 2e 89 e4 f6 48 1e 85 e4 45 48 de 8a e4 73 48 be 81 bb 56 b8 5b 09 77 07 e0 ee 4e dc 3d 8f bb 49 b8 fb 11 f7 46 e3 de 3a dc 3b 84 7b 57 71 ef 11 ee b7 c1 fd 81 b8 ef 8b fb 87 70 3f 12 f7 93 f0 40 83 07 22 1e 54 c4 83 66 78 30 19 0f fe c4 83 c3 Data Ascii: 56)%#$b!6&[cKDKC\|@DA\|6Hp@B3$B$lABhfHH'm%qp'nO?q{ngc;qwf+$AHjHZ'H.HEHsHV[wN=IF:;{Wqp?@"Tfx0
2023-11-06 16:08:29 UTC	2679	IN	Data Raw: be df fc 72 b2 fb 03 f1 99 1c 46 5f e8 f3 6f 4d d2 fd fb d6 24 a3 f8 2e 3e d0 63 c6 29 63 68 94 76 f6 89 45 7b 8e db 1f df 7b f0 f4 8e cd cb ff dc ea b0 eb 96 76 c3 fc 39 1b a7 19 3a 0c 1b d6 c5 28 de 5f b0 66 e1 3a 6f 07 f1 d9 c6 e9 93 d7 8f fb f9 82 25 cb f5 4c 6a ee 42 eb 86 16 a4 2f 4f 6e b3 e1 fd f2 94 40 6f 26 d3 a3 7c ef de 5b 8a 77 0c 4e bd cd 39 7a 6a 10 5e 2a f3 a3 a8 2b 9d 29 d1 a3 d4 24 fc 29 77 95 7c 33 d9 c0 78 a8 cc d7 37 16 44 93 e2 4d e7 eb 87 30 b5 e8 65 16 85 6a c2 86 d0 c6 76 d4 8a 1f e0 7a 23 2f 97 4b ea 99 1d b0 b1 ae a3 75 c3 f4 6d 58 08 4a 8b fc ce 42 50 96 9f 5c b5 e6 0f 8d d5 07 eb 16 cb b5 23 1f e6 f9 64 0b b2 4f b2 f5 8f f9 d4 55 3e ee 7f 78 3e c8 c7 3f 7f b6 34 80 83 1c 79 fd 39 e8 2e 53 fe d0 e8 b4 8c d4 68 f1 2e 83 b3 3a 16 Data Ascii: rF_oM$.>c)chvE{{v9:(_f:o%LjB/On@o&\|[wN9zj^*+)$)w\|3x7DM0ejvz#/KumXJBP\#dOU>x>?4y9.Sh.:
2023-11-06 16:08:29 UTC	2683	IN	Data Raw: 2f 32 c2 0c 55 58 fa 2f b2 32 be 89 fa d1 18 58 0b c4 20 d9 9e 96 d0 5b d0 8d 06 c5 7d 78 7d f3 8e a5 9c 91 d6 a1 a7 f8 aa fa 99 17 8d b9 0d 28 0d 07 d3 86 8d ac d7 fd ce 6f 8c da af ee ee a8 ad 54 52 aa a6 fe 46 6d af 46 1e 3f c7 3f 7d 21 7a 6c e8 ab bd 23 27 ea 92 d7 6b 6d e9 74 89 9e 90 ef 4c 12 68 7d b3 47 05 49 7d 5e cb 8d 38 c9 ac 63 8f d1 96 de 48 e3 f7 e0 50 c2 3b 24 da bc 54 85 5b fa c3 82 98 a9 76 49 4b f3 04 15 c3 26 9a d0 b4 25 6c a2 99 99 2c be ac cf 5c 88 32 85 5e 6d 22 45 f3 81 10 9a b6 9e ee f5 49 16 bf 30 78 ae b2 89 26 33 db 8f 56 87 7e 68 da 5c b9 ab 34 3e 59 cc f3 61 38 05 8a 2d 0d e4 23 3d da d2 c3 69 99 14 89 4c d4 ee 2c 61 67 de 2b 26 a7 1b ef 8f ea 52 06 c5 6d 06 de 55 55 d8 45 fb 5b 2a ec 76 85 d7 ab 56 5c 60 b2 a6 be a4 d4 a6 41 Data Ascii: /2UX/2X [}x}(oTRFmF??}!zl#'kmtLh}GI}^8cHP;$T[vIK&%l,\2^m"EI0x&3V~h\4>Ya8-#=iL,ag+&RmUUE[*vV\`A
2023-11-06 16:08:29 UTC	2687	IN	Data Raw: d7 c1 68 7d ab 2e f1 ef ff 8e bc fd 34 24 d8 ab 67 b0 71 f5 bc d5 73 e6 d8 2b 45 86 35 ad e7 40 47 cb 8a 7e 66 80 52 b1 f5 88 b3 43 8e 0d 3e 5c 6e cc 80 80 d9 e7 66 9e 9e 5e 4e 11 3b 1f 1c 45 2b dc 8d 74 f5 ef b1 a7 49 b9 90 f1 83 fc 58 98 5e b8 5e 7d a5 bc 52 39 a7 3e d5 d2 d2 59 94 d0 df 68 fd 3e 94 34 7b 64 b4 f5 95 0b 49 ea bb 3c 4d ba 32 92 e5 97 8d 75 2b 33 b4 e3 83 83 3c c3 0c ea 6d f9 4d 68 8d 0e 6f 94 52 fd 07 4c 19 3f c2 b8 3a c3 b2 38 38 d4 5c 49 3f 71 c4 8e 73 c3 d5 97 6d e1 01 b4 9d e0 a3 74 49 a0 12 4f 94 99 4f 7c 43 9f 2b 5d e8 26 89 a6 d3 dd 92 ab fb d0 a1 0e be 7c bb 03 4f 48 df d0 5c 6b fe d9 e7 3b f4 a0 54 b0 9c f4 af b5 24 db ce 1c 31 4b 5d 2a ab 9a 4e ab 53 6d b5 74 f1 2e 5f 2c 7b ca 17 cb 68 6d 73 f0 77 62 31 e5 85 29 98 8a c2 50 ef Data Ascii: h}.4$gqs+E5@G~fRC>\nf^N;E+tIX^^}R9>Yh>4{dI<M2u+3<mMhoRL?:88\I?qsmtIOO\|C+]&\|OH\k;T$1K]*NSmt._,{hmswb1)P
2023-11-06 16:08:29 UTC	2691	IN	Data Raw: 4e 7a 84 98 8c 91 89 38 d0 57 e2 40 45 f6 14 5b b0 e4 c9 4c fa 39 10 d4 d7 d1 20 79 42 ad cb 15 3c 34 d5 33 b4 76 47 ed 9b e6 7a 66 80 e9 a6 58 78 cb 74 7f b1 be 49 17 d3 6d 5a 1d 67 ed e5 32 5d f9 65 ae 88 36 71 1f c0 5d 6f 55 bb 8e 07 85 bb f6 d2 6a ff cb 08 dd ce 97 3f e5 ab 79 b2 b4 ca 53 8e fe dd d4 09 5a 51 cd 44 79 b5 be 6d ac 11 e1 ea 07 cc 19 70 22 74 dc 75 91 ee 1b b0 d2 ff 44 77 95 cd 34 7e c0 54 8d a1 d3 ff d0 dd 74 17 7a 5c b0 c2 db f3 73 b8 7c 68 a4 1f 26 e7 9e 74 e3 7f ab 5a 24 c7 4b ca c9 f4 2d 93 15 a6 7b 66 ad e9 01 bc bd 31 52 e3 60 92 9c 9b 2e b6 8b d5 72 44 08 6d 4e 00 6d 77 cc 67 4f 1d 3c 75 fa a8 8a 9b fe 7b a1 ad 10 a1 2b 20 9b 1d 2b 0c 11 0c f7 a6 6b bf 77 cc cc f9 d3 3c c6 58 8f 4c 9c 7d 51 69 e4 9f 9a 61 7e 28 ed 92 2e 33 cd 28 Data Ascii: Nz8W@E[L9 yB<43vGzfXxtImZg2]e6q]oUj?ySZQDymp"tuDw4~Ttz\s\|h&tZ$K-{f1R`.rDmNmwgO<u{+ +kw<XL}Qia~(.3(
2023-11-06 16:08:29 UTC	2695	IN	Data Raw: df aa 6e 1f cd 73 b7 91 88 86 12 99 4e eb 46 af a4 60 28 17 5a 37 fa 15 4c 81 50 9e d3 e9 9b 75 25 71 d8 b3 38 5b a9 51 4e af e6 b3 d5 e0 a2 a8 28 b0 4e e8 cc 8a eb 04 ea 18 26 0a fd 59 ee 55 0d 34 19 d8 d0 4c 14 7e 45 48 94 d1 45 d6 24 23 cc 32 2a a2 20 1b b1 51 0c af 8c 62 a0 b8 ba 5a b8 e5 51 d0 9a 15 87 2f 32 82 12 23 3e 0a e0 15 f6 5d 47 fb 2e 82 44 1b 05 40 81 f2 e0 0e ed fa 9d 1a 74 e8 80 f3 a8 40 1e a3 40 ee 98 e0 a9 40 8c f0 2c cf 3d 46 6a 79 90 58 1b 4d 06 27 e8 40 db 42 23 9e 6a f8 4d 0a 9d dd 61 a1 f0 4a 8e 6a 5a 38 2f 94 9d b8 45 42 15 37 bb 43 34 e6 5c 09 50 87 fd 84 40 95 5b 44 28 ec 00 47 69 7f b0 bd 39 8b a0 a4 39 74 fd 0a be 8c 38 62 a2 fd b7 69 0a 74 a8 2d 53 ea eb 18 2e 49 df ac 5a f2 25 28 79 23 90 49 47 93 6a 8a 9d 9e 2d 53 42 81 65 Data Ascii: nsNF`(Z7LPu%q8[QN(N&YU4L~EHE$#2* QbZQ/2#>]G.D@t@@@,=FjyXM'@B#jMaJjZ8/EB7C4\P@[D(Gi99t8bit-S.IZ%(y#IGj-SBe
2023-11-06 16:08:29 UTC	2699	IN	Data Raw: c6 63 ec 56 86 a1 db 33 8c dc 1e f5 63 0f d3 4c 18 2a 78 e8 44 23 ee 17 6a 88 10 ca 8c ea 4d 2f 1a 54 9d b3 a7 75 81 ed e9 55 2f 5a 3c 52 c4 58 93 8e 18 39 62 fc 8d 93 5e 23 00 d7 52 c8 97 14 f2 39 42 22 b3 5a 01 78 0d b6 b4 a9 66 f4 5d bb 47 ab 29 fd eb 62 c0 8c f4 ed a9 8e 3f f8 bb fb 17 f4 ab 21 97 8a 91 f8 0b f5 8e da 5d 25 f3 16 37 41 19 aa 73 be 50 dc af b1 18 cc 27 88 1b 6c be ce 62 b5 18 9d 3f 55 d7 0c cf 5f a8 3f c6 e7 26 b6 35 23 f4 a7 ea 8f 21 ba 28 36 58 c8 9a c2 f4 fb cd a0 b5 a8 a5 eb a8 fe 34 43 fd 79 8a 5a ca dd 5f 63 8a d4 6f ad b1 a7 57 d8 83 fb fd 44 3c 53 b4 fe 34 1c 0a 8d da d7 8c 6a df 47 6c 44 5c f6 77 fd 2f 10 0f b3 c6 a8 bd 47 f6 1c 53 dc fe 6c 1d fc 23 aa d5 3a aa 56 1d 44 b5 5a 47 d5 ea 41 d8 be aa 75 f6 b4 a8 be 3d bd 40 02 0f Data Ascii: cV3cL*xD#jM/TuU/Z<RX9b^#R9B"Zxf]G)b?!]%7AsP'lb?U_?&5#!(6X4CyZ_coWD<S4jGlD\w/GSl#:VDZGAu=@
2023-11-06 16:08:29 UTC	2703	IN	Data Raw: 3d 2c d9 f7 f7 77 81 2c 82 d0 b4 e3 8b d3 e5 65 cb 03 f3 e0 8f 1b e6 19 65 70 ac d2 02 4e 5c 96 ff 32 4e 0b 8d 55 3b 37 ee 8c b0 be 99 96 7e 20 45 51 91 32 b8 25 a9 33 c6 c1 41 05 8e fa df e4 b3 97 fb af 1d b3 da 92 0c 9d 4b be 73 21 77 ad c9 b8 0a 0c 7b 9b 03 fb fc 25 b4 87 26 dd 2b 89 74 d8 b0 b9 63 bd 94 bb c1 2d 6f 17 74 88 3e bb 25 7e db a1 48 4b 59 32 0f 51 bc 6c 3e 2d a3 6b b5 af 1c 76 68 57 97 61 3e e9 21 74 95 43 7b f2 9e f8 32 d1 27 f6 5e d9 f1 dc 12 c2 89 b3 5c e8 8a 8e 6c 3e 99 b9 84 74 5c 3c 73 de b2 86 0b 5d 30 43 1e 2e 29 04 07 6a 5a 2a 61 10 0f f3 79 1b 54 aa 1f 50 35 e7 42 00 0b 57 8a d0 ba 45 40 b8 fc d4 73 c9 e5 e8 03 db 61 31 8b 56 ad 84 e6 ca 99 fc a4 45 dd 7c 54 ee c4 4c e2 40 b3 66 b7 3e c4 cd 41 ea 0e 66 d8 18 c3 3f 40 e5 fa 01 f2 Data Ascii: =,w,eepN\2NU;7~ EQ2%3AKs!w{%&+tc-ot>%~HKY2Ql>-kvhWa>!tC{2'^\l>t\<s]0C.)jZ*ayTP5BWE@sa1VE\|TL@f>Af?@
2023-11-06 16:08:29 UTC	2707	IN	Data Raw: 0c 2a 9f 35 8b bb 2e 45 16 77 8c 38 32 28 b9 f9 5a 38 59 ca f1 6f 50 e6 a5 60 2a f1 63 04 4a ec 3d 31 e8 8f f5 04 6b 2a f2 66 0b 48 ff 40 b2 e5 bf 45 7e e0 0d 98 5c 04 69 a5 8a 73 f7 e1 58 b5 12 fc 4a 38 7b c3 9c b2 0c 73 3a 88 73 92 c5 c8 9d 8a 91 74 0b c5 a8 79 16 4f 6a 94 e9 26 52 bb 5b 64 70 d3 4c de 18 66 62 7e 97 7c 39 c4 1a 67 92 88 33 a9 b9 88 33 e9 f1 69 22 f6 4d 13 29 45 21 69 21 cf c4 de 30 93 bc a6 99 9c 33 cc c4 1c 67 a2 80 21 28 39 43 e8 6c 0e c2 de f3 28 38 dd 61 0e 15 9d f1 0b 48 df 40 b2 ad a5 7a a9 61 36 19 74 36 87 26 70 f6 9f 66 13 67 98 cd 86 12 ba 80 a5 94 b2 4f 1c a2 07 3c d4 00 03 fe e0 33 0c 94 f4 80 87 61 e4 0b e2 4b fc 6b d0 ad ff 4e 2c 6b 31 7a de 43 74 25 67 65 d6 a0 42 1b 86 f2 6e 35 6f 70 93 42 5b f7 2b e5 ea 23 99 ab 6b 67 Data Ascii: 5.Ew82(Z8YoP`cJ=1k*fH@E~\isXJ8{s:styOj&R[dpLfb~\|9g33i"M)E!i!03g!(9Cl(8aH@za6t6&pfgO<3aKkN,k1zCt%geBn5opB[+#kg
2023-11-06 16:08:29 UTC	2715	IN	Data Raw: 1a cc 4f 53 c2 9b 86 cb 82 f5 a5 5e a4 65 a2 3b f3 3a 5e 98 bf d1 65 e9 74 ed 74 97 f8 8c 8d e2 c2 8d cc 75 ee 45 ca f5 9b fb c5 66 ca 7d 6e 77 ba c1 56 1a ad 7b f7 ff d1 02 fa 26 19 63 a3 2f ae 47 a7 f1 7f c1 b2 86 d1 f0 b5 8e ff 37 b4 d9 f7 ff 6a 7a 37 a5 3e 33 38 d3 18 e7 37 2f d5 36 85 66 01 ff dc 50 52 c1 85 35 6e f9 db 0c 29 8b 33 93 c0 28 29 d3 c0 e5 65 ba 8f 79 b5 58 ed 74 1d c6 52 ae 55 96 2a a9 c6 10 22 ef 86 e5 85 e6 9c c8 a7 2f f9 66 86 ce 0e 9b 19 39 a6 0d 98 92 df e0 ae 8e 58 e2 b2 e8 cd 92 a9 8d a1 cc 43 36 1d ba 30 30 8f 4d 27 5d 98 13 f0 82 0b d3 ab c1 82 03 5b b0 39 ac c3 0b e9 35 15 79 b2 b5 51 8d b7 7d 82 cb ee 15 5d 82 85 3a 8b e2 b7 79 c6 50 07 11 e4 c0 43 fe 4f e9 95 2c 84 8d fa c6 01 02 ff 4b fa d3 e8 ac e8 bc e8 9c b6 bb 49 08 fb Data Ascii: OS^e;:^ettuEf}nwV{&c/G7jz7>387/6fPR5n)3()eyXtRU*"/f9XC600M'][95yQ}]:yPCO,KI
2023-11-06 16:08:29 UTC	2719	IN	Data Raw: 9c 83 61 9c 45 31 86 25 16 d0 9d 1a 76 8f 3a fe 78 3d 3d ff d0 15 5a bc 54 c1 d7 4f ae a2 0e ff 72 40 3c aa ee de 2c 7f fc b1 a9 aa 8e bc 16 c0 fa 91 aa 3e 65 e5 f8 f1 b6 ae 3f 8a ea 3c ee 60 c0 4d 47 1f c9 f6 a6 bc 3d d2 91 c7 7c 2c 7c 0c 10 de 14 d6 82 35 58 99 de 25 5f 4c 9f ed 6c b7 44 e4 17 16 0f 45 e3 ab e2 63 25 63 55 ea f9 bc f3 49 da fb 57 e7 91 ae 64 80 e3 62 5b ff 80 dd 21 01 a2 ef 64 26 e8 78 f4 d6 53 5a b5 0b e9 75 f3 bd 8f 14 2a 75 95 e3 58 70 fa d8 4f 78 1d 57 fc ab 28 85 98 36 ee 52 4d 0f 58 36 df 7f cd 9e 3d eb f5 6b 26 c3 52 9d 3a 8a f4 2a 93 82 df 2a e4 68 4a 29 7d 45 7a 09 8f 2e 5c af 17 a5 13 23 c9 56 55 90 ae 31 94 06 25 b9 9b 8a b6 e6 e8 f7 b0 05 44 09 b3 c9 75 66 37 6b b5 c1 65 e9 ba f5 7b 76 07 ea d7 4e 65 36 87 46 6c 89 d2 aa ff Data Ascii: aE1%v:x==ZTOr@<,>e?<`MG=\|,\|5X%_LlDEc%cUIWdb[!d&xSZuuXpOxW(6RMX6=k&R:*hJ)}Ez.\#VU1%Duf7ke{vNe6Fl
2023-11-06 16:08:29 UTC	2745	IN	Data Raw: 5f 69 72 e5 20 78 2d 8d e2 68 5d 53 76 e6 20 29 04 6a 74 b4 b2 29 fd 32 18 36 16 2b 12 c1 5f 99 48 1f a7 f9 17 13 7f 74 a3 3a c1 d6 3c 2c ac c3 c2 ad 02 d4 e5 91 3a 8c 52 04 b9 50 7a 27 17 4a ef f2 1a df c9 19 37 c6 0d db 9a f2 0e 8d e5 bc c3 df 1d a8 11 d7 c0 b7 71 f0 5d d5 07 43 d6 61 8b f9 a8 ca 3a 6b 48 97 0c f2 75 1d 51 ea 9b db 19 b2 0e 8d 85 3a 50 66 c0 d7 d0 45 03 9d e7 c3 d7 a6 d0 42 ce 3a ec 10 47 be 23 df 6a c8 b7 0e c4 78 64 47 da a8 73 9a d4 00 12 d7 99 26 fc 34 c8 79 41 b4 44 ea af eb 4c 53 92 e6 c8 79 41 8d 0d 72 ce 61 2f ae 39 d9 b0 73 53 ae e1 c9 6c f1 ca de 4b a9 9a 42 ff f3 86 5c c3 43 c7 63 8a 53 36 5f 4a d6 64 1f 8d 68 ce 35 f4 ec 2b ce 39 b0 6c be 86 7f bb cc cf 71 42 73 aa a1 a3 e3 82 20 c7 b9 9a be 71 9e 34 d5 b0 17 d7 9c 63 d8 59 Data Ascii: _ir x-h]Sv )jt)26+_Ht:<,:RPz'J7q]Ca:kHuQ:PfEB:G#jxdGs&4yADLSyAra/9sSlKB\CcS6_Jdh5+9lqBs q4cY
2023-11-06 16:08:29 UTC	2749	IN	Data Raw: fc 5b 18 7d 4b d8 a3 e2 9f 26 24 9e bc 72 53 13 be fd c4 b6 13 7a e8 92 cb f2 2f 48 7f 36 20 29 20 3e 09 36 72 76 47 97 1c b1 13 fd d8 89 5b 99 39 08 fb 1b bb c7 6f b7 df 6a cd 68 87 09 13 1c f5 fc db 79 52 c7 5b 74 1f 45 58 b2 20 bd 34 0d ee f8 1a 83 fd 03 3e 05 ec 4d 1e b0 fc 6a e8 07 83 d3 c9 e0 52 18 9c 46 3a a8 d0 f7 b8 03 be 3a 18 4c ee 30 a4 fd 42 18 34 99 0c 5a 00 83 e8 fe 63 07 d3 15 f2 41 17 d8 0c 0e d2 36 dd 59 18 05 8f 29 f4 48 f2 98 21 dd 64 38 c9 84 ab 7d a4 94 2c e1 3b 61 d1 72 27 af f9 da 21 d6 15 c0 f8 8b b0 3c 9d b8 b3 3b 0e 07 1f 39 a2 39 18 7c 70 e7 01 3d 1c ca 20 fb 58 50 1d bb 76 f3 89 36 29 d6 db e9 ac 98 91 c6 24 3b 59 5d 98 a6 25 ad 7f ec 4d 7e 5a 29 4e d9 c2 d8 5c 57 ed d8 10 1c 18 a8 09 08 0e d8 19 a0 9f be 95 b1 2d 51 91 be a7 Data Ascii: [}K&$rSz/H6 ) >6rvG[9ojhyR[tEX 4>MjRF::L0B4ZcA6Y)H!d8},;ar'!<;99\|p= XPv6)$;Y]%M~Z)N\W-Q

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:29 UTC	2608	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:29 GMT Content-Type: application/font-woff;charset=UTF-8 Content-Length: 58548 Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None x-edge-enc-proxy-static: true Cross-Origin-Embedder-Policy: require-corp Expires: Sat, 09 Nov 2024 16:08:29 GMT Cache-Control: private Last-Modified: Thu, 25 May 2023 16:23:32 GMT X-Content-Type-Options: nosniff Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:29 UTC	2609	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 e4 b4 00 10 00 00 00 01 75 34 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 e4 98 00 00 00 1a 00 00 00 1c 95 76 1c 58 47 44 45 46 00 00 e4 78 00 00 00 1e 00 00 00 1e 00 27 01 40 4f 53 2f 32 00 00 01 dc 00 00 00 4a 00 00 00 60 40 db 5e 65 63 6d 61 70 00 00 03 6c 00 00 00 43 00 00 01 42 00 0f f5 e2 63 76 74 20 00 00 0b 1c 00 00 00 0b 00 00 00 0e 00 00 00 00 66 70 67 6d 00 00 03 b0 00 00 06 ed 00 00 0e 0c 62 2e f9 7a 67 61 73 70 00 00 e4 70 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0d a0 00 00 cc d7 00 01 4b c4 97 f3 05 80 68 65 61 64 00 00 01 6c 00 00 00 30 00 00 00 36 1b f0 5d d3 68 68 65 61 00 00 01 9c 00 00 00 20 00 00 00 24 04 2b 01 75 68 6d 74 78 00 00 02 28 00 00 01 Data Ascii: wOFFu4FFTMvXGDEFx'@OS/2J`@^ecmaplCBcvt fpgmb.zgasppglyfKheadl06]hhea $+uhmtx(
2023-11-06 16:08:29 UTC	2612	IN	Data Raw: 74 f7 ec 5b 4f 4f 8f 66 a4 99 96 86 d1 36 23 46 42 08 69 00 a1 0d 31 1a 81 6c 21 8c 8c 01 09 19 10 06 1b b0 8d 2d 20 5e b0 0d b1 e3 3c c7 58 c6 36 c1 38 10 d9 8e 1d 2f 31 21 31 26 24 4e fc e1 c5 f9 f9 25 ce 4b e2 c4 9f 24 8e 89 5b bf 73 ab 7b a4 01 84 5f fc f2 fb e4 bd 3f 7e a3 ee da bb ea d6 b9 67 f9 9e 73 cf 3d 22 94 b8 84 90 5f 83 6d 44 20 32 e9 aa 95 70 4f a0 44 58 20 14 80 6e 27 94 c2 2e 11 b7 60 8e 10 99 49 22 5e 26 b8 12 0b ba cb 6e d9 2d 95 dd bc 7b f7 5b af b9 06 b6 d5 3f e5 42 99 ff 96 e8 67 bf 09 ff 02 9f c3 bb d9 a4 46 76 d6 2e af 0c f7 f5 16 b3 a9 a4 c2 24 98 25 84 92 93 44 12 99 28 1d 21 4c 16 99 7c 9c c8 20 ca 70 9c 00 dc 89 27 05 95 0a 8b 1a a8 a2 a8 6e c7 95 2a ee 51 40 54 c5 2d 8e e3 d4 9c c9 15 a3 e5 81 b2 1b 78 9e 17 d1 59 a6 7b 64 78 Data Ascii: t[OOf6#FBi1l!- ^<X68/1!1&$N%K$[s{_?~gs="_mD 2pODX n'.`I"^&n-{[?BgFv.$%D(!L\| p'n*Q@T-xY{dx
2023-11-06 16:08:29 UTC	2651	IN	Data Raw: 04 ed 7e 5f 6e 73 71 b8 58 1c fe 39 ee e6 7b c3 a3 7c d5 38 c8 e5 19 69 76 f6 ab 28 4a 5f 41 f6 f3 d1 07 2d a1 5c af 42 c9 9e 26 37 85 96 f3 bd e4 14 dc 5b 73 8e 5c 43 fd c4 bd 1b 68 8a de 03 5a 52 98 9d 39 ad 6d de 51 bb 9d 24 e2 7e 90 38 42 fc 20 f0 0f 93 58 09 e2 89 58 7c 91 04 a8 d4 82 cc 01 02 22 85 f9 1c 88 72 96 a2 fe 41 54 16 25 a9 96 68 6a a1 08 0e 69 11 9c 96 85 36 20 92 40 e6 19 0a 85 a4 08 d2 62 1e 14 ab dd 14 34 17 e5 a1 a3 95 26 3d 70 f5 a4 bb 58 b0 0d 01 a5 23 cd 9d f8 74 24 92 de 4e d2 e9 c8 2e 12 49 47 e6 52 b5 3b 78 23 e2 09 ff c4 ff c1 56 cc d7 16 1e 78 e0 e6 b7 ad 5b bb 66 cd c4 44 67 47 10 33 0d 20 0f 9c 7a e0 d4 fb df f7 de f7 dc fd 0e 6e d5 6f 3b f6 b6 db 6f be fd c6 1b 0e 5d bb 7f df ee ab e6 b7 5f ba e5 e2 d9 b5 37 ad bb 69 cd f4 Data Ascii: ~_nsqX9{\|8iv(J_A-\B&7[s\ChZR9mQ$~8B XX\|"rAT%hji6 @b4&=pX#t$N.IGR;x#Vx[fDgG3 zno;o]_7i
2023-11-06 16:08:29 UTC	2655	IN	Data Raw: 91 f5 1a 29 31 61 7e 0c 8f d7 c2 ef 41 9f d0 91 ae 3f 9c ee e8 48 c3 6d fd f5 d3 5c 59 c2 01 a6 b2 61 5d 37 7e 22 99 69 fd 90 a6 6b 2d da d6 bf 55 1c fb 8f fb a5 bf 0e af 3c 90 ee e8 37 d4 fa 07 54 43 d2 18 ec 57 a2 a6 ae ff a3 6c e8 6f d2 33 ba a6 6d fd b1 d6 c8 83 56 ce 3e 0f 3f 86 c7 49 9a e7 41 a3 4f b5 ac a3 5e f7 2e 23 d9 42 25 4c 33 9a 84 d7 be 87 05 4b e9 04 f0 8c d0 25 16 52 f5 47 93 c5 62 12 0e 77 d5 9f 66 ba 64 68 70 95 66 46 9e ec fa cb f0 e8 55 a9 42 27 d3 e4 fa af 6b a6 19 f6 4d 2f d2 7a 2b 89 85 39 31 3c c5 6a b6 31 4e cc 73 d5 a2 f1 22 cf 89 e1 16 c8 86 c6 d0 70 98 ef 15 e3 e4 89 c1 3f eb e6 4b 96 69 99 2f 99 ba 60 b5 a8 cf 9c 31 5b 60 bd ee 78 da 4b ba f9 a2 69 59 a6 a8 52 fd 4b cf e8 78 3b 72 08 79 f3 7d d8 a7 31 12 d4 a2 8d e7 90 a5 c7 Data Ascii: )1a~A?Hm\Ya]7~"ik-U<7TCWlo3mV>?IAO^.#B%L3K%RGbwfdhpfFUB'kM/z+91<j1Ns"p?Ki/`1[`xKiYRKx;ry}1
2023-11-06 16:08:29 UTC	2659	IN	Data Raw: 33 b8 1c 18 c0 45 77 77 03 6b fc 05 be f5 27 10 0d 54 c8 2a d0 6b 5e 19 ed 57 1b a8 3a 9d ed 49 51 b9 03 5d 98 99 c6 b4 8f 1a 11 34 c6 07 a3 14 20 b2 72 84 f0 09 35 28 a5 1a 61 54 63 8b 22 50 53 a2 c8 53 70 00 05 d6 d0 65 e3 00 fa 1b aa be 9d e8 3a 4f 40 d2 55 de d5 3a de 67 35 bf 8f 26 b0 13 ff fb 37 aa ad 59 7e 0f 50 10 0d fd ca 37 c1 6e 4c 13 32 be a2 3a 32 34 58 c8 25 e2 3c 1d ee 35 98 e8 7c 41 1c 9e 81 17 ce 9c e2 c9 7d e5 a8 dc 02 41 f9 dc 24 8a f2 04 54 1b d9 0b 81 05 42 b6 0f f8 44 1f 78 b2 38 35 d5 3b f5 77 7e 3c 9e cd c6 e3 b9 b1 e8 d0 3a 59 8c e8 f5 c3 9a 27 c8 eb 07 9d a9 dd 5d 11 f3 bf c3 46 6d 55 f1 86 d2 4a 48 5e 74 51 0f 7e 6a 4e 2e 7e 59 3c d7 9e 68 cb 68 9b ca 69 3d e2 1a e9 a1 59 a3 2d 73 d9 c0 54 67 44 ab 7f a1 34 20 0c 34 fa ed fb d8 Data Ascii: 3Ewwk'T*k^W:IQ]4 r5(aTc"PSSpe:O@U:g5&7Y~P7nL2:24X%<5\|A}A$TBDx85;w~<:Y']FmUJH^tQ~jN.~Y<hhi=Y-sTgD4 4
2023-11-06 16:08:29 UTC	2663	IN	Data Raw: c7 4b 25 d3 ed d9 4c 3e 12 33 4d 59 74 5c 3b 96 40 00 29 98 68 95 24 5e 62 29 99 89 38 69 24 80 aa a1 c7 c6 2b a7 08 e8 d3 f1 98 dd 33 61 fc 34 20 1b 6a 6b 85 06 ad 45 5e d0 2f e4 72 2a 48 f4 38 3b 17 bf 7b 0d 71 a3 51 20 e8 72 a1 27 c5 5d d7 c6 b4 e7 66 74 eb 75 74 f5 90 cd e1 65 23 42 43 b2 a0 0a d5 b0 fd 97 7e 71 0c 9e 71 8d d7 bc d5 49 98 a9 7f 81 fb 8a cb 79 a1 8b 4c f2 ff 61 a4 c9 0d 22 e3 ff 81 41 18 bc 6e c6 3b 74 50 64 89 cf bd d4 80 89 1c 03 bd a6 ad dd dd 3c 9c d8 3d d9 3d d1 d7 e3 77 f9 9d c9 57 85 12 8d 37 0c 25 fa 79 b7 d9 ef d1 70 58 3a 64 0c f4 af 87 1a 3c c1 6b 5a 94 38 3b e4 2f d0 e9 0f 8c bd 27 17 b7 3c 1d d1 39 b5 b4 b8 df be 63 ab c9 2c 49 30 98 24 85 56 40 35 2e d0 ab ff 7e 27 cc 6a 2c aa c7 68 42 b2 5d c7 b1 75 f5 91 c3 02 be ae 6d Data Ascii: K%L>3MYt\;@)h$^b)8i$+3a4 jkE^/r*H8;{qQ r']ftute#BC~qqIyLa"An;tPd<==wW7%ypX:d<kZ8;/'<9c,I0$V@5.~'j,hB]um
2023-11-06 16:08:29 UTC	2667	IN	Data Raw: 4d 0c 60 08 3e 15 e9 5d 04 1a 01 17 d9 8e 2b 3c c3 0a 60 67 b0 cc 71 22 89 a2 34 4d c0 44 39 44 44 49 84 ce 49 c9 b6 2d 9b 37 ae 59 55 3f b1 f2 44 4f 39 9b 49 25 23 36 e9 a5 bd aa cf 46 82 2b fc 60 c2 61 9f 73 70 db 13 fd be 56 45 74 fc c1 aa 8f 0b 54 1a 0a a2 74 9c 76 91 15 6b 36 3b c6 d6 4a 35 bb c4 b6 0f 3a 01 ad 43 24 e0 5f ae fa a3 7d b1 8a 86 1f fe 62 39 ad f9 d6 21 9c f5 8c a9 b3 b1 18 65 14 83 4f c7 19 b6 00 4a 04 41 be 12 d9 32 25 ea fb 4e 58 0f df cb 4a bc c0 58 ed f7 e7 1e a0 49 49 74 6d ca 24 32 09 3b ac 31 34 1a a5 19 89 a1 16 9d 8b c6 0b b1 6c b7 ac 75 4a 69 d1 88 47 4c 26 4f b3 79 39 27 a5 8c 7c 9a d3 44 35 1d 12 73 72 7b d6 b4 22 8d df bb e6 dd f4 68 63 2b 2f 83 71 a5 e8 74 b5 d9 78 ea e6 74 c4 48 19 52 46 2e a4 b2 06 86 7d 6b 70 2e a5 2c Data Ascii: M`>]+<`gq"4MD9DDII-7YU?DO9I%#6F+`aspVEtTtvk6;J5:C$_}b9!eOJA2%NXJXIItm$2;14luJiGL&Oy9'\|D5sr{"hc+/qtxtHRF.}kp.,
2023-11-06 16:08:29 UTC	2671	IN	Data Raw: a0 5b 08 57 ab 26 08 02 75 2f 02 8d ca 0d d0 5c d5 b7 46 0c c6 01 eb b9 39 74 8a 03 7e 22 e7 10 06 19 0c f8 19 d8 f0 ce 06 30 07 3e da 78 2d f8 40 fd 48 7f 6c c0 e0 77 a5 3f f8 bd cb 6d d4 e9 d3 9a d4 b8 92 93 04 16 8c e2 55 9a 44 ef 93 b5 b7 2b 8c fa 90 aa f6 b8 59 f7 6f 59 56 14 d3 b2 28 8a 59 f6 72 49 12 45 68 76 28 a1 0f 86 22 8d 6f fb 27 29 39 e9 c6 9f fd 9b a4 c1 23 72 8d bf d6 10 7c f1 7a 4d f3 ca aa 5a 86 57 17 3d c8 c9 62 5a 14 e1 8d 1b 80 21 51 3c ca b2 b2 b8 d8 d7 47 bc 99 2c 39 89 1c 69 05 18 40 57 53 e4 1d 47 f4 30 56 f2 67 ab 58 51 38 0b f6 1c 2b f0 be a3 2f 21 02 0d 8f f9 a0 dc ab 90 68 ae 3a 71 f4 8a b5 6b 4a 1d 88 48 23 2f ea 47 2d 44 9a 85 71 68 1e f2 d4 59 0c 79 5a 40 66 aa 08 ce 06 20 1f 20 c2 9e 0a 4d d8 53 70 46 2b c3 fd c8 f4 30 9f Data Ascii: [W&u/\F9t~"0>x-@Hlw?mUD+YoYV(YrIEhv("o')9#r\|zMZW=bZ!Q<G,9i@WSG0VgXQ8+/!h:qkJH#/G-DqhYyZ@f MSpF+0
2023-11-06 16:08:29 UTC	2711	IN	Data Raw: 9c 61 45 31 de 35 96 a7 9c 64 bd dd 90 29 27 4a 1a 9c 14 54 52 08 2c 3a 99 b1 c5 d4 d2 8e 18 8c be 70 a1 8d 03 39 ef 05 50 4c d8 99 61 88 8e 88 0a af 7b 9f 56 c5 c6 f7 e0 57 20 35 05 51 6d 6b b4 b8 08 9f f5 e7 3a 92 64 29 d9 54 9f 1c ae 42 a7 2f 99 0c 8f 13 cd 1c 3b 15 a2 4c 91 f2 cc 24 1a f8 14 09 ca 9a f0 b7 38 3f cf f2 3e fa f0 45 20 b7 4e b1 bd 54 6c 2b 16 30 24 a6 e6 35 a7 03 9a 58 cc 22 34 1b 8c 50 41 a2 2b 9d cf a8 6b f2 98 0e fb 93 56 d8 e1 86 07 fe a5 f7 64 b6 dc 9b 4e a7 4f e7 ba 3a 73 6a 57 38 9e b0 ae b5 ac 70 32 66 d3 a9 14 4d 5d 9b 2b 77 e4 d4 0e 0a 3e 58 f8 54 50 be a7 6f 36 bd ef a0 79 65 36 9b d9 93 39 9d 4e ab 96 65 9d b6 ab b6 6d d3 07 32 d3 99 eb a0 c4 a6 96 75 9d 5f b4 47 3f 91 45 bc 93 0b 2f d1 7f a6 1f f0 d1 f0 cb 60 39 af 23 db c9 Data Ascii: aE15d)'JTR,:p9PLa{VW 5Qmk:d)TB/;L$8?>E NTl+0$5X"4PA+kVdNO:sjW8p2fM]+w>XTPo6ye69Nem2u_G?E/`9#
2023-11-06 16:08:29 UTC	2723	IN	Data Raw: 01 be 2e 02 85 09 3c ca 14 b8 5d 02 2e b7 62 04 a6 80 11 98 70 34 4f 7c a4 44 70 11 85 19 89 62 08 e6 6e f8 10 d1 e6 11 39 cc 07 b7 64 94 31 cb 8f 8c 4d f9 12 86 84 b4 05 bb 8a 33 62 30 74 87 e9 9e 87 8b df 4a 7d eb e8 60 a9 b1 89 f6 36 5e a6 9f 79 f8 e8 b7 52 2f 36 ae f8 49 e3 af e9 7b 8b 8d 47 d1 77 ff 26 c8 7f d9 9f f7 f0 ea 91 85 75 e5 45 4e 3b 2e 2a 7f 73 17 ae 28 2f ac 0f 3d e9 af 25 17 eb 05 e2 af 6e 35 39 64 31 16 19 3d 7f cc 59 27 3e ca 9e cf 12 8c b7 43 e1 e5 47 e4 7e ad 71 39 fd 10 7d b2 a1 d0 2f 36 5e 21 1a 91 2f 7c 85 fe 94 7e 0a ce e6 f9 73 00 18 b1 b4 dc f7 1e 36 93 23 e4 36 fa 9b 75 eb 20 cd 65 77 d1 b6 dc 6d 20 c9 db 68 9e e1 9a 18 d8 77 91 42 22 9b 28 9c 26 6d 39 2d d7 a6 cd 79 54 13 73 9a 78 d6 2d 85 a0 4b e6 59 26 3f 47 f2 11 36 1f 39 Data Ascii: .<].bp4O\|Dpbn9d1M3b0tJ}`6^yR/6I{Gw&uEN;.*s(/=%n59d1=Y'>CG~q9}/6^!/\|~s6#6u ewm hwB"(&m9-yTsx-KY&?G69
2023-11-06 16:08:29 UTC	2727	IN	Data Raw: 89 ea 6e 74 1a ee 55 75 75 15 f6 a2 ee 21 30 ed a3 ee d6 cf 3c f6 d1 df 19 19 21 e4 6b 2f 7c e5 4f 9e 7f ee d9 2f 3c fd 07 8f fd d1 67 fe e8 93 bf f7 3b 9f fe e8 a7 1f 7a f0 83 1f f8 ad f7 bf e7 dd f7 dd fb b6 b7 9e 7b d3 35 27 77 ed 18 d9 30 b2 7e f9 28 02 69 e5 b3 99 14 d8 26 22 11 c1 28 ca e2 e0 20 16 6a 83 5e a1 8f 0e 96 10 74 00 53 1b e7 79 ea 0b 01 bf 46 ab c7 94 40 d4 0b 01 c1 16 8a be e8 b4 88 d7 fc 50 79 9f 8c cb 89 f8 dd a9 d5 81 86 fc 78 d8 61 ff 04 30 74 b0 d0 41 fc 2c f4 a0 c3 f8 7d cb f5 01 8f f0 3f b3 80 84 53 0c 26 f1 f2 ad 75 ad 88 b8 88 e1 c0 5b 84 98 d3 3a 90 0d 86 31 24 f0 a1 6b 6d 67 79 78 b9 13 ae 55 a2 55 81 11 70 f2 1f 5e 21 c6 14 c7 c6 c0 5a 12 c1 22 77 25 91 e5 a5 72 d9 12 a4 0d 65 5b 92 a0 27 31 22 18 ea 5d 1c 58 4f 96 a2 e8 a6 Data Ascii: ntUuu!0<!k/\|O/<g;z{5'w0~(i&"( j^tSyF@Pyxa0tA,}?S&u[:1$kmgyxUUp^!Z"w%re['1"]XO
2023-11-06 16:08:29 UTC	2731	IN	Data Raw: ef 9f 67 dc a0 c9 5a 3c 1c 90 79 6e aa 91 2b 84 ac 91 a0 5e 79 5e 08 1d 6b 04 83 54 40 06 3a ac fc 8e dc 08 b7 25 cf 42 b5 38 d2 29 b0 60 4e 89 18 47 fb 2c 51 44 1b b6 a7 ea 47 55 5d 57 c9 e3 0f 4a 92 6c 4b cf 71 17 fc 56 ac 16 b6 41 7c b3 29 85 3c 08 ca 1c 07 bf 13 66 0e 3c d9 c7 61 4e 93 46 cc 2b 9b 4c 42 e4 d9 67 9f c5 78 5b 91 fd 12 6c a5 bb e1 84 2d c3 0f 91 c7 19 2a cf d1 53 f0 43 4e 23 17 fa cb 54 22 2f 81 de d1 02 f6 d0 7e ee 06 ee d1 da 07 e6 89 a8 1d 24 86 da 95 85 3e c0 40 0c 1c 30 90 c4 19 b0 4f 44 ed 41 4e 35 0d 53 35 c0 42 52 0c ce 50 38 c6 5e 65 8a d2 32 d8 a8 1c da a8 20 5b 1b 20 07 16 f1 15 f8 65 86 37 8d 60 fc 8d 58 87 c5 c5 64 12 c3 79 17 6f 58 bc fe ea a5 85 3d b3 d3 a3 eb 92 3d c9 1e e6 cc 6a cb b5 46 42 81 16 2b ae 88 9c 49 f4 20 c3 Data Ascii: gZ<yn+^y^kT@:%B8)`NG,QDGU]WJlKqVA\|)<f<aNF+LBgx[l-*SCN#T"/~$>@0ODAN5S5BRP8^e2 [ e7`XdyoX==jFB+I
2023-11-06 16:08:29 UTC	2735	IN	Data Raw: 97 c9 4b 1b 37 d2 50 a6 bd 94 28 f4 4c f5 0b 1b 37 4a 87 b6 14 b6 1c 7a ea 94 b4 7d fe 54 69 aa fe 67 f0 26 cb 53 a5 af 17 12 03 1d 99 10 dd b8 51 e8 9b ee 81 2b 24 bc b4 06 9f 7e 1c 2e dd 8f af a1 ed d2 29 e6 13 0f 9e fb 43 f2 3f a0 5e 6d 18 9f e7 39 d3 3a b9 fd b5 05 14 f7 6d 11 d0 eb f3 1a 15 05 b0 3d e5 ce 38 5b d2 40 77 88 40 14 04 25 96 08 a8 aa e2 b2 86 0e 30 84 d6 5a 66 6b f7 e8 d7 e2 96 50 9f 9b 43 ac ba 5c ab e3 30 4d 72 a8 68 e0 8c 11 91 1d e6 9a ca 3a a8 0f 65 4b 7c 4e ce 82 54 8a e4 9c 2a 92 42 ba a0 5f 56 a1 9b 83 0c 23 3f 00 7d 6c 91 ea f5 f7 f3 07 c0 be 38 a4 dc f1 f7 9b 49 7f fd b5 2e 32 36 46 84 ef 7c 67 ba fe b5 ef ed 19 1b 73 ba c8 e7 a8 58 3f 2d 92 77 a8 e4 ed fc 3b a4 fa c9 ab c8 d5 a3 57 d5 ff 7a d7 2b 7f 48 d6 5f 35 36 ff 4a eb a8 Data Ascii: K7P(L7Jz}Tig&SQ+$~.)C?^m9:m=8[@w@%0ZfkPC\0Mrh:eK\|NT*B_V#?}l8I.26F\|gsX?-w;Wz+H_56J
2023-11-06 16:08:29 UTC	2739	IN	Data Raw: 93 5c 52 1a ba d4 a5 53 c3 ec d4 f9 29 41 fd b7 9d 12 bc 7f b3 a9 e0 cd 7f 8b 69 60 08 ea ee 27 e7 fe 9a 4a a0 9b e6 41 23 ed ac 15 2d 86 5b b9 5a 4d 18 12 89 7a 33 d6 0e e5 e6 36 6d 18 e8 ef 0b 61 08 df 6a a5 40 95 50 56 25 14 07 02 5d 33 10 8a e7 eb 84 0d 03 06 58 d4 1c 0b 58 69 e4 33 5d dd 02 ad cb 82 d6 db b5 a0 4a b4 9f 92 78 7f 26 62 26 f2 1e 11 bb 44 10 8f aa 65 cb 1f 26 6e 40 0f f6 7a 31 a8 90 cf d2 8a e9 69 e2 40 44 95 cc 36 81 0e a8 5e 8d b6 cb 0f 05 66 87 83 76 f7 82 9b 46 04 2b 61 66 21 d3 17 a3 42 ac 3d be 7f bb 20 62 00 89 28 44 ed b0 24 48 8e a2 0f 25 36 41 8d 0a 34 24 47 23 a1 8d 53 25 99 d6 b6 6f 52 58 dc e9 f7 c8 8f c9 e3 f0 94 56 cd a0 04 fa 12 74 6d 9b 40 c7 76 b3 bc 42 7e 08 9f d5 af 80 eb 3a 41 3f fa 06 e8 47 94 93 9e 83 11 50 ea 22 Data Ascii: \RS)Ai`'JA#-[ZMz36maj@PV%]3XXi3]Jx&b&De&n@z1i@D6^fvF+af!B= b(D$H%6A4$G#S%oRXVtm@vB~:A?GP"
2023-11-06 16:08:29 UTC	2743	IN	Data Raw: 2e 60 17 b2 8b 56 78 18 0a 63 64 57 c6 d2 6e af f2 d0 ca 31 19 41 28 75 18 8b 39 36 56 0b 3e f2 4b dc e1 51 34 ed 13 88 51 6a b7 1b 73 62 99 cc 36 8f 85 b6 81 d5 92 27 fd 58 54 72 d8 e2 b1 ec 27 41 28 12 2b 74 a3 00 b1 e8 d9 66 61 6a d9 1f 58 9f c7 71 c0 d3 d4 6c d0 27 96 21 b7 52 25 41 5f 24 42 cb b0 c6 75 38 90 63 b1 ce b5 56 93 20 52 13 1a a5 b2 24 12 d1 c6 02 55 ae da 98 73 d3 11 6e b5 72 44 63 4e 4d 07 e7 1b 28 9b 9b 0b 5c a7 b0 b3 b4 6c f4 4b 82 5a ac 74 4e 88 54 98 8d e8 60 b5 2e ed 51 45 c2 eb c6 aa 5f ef 2a 35 0c 54 2a 12 cf 59 35 fa c4 82 27 cb 5d 65 5b 5d cd 93 28 18 29 72 bc a8 17 20 51 93 95 c2 32 42 8f 65 28 3a 3b 10 35 fb 21 39 32 89 b8 ae 84 5c 47 a6 4e 5f 1b f4 b2 38 f6 9c 55 23 6f 71 5a d6 0f 07 8e 8f d4 d4 48 65 2b 1c 88 70 38 8d 4f 25 Data Ascii: .`VxcdWn1A(u96V>KQ4Qjsb6'XTr'A(+tfajXql'!R%A_$Bu8cV R$UsnrDcNM(\lKZtNT`.QE_5TY5']e[]()r Q2Be(:;5!92\GN_8U#oqZHe+p8O%

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:29 UTC	2753	IN	HTTP/1.1 200 OK Date: Mon, 06 Nov 2023 16:08:29 GMT Server: nginx Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding x-okta-request-id: ZUkPfZw3gg_2H06eOuyMaQAADu0 x-xss-protection: 0 p3p: CP="HONK" content-security-policy: frame-ancestors 'self' x-rate-limit-limit: 60 x-rate-limit-remaining: 59 x-rate-limit-reset: 1699286969 cache-control: no-cache, no-store pragma: no-cache expires: 0 content-security-policy-report-only: frame-ancestors 'self' x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-ua-compatible: IE=edge content-language: en Strict-Transport-Security: max-age=315360000; includeSubDomains X-Robots-Tag: noindex,nofollow set-cookie: sid="";Version=1;Path=/;Max-Age=0 set-cookie: autolaunch_triggered=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ set-cookie: JSESSIONID=2EB5BF333512BB28113F460842234D8F; Path=/; Secure; HttpOnly set-cookie: t=default; Path=/ set-cookie: DT=DI14vq6sK2rQyC-sUCHax1oiw;Version=1;Path=/;Max-Age=63072000;Secure;Expires=Wed, 05 Nov 2025 16:08:29 GMT;HttpOnly;SameSite=None Connection: close Transfer-Encoding: chunked
2023-11-06 16:08:29 UTC	2754	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c Data Ascii: 2000<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, initial
2023-11-06 16:08:29 UTC	2761	IN	Data Raw: 20 74 68 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 74 68 65 61 64 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 74 72 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 74 74 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 75 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 75 6c 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 76 61 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 Data Ascii: th, #okta-sign-in thead, #okta-sign-in tr, #okta-sign-in tt, #okta-sign-in u, #okta-sign-in ul, #okta-sign-in var { margin: 0px; padding: 0; border: 0; outline: 0; font-size: 100%; f
2023-11-06 16:08:29 UTC	2762	IN	Data Raw: 0d 0a Data Ascii:
2023-11-06 16:08:29 UTC	2764	IN	Data Raw: 31 62 31 33 0d 0a 2e 73 65 70 61 72 61 74 69 6f 6e 2d 6c 69 6e 65 20 73 70 61 6e 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 67 6e 2d 69 6e 2d 77 69 74 68 2d 69 64 70 20 2e 73 65 70 61 72 61 74 69 6f 6e 2d 6c 69 6e 65 20 73 70 61 6e 2c 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 67 6e 2d 69 6e 2d 77 69 74 68 2d 77 65 62 61 75 74 68 6e 2d 6f 70 74 69 6f 6e 20 2e 73 65 70 61 72 61 74 69 6f 6e 2d 6c 69 6e 65 20 73 70 61 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c Data Ascii: 1b13.separation-line span, #okta-sign-in .sign-in-with-idp .separation-line span, #okta-sign-in .sign-in-with-webauthn-option .separation-line span { color: #000000; } #okta-sign-in .o-form .custom-checkbox label
2023-11-06 16:08:29 UTC	2772	IN	Data Raw: 73 5c 78 33 41 5c 78 32 46 5c 78 32 46 6f 6b 31 30 73 74 61 74 69 63 2e 6f 6b 74 61 63 64 6e 2e 63 6f 6d 5c 78 32 46 66 73 5c 78 32 46 62 63 6f 5c 78 32 46 31 5c 78 32 46 66 73 30 34 6b 70 63 6d 76 7a 34 50 79 58 73 67 68 34 68 37 22 2c 22 73 74 61 74 65 54 6f 6b 65 6e 22 3a 22 30 32 2e 69 64 2e 6e 69 54 6a 56 65 32 53 72 64 71 54 31 38 52 63 45 75 78 67 6e 78 36 52 49 66 6c 51 76 56 32 49 6c 4b 59 44 5c 78 32 44 57 54 53 22 2c 22 68 65 6c 70 4c 69 6e 6b 73 22 3a 7b 22 68 65 6c 70 22 3a 22 22 2c 22 66 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 22 3a 22 22 2c 22 75 6e 6c 6f 63 6b 22 3a 22 22 2c 22 63 75 73 74 6f 6d 22 3a 5b 5d 7d 2c 22 70 69 76 22 3a 7b 7d 7d 2c 22 61 63 63 6f 75 6e 74 43 68 6f 6f 73 65 72 44 69 73 63 6f 76 65 72 79 55 72 6c 22 3a 22 68 74 74 Data Ascii: s\x3A\x2F\x2Fok10static.oktacdn.com\x2Ffs\x2Fbco\x2F1\x2Ffs04kpcmvz4PyXsgh4h7","stateToken":"02.id.niTjVe2SrdqT18RcEuxgnx6RIflQvV2IlKYD\x2DWTS","helpLinks":{"help":"","forgotPassword":"","unlock":"","custom":[]},"piv":{}},"accountChooserDiscoveryUrl":"htt
2023-11-06 16:08:29 UTC	2779	IN	Data Raw: 0d 0a Data Ascii:
2023-11-06 16:08:29 UTC	2779	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:30 UTC	2783	IN	HTTP/1.1 200 OK Server: snow_adc Date: Mon, 06 Nov 2023 16:08:30 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: BIGipServerpool_faaframes=eabf911344e44bdda9f09135aa7ab783; httponly; secure; path=/; SameSite=None Server-Timing: sem_wait;dur=1, sesh_wait;dur=0 Set-Cookie: glide_user=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; secure; SameSite=None Set-Cookie: glide_user_session=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; secure; SameSite=None X-Is-Logged-In: false X-Transaction-ID: 0631a6da879a X-Content-Type-Options: nosniff Pragma: no-store,no-cache Cache-Control: no-cache,no-store,must-revalidate,max-age=-1 Expires: 0 Strict-Transport-Security: max-age=63072000; includeSubDomains
2023-11-06 16:08:30 UTC	2784	IN	Data Raw: 31 64 62 36 0d 0a 7b 22 72 65 73 75 6c 74 22 3a 7b 22 74 69 6d 65 41 67 6f 44 61 74 65 73 22 3a 5b 5b 22 54 6f 64 61 79 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 54 6f 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 54 6f 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 54 6f 64 61 79 28 29 22 5d 2c 5b 22 59 65 73 74 65 72 64 61 79 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 59 65 73 74 65 72 64 61 79 28 29 22 5d 2c Data Ascii: 1db6{"result":{"timeAgoDates":[["Today","javascript:gs.beginningOfToday()","javascript:gs.endOfToday()","javascript:gs.endOfToday()"],["Yesterday","javascript:gs.beginningOfYesterday()","javascript:gs.endOfYesterday()","javascript:gs.endOfYesterday()"],
2023-11-06 16:08:30 UTC	2787	IN	Data Raw: 22 5d 2c 5b 22 4c 61 73 74 20 31 32 30 20 64 61 79 73 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 4c 61 73 74 31 32 30 44 61 79 73 28 29 22 5d 2c 5b 22 43 75 72 72 65 6e 74 20 68 6f 75 72 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 62 65 67 69 6e 6e 69 6e 67 4f 66 43 75 72 72 65 6e 74 48 6f 75 72 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 43 75 72 72 65 6e 74 48 6f 75 72 28 29 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 65 6e 64 4f 66 43 75 72 72 65 Data Ascii: "],["Last 120 days","javascript:gs.beginningOfLast120Days()","javascript:gs.endOfLast120Days()","javascript:gs.beginningOfLast120Days()"],["Current hour","javascript:gs.beginningOfCurrentHour()","javascript:gs.endOfCurrentHour()","javascript:gs.endOfCurre
2023-11-06 16:08:30 UTC	2859	IN	Data Raw: 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 30 27 29 22 5d 2c 5b 22 57 65 65 6b 31 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 27 29 22 5d 2c 5b 22 57 65 65 6b 32 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 27 29 22 5d 2c 5b 22 57 65 65 6b 33 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 33 27 29 22 5d 2c 5b 22 57 65 65 6b 34 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 34 27 29 22 5d 2c 5b 22 57 65 65 6b 35 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 0d 0a 31 30 66 30 0d 0a 61 72 74 28 27 77 65 Data Ascii: datePart('week','0')"],["Week1","javascript:gs.datePart('week','1')"],["Week2","javascript:gs.datePart('week','2')"],["Week3","javascript:gs.datePart('week','3')"],["Week4","javascript:gs.datePart('week','4')"],["Week5","javascript:gs.dateP10f0art('we
2023-11-06 16:08:30 UTC	2863	IN	Data Raw: 75 61 72 74 65 72 73 22 2c 22 71 75 61 72 74 65 72 22 5d 2c 5b 22 59 65 61 72 73 22 2c 22 79 65 61 72 22 5d 5d 2c 22 74 72 65 6e 64 56 61 6c 75 65 73 57 69 74 68 46 69 65 6c 64 73 22 3a 5b 5b 22 48 6f 75 72 22 2c 22 68 6f 75 72 22 5d 2c 5b 22 44 61 79 22 2c 22 64 61 79 22 5d 2c 5b 22 57 65 65 6b 22 2c 22 77 65 65 6b 22 5d 2c 5b 22 4d 6f 6e 74 68 22 2c 22 6d 6f 6e 74 68 22 5d 2c 5b 22 71 75 61 72 74 65 72 22 2c 22 71 75 61 72 74 65 72 22 5d 2c 5b 22 59 65 61 72 22 2c 22 79 65 61 72 22 5d 5d 2c 22 77 68 65 6e 57 69 74 68 46 69 65 6c 64 73 22 3a 5b 5b 22 62 65 66 6f 72 65 22 2c 22 62 65 66 6f 72 65 22 5d 2c 5b 22 61 66 74 65 72 22 2c 22 61 66 74 65 72 22 5d 2c 5b 22 62 65 66 6f 72 65 20 6f 72 20 61 66 74 65 72 22 2c 22 62 65 66 6f 72 65 20 6f 72 20 61 66 74 Data Ascii: uarters","quarter"],["Years","year"]],"trendValuesWithFields":[["Hour","hour"],["Day","day"],["Week","week"],["Month","month"],["quarter","quarter"],["Year","year"]],"whenWithFields":[["before","before"],["after","after"],["before or after","before or aft
2023-11-06 16:08:30 UTC	2867	IN	Data Raw: 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 38 27 29 22 5d 2c 5b 22 57 65 65 6b 31 39 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 31 39 27 29 22 5d 2c 5b 22 57 65 65 6b 32 30 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 30 27 29 22 5d 2c 5b 22 57 65 65 6b 32 31 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 31 27 29 22 5d 2c 5b 22 57 65 65 6b 32 32 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 67 73 2e 64 61 74 65 50 61 72 74 28 27 77 65 65 6b 27 2c 27 32 32 27 29 22 5d 2c 5b 22 57 65 65 6b 32 33 22 2c 22 6a 61 76 61 73 63 72 69 70 Data Ascii: "javascript:gs.datePart('week','18')"],["Week19","javascript:gs.datePart('week','19')"],["Week20","javascript:gs.datePart('week','20')"],["Week21","javascript:gs.datePart('week','21')"],["Week22","javascript:gs.datePart('week','22')"],["Week23","javascrip

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:30 UTC	2823	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1866 Connection: close Date: Mon, 06 Nov 2023 14:02:23 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 22 Mar 2022 20:55:33 GMT ETag: "241e0fb439244dc50c5929c0513a6765" Expires: Tue, 05 Nov 2024 14:02:23 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 99e59f379d63394e88e658d91cfc7d4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: GipLQjOjmJB_l95b34Jcha52D0dOoGXJIdpUhCk8lXU3DOlajuKJRQ== Age: 7567
2023-11-06 16:08:30 UTC	2824	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 3b 6d 61 72 67 69 6e 3a 30 7d 2e 61 70 70 6c 6f 67 69 6e 62 61 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 70 70 6c 6f 67 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 70 72 6f 78 69 6d 61 20 6e 6f 76 61 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 2e 36 70 78 7d 2e 61 70 70 6c 6f 67 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 68 31 2c 2e 61 70 70 6c 6f 67 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 Data Ascii: body{background:#f9f9f9;margin:0}.apploginbanner-container{position:absolute;top:0;width:100%}.applogin-container{color:#777;font-family:proxima nova,Arial,Helvetica,sans-serif;line-height:19.6px}.applogin-container h1,.applogin-container p{font-size:14px

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:30 UTC	2826	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 221839 Connection: close Date: Mon, 06 Nov 2023 05:09:09 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 24 Oct 2023 17:31:02 GMT ETag: "14a902da0701755f1c3dc816ee428221" x-amz-meta-sha1sum: 4cfa8d8c88cf536e49e478565a2da853267beb22 Expires: Tue, 05 Nov 2024 05:09:09 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06a6a5c4cebb71ab27b2d7f062023104.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: 3nxsEbYf4uqH-dJX4_Bd_efW7IJmVLzdzm7A4iMWNMAN7IOFipFkZg== Age: 39561
2023-11-06 16:08:30 UTC	2827	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2023-11-06 16:08:30 UTC	2843	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2023-11-06 16:08:30 UTC	2903	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2023-11-06 16:08:30 UTC	2935	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2023-11-06 16:08:30 UTC	2951	IN	Data Raw: 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f Data Ascii: ntainer.chzn-container-single-nosearch.closed .chzn-drop .chzn-search,#okta-sign-in .chzn-container.chzn-container-single.closed .chzn-drop .chzn-search{left:0;position:relative}#okta-sign-in .chzn-container.chzn-container-single-nosearch.closed .chzn-dro
2023-11-06 16:08:30 UTC	2967	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 32 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 33 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d Data Ascii: {background-position:-16px -213px}#okta-sign-in .custom-checkbox label.checked.focus,#okta-sign-in .custom-checkbox label.checked.hover{background-position:-16px -313px}#okta-sign-in .o-form-label-top .o-form-input,#okta-sign-in .o-form-label-top .o-form-
2023-11-06 16:08:30 UTC	3031	IN	Data Raw: 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 31 34 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 37 33 36 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 33 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 7d 40 6d 65 64 69 Data Ascii: .textarea-fix input{font-size:15px}}@media only screen and (min-device-width:414px) and (max-device-width:736px) and (-webkit-min-device-pixel-ratio:3){#okta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{font-size:15px}}@medi
2023-11-06 16:08:30 UTC	3063	IN	Data Raw: 67 2f 69 63 6f 6e 73 2f 6c 6f 67 69 6e 2f 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 32 70 78 2f 32 34 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 66 66 66 20 35 30 70 78 2c 23 66 66 66 20 30 29 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 66 61 63 65 62 6f 6f 6b 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 31 64 31 64 32 31 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 67 6f 6f 67 6c 65 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 Data Ascii: g/icons/login/facebook_logo.png) no-repeat 12px/24px,linear-gradient(90deg,#fff 50px,#fff 0)}#okta-sign-in .social-auth-facebook-button.link-button{color:#1d1d21}#okta-sign-in .social-auth-google-button{background-color:#fbfbfb;background:url(../img/icons
2023-11-06 16:08:30 UTC	3092	IN	Data Raw: 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 6d 69 6e 2d 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 69 64 74 68 3a 31 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 73 63 6f 70 65 2d 6c 69 73 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 74 69 74 6c 65 2d 74 65 Data Ascii: dding-bottom:15px;width:100%}#okta-sign-in .admin-consent-required .o-form-button-bar input{height:auto;line-height:normal;min-height:50px;white-space:normal;width:140px}#okta-sign-in .consent-required .scope-list,#okta-sign-in .consent-required .title-te
2023-11-06 16:08:30 UTC	3124	IN	Data Raw: 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 63 61 6e 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 2e 71 72 63 6f 64 65 2d 65 72 72 6f 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 63 61 6e 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 2e 71 72 63 6f 64 65 2d 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 30 29 22 3b 66 69 6c 74 Data Ascii: no-repeat 50%}#okta-sign-in .scan-instructions .qrcode-error,#okta-sign-in .scan-instructions .qrcode-success{background-color:transparent;background-color:hsla(0,0%,100%,.6);content:"";-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opacity=0)";filt
2023-11-06 16:08:30 UTC	3156	IN	Data Raw: 66 6f 72 6d 2d 73 75 62 74 69 74 6c 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 77 2d 6d 61 69 6e 2d 76 69 65 77 20 2e 73 69 77 2d 6d 61 69 6e 2d 62 6f 64 79 20 73 70 61 6e 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2d 76 65 72 69 66 79 2d 6e 69 63 6b 6e 61 6d 65 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2d 65 6e 72 6f 6c 6c 2d 6c 69 73 74 20 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2d 65 6e 72 6f 6c 6c 2d 6c 69 73 74 20 2e 6c Data Ascii: form-subtitle{text-align:center}#okta-sign-in .siw-main-view .siw-main-body span.authenticator-verify-nickname{word-break:break-word}#okta-sign-in .authenticator-enroll-list .authenticator-description{width:100%}#okta-sign-in .authenticator-enroll-list .l
2023-11-06 16:08:30 UTC	3188	IN	Data Raw: 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 31 30 30 25 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 25 2c 23 65 65 65 29 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 35 25 2c 23 66 66 66 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b Data Ascii: bkit-gradient(linear,0 0,0 100%,color-stop(1%,#eee),color-stop(15%,#fff));background-image:-webkit-linear-gradient(top,#eee 1%,#fff 15%);background-image:-moz-linear-gradient(top,#eee 1%,#fff 15%);background-image:-o-linear-gradient(top,#eee 1%,#fff 15%);
2023-11-06 16:08:30 UTC	3220	IN	Data Raw: 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 31 30 31 33 70 78 7d 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 31 30 32 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 32 64 70 70 78 29 7b 2e 63 75 73 74 6f 6d Data Ascii: cus{background-position:-16px -1013px}.custom-checkbox label.focus:before{background-position:-16px -1020px}@media only screen and (-webkit-min-device-pixel-ratio:2),only screen and (min-device-pixel-ratio:2),only screen and (min-resolution:2dppx){.custom
2023-11-06 16:08:31 UTC	3252	IN	Data Raw: 77 73 2d 68 65 6c 6c 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 2f 6d 66 61 2f 77 69 6e 64 6f 77 73 48 65 6c 6c 6f 40 32 78 2e 70 6e 67 29 7d 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 2e 61 75 74 68 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 6e 72 6f 6c 6c 2d 66 61 63 74 6f 72 2d 72 6f 77 20 2e 6d 66 61 2d 75 32 66 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 2e 61 75 74 68 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 66 61 2d 75 32 66 2d 33 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 2f 6d 66 61 2f 75 32 66 5f 33 38 78 33 38 2e 70 6e 67 29 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 Data Ascii: ws-hello{background-image:url(../img/icons/mfa/windowsHello@2x.png)}}#okta-sign-in.auth-container .enroll-factor-row .mfa-u2f,#okta-sign-in.auth-container .mfa-u2f-30{background-image:url(../img/icons/mfa/u2f_38x38.png)}@media (-webkit-min-device-pixel-ra

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:31 UTC	3471	IN	HTTP/1.1 200 Date: Mon, 06 Nov 2023 16:08:30 GMT Content-Type: text/css Content-Length: 217229 Connection: close Set-Cookie: AWSALB=MNiDXrxjfze0s5YtRmHg7L6wxsbiqydTpR6dsJmQDbWyW/W1C2K6q2wwbcjP2ErBZw4PHUa9cItKRTnL5MBUkCNXP9tRCk+hHSnxYi0oXv8hAv682M7B4qlXNWCU; Expires=Mon, 13 Nov 2023 16:08:30 GMT; Path=/ Set-Cookie: AWSALBCORS=MNiDXrxjfze0s5YtRmHg7L6wxsbiqydTpR6dsJmQDbWyW/W1C2K6q2wwbcjP2ErBZw4PHUa9cItKRTnL5MBUkCNXP9tRCk+hHSnxYi0oXv8hAv682M7B4qlXNWCU; Expires=Mon, 13 Nov 2023 16:08:30 GMT; Path=/; SameSite=None; Secure Server: Apache Set-Cookie: session=expiry=1699287510768381;Max-Age=600;path=/; HttpOnly; Secure; Vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers Last-Modified: Wed, 01 Nov 2023 03:44:48 GMT Accept-Ranges: bytes X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Set-Cookie: session=expiry=1699287510768381;Max-Age=600;path=/; HttpOnly; Secure;
2023-11-06 16:08:31 UTC	3472	IN	Data Raw: 2f 2a 20 50 6c 65 61 73 65 20 69 6e 63 6c 75 64 65 20 61 6e 79 20 6e 65 77 20 43 53 53 20 66 69 6c 65 20 63 72 65 61 74 65 64 20 75 6e 64 65 72 20 73 74 79 6c 65 73 68 65 65 74 73 20 66 6f 6c 64 65 72 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 20 2a 2f 0a 0a 2f 2a 20 43 53 53 20 56 61 72 69 61 62 6c 65 73 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 20 2d 0a 09 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 20 2d 0a 09 2d 6c 69 67 68 74 2d 62 6c 75 65 3a 20 23 30 30 37 36 63 30 3b 20 2d 0a 09 2d 64 61 72 6b 2d 62 6c 75 65 3a 20 23 30 30 32 36 36 34 3b 20 2d 0a 09 2d 6c 69 67 68 74 65 72 2d 67 72 65 79 3a 20 23 65 39 65 61 65 64 3b 20 2d 0a 09 2d 73 6c 61 74 65 3a 20 23 33 33 33 33 33 33 3b 20 2d 0a 09 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 20 2d 0a 09 2d 63 68 61 72 Data Ascii: /* Please include any new CSS file created under stylesheets folder in this file. // CSS Variables */:root { --white: #ffffff; --light-blue: #0076c0; --dark-blue: #002664; --lighter-grey: #e9eaed; --slate: #333333; --black: #000; --char
2023-11-06 16:08:31 UTC	3487	IN	Data Raw: 6e 3a 20 30 20 30 20 32 34 70 78 20 30 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 61 63 63 6f 72 64 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 72 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 39 65 61 65 64 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 6c 69 67 68 74 65 72 2d 67 72 65 79 29 3b 0a 09 6d 61 72 67 69 6e 3a 20 31 32 Data Ascii: n: 0 0 24px 0}.devkit-accordion-wrapper .devkit-accordion-head {display: flex;flex-direction: row;align-items: center;font-size: 1.125rem;font-weight: 600;cursor: pointer;background: #e9eaed;background: var(- -lighter-grey);margin: 12
2023-11-06 16:08:31 UTC	3503	IN	Data Raw: 72 63 6c 65 0a 09 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 09 77 69 64 74 68 3a 20 33 36 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 62 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 69 72 63 6c 65 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 6e 73 2d 63 69 72 63 6c 65 0a 09 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 64 30 64 30 64 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 65 79 29 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 62 2d 77 Data Ascii: rcle{border-radius: 50%;width: 36px;height: 36px;}.devkit-progressbar-wrapper .devkit-cb-wrapper .devkit-circle-wrapper .devkit-ns-circle{background: #d0d0d0;background: var(- -background-grey);}.devkit-progressbar-wrapper .devkit-cb-w
2023-11-06 16:08:31 UTC	4464	IN	Data Raw: 69 74 2d 63 62 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 69 72 63 6c 65 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 69 6e 70 72 6f 67 72 65 73 73 2d 62 61 72 2c 0a 09 2e 64 65 76 6b 69 74 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 62 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 69 72 63 6c 65 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 65 72 72 6f 72 2d 62 61 72 0a 09 7b 0a 09 77 69 64 74 68 3a 20 36 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 33 39 70 78 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 62 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 69 72 63 6c 65 2d 77 72 61 70 70 65 72 20 Data Ascii: it-cb-wrapper .devkit-circle-wrapper .devkit-inprogress-bar,.devkit-progressbar-wrapper .devkit-cb-wrapper .devkit-circle-wrapper .devkit-error-bar{width: 6px;height: 139px;}.devkit-progressbar-wrapper .devkit-cb-wrapper .devkit-circle-wrapper
2023-11-06 16:08:31 UTC	4480	IN	Data Raw: 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 66 77 2d 64 6f 74 2d 6d 69 63 72 6f 62 61 72 20 2e 64 6f 74 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 69 6d 67 0a 09 7b 0a 09 77 69 64 74 68 3a 20 31 38 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 77 68 69 74 65 29 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 64 6f 74 2d 6d 69 63 72 6f 62 61 72 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 64 6f 74 2d 6d 69 63 72 6f 62 61 72 20 2e 64 6f 74 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 Data Ascii: ar-wrapper .devkit-fw-dot-microbar .dot-logo-wrapper img{width: 18px;height: 18px;vertical-align: middle;background: #ffffff;background: var(- -white);border-radius: 50%;}.devkit-dot-microbar-wrapper .devkit-dot-microbar .dot-logo-wrapper
2023-11-06 16:08:31 UTC	4496	IN	Data Raw: 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 20 2d 73 6c 61 74 65 29 3b 0a 09 70 61 64 64 69 6e 67 3a 20 36 70 78 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 74 6f 6f 6c 62 61 72 2d 77 72 61 70 70 65 72 20 23 64 65 76 6b 69 74 2d 68 65 6c 70 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 68 65 6c 70 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 68 65 6c 70 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 2c 0a 09 2e 64 65 76 6b 69 74 2d 74 6f 6f 6c 62 61 72 2d 77 72 61 70 70 65 72 20 23 64 65 76 6b 69 74 2d 68 65 6c 70 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 65 78 74 2d 68 65 6c 70 2d 63 6f 6e 74 65 6e 74 Data Ascii: ;color: #333333;color: var(- -slate);padding: 6px;}.devkit-toolbar-wrapper #devkit-help-icon-wrapper .devkit-help-content-wrapper .devkit-help-item-wrapper:first-of-type,.devkit-toolbar-wrapper #devkit-help-icon-wrapper .devkit-ext-help-content
2023-11-06 16:08:31 UTC	4810	IN	Data Raw: 2d 77 72 61 70 70 65 72 20 75 6c 2e 74 6f 70 2d 6c 69 6e 6b 73 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 6c 69 6e 6b 73 2d 77 72 61 70 70 65 72 20 75 6c 2e 74 6f 70 2d 6c 69 6e 6b 73 20 6c 69 2e 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 32 70 78 20 36 70 78 3b 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 35 33 35 33 35 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 63 68 61 72 63 6f 61 6c 29 3b 0a 09 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 09 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 20 2d 77 68 69 74 65 29 Data Ascii: -wrapper ul.top-links {display: block;padding-left: 0}.header-links-wrapper ul.top-links li.dropdown-link {padding: 2px 6px;border-radius: 4px;background: #353535;background: var(- -charcoal);color: #ffffff;color: var(- -white)
2023-11-06 16:08:31 UTC	4832	IN	Data Raw: 6f 6c 6f 72 3a 20 76 61 72 28 2d 20 2d 77 68 69 74 65 29 3b 0a 09 09 2f 2a 2a 20 54 68 65 73 65 20 61 72 65 20 6e 65 65 64 65 64 20 74 6f 20 61 76 6f 69 64 20 6c 69 20 69 74 65 6d 73 20 73 68 69 66 74 69 6e 67 20 74 6f 20 74 68 65 20 72 69 67 68 74 20 77 68 65 6e 20 68 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e 6b 2e 20 2a 2a 2f 0a 09 09 70 61 64 64 69 6e 67 3a 20 36 70 78 3b 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 65 78 74 65 72 6e 61 6c 2d 68 65 61 64 2d 61 63 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 0a 09 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 7d 0a 09 2e 65 78 74 2d 68 65 61 64 2d 6e 61 76 2d 77 72 61 70 70 65 72 Data Ascii: olor: var(- -white);/ These are needed to avoid li items shifting to the right when hovering the link. /padding: 6px;border-radius: 4px;background: var(- -external-head-active-background);text-decoration: none;}.ext-head-nav-wrapper
2023-11-06 16:08:31 UTC	4848	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 2e 35 72 65 6d 0a 09 7d 0a 09 2e 64 65 76 6b 69 74 2d 65 78 74 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 75 6c 2e 64 65 76 6b 69 74 2d 6e 61 76 2d 6c 69 6e 6b 73 20 6c 69 2e 64 65 76 6b 69 74 2d 6e 61 76 2d 6c 69 6e 6b 20 75 6c 2e 73 75 62 6d 65 6e 75 2d 6e 61 76 20 6c 69 2e 64 65 76 6b 69 74 2d 69 6e 6e 65 72 2d 6e 61 76 2d 6c 69 6e 6b 20 61 2e 64 65 76 6b 69 74 2d 73 75 62 6d 65 6e 75 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 09 09 2e 64 65 76 6b 69 74 2d 65 78 74 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 75 6c 2e 64 65 76 6b 69 74 2d 6e 61 76 2d 6c 69 Data Ascii: der-radius: 5px;font-size: 1rem;font-weight: 400;line-height: 2.5rem}.devkit-ext-nav-wrapper ul.devkit-nav-links li.devkit-nav-link ul.submenu-nav li.devkit-inner-nav-link a.devkit-submenu-link:link,.devkit-ext-nav-wrapper ul.devkit-nav-li
2023-11-06 16:08:31 UTC	4864	IN	Data Raw: 73 20 75 6c 2e 64 65 76 6b 69 74 2d 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 0a 09 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 66 6f 6f 74 65 72 2d 67 72 6f 75 70 73 20 75 6c 2e 64 65 76 6b 69 74 2d 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 20 6c 69 2c 0a 09 2e 64 65 76 6b 69 74 2d 69 6e 66 6f 2d 67 72 6f 75 70 2d 6c 69 6e 6b 73 20 75 6c 2e 64 65 76 6b 69 74 2d 66 6f 6f 74 65 72 2d 6c 69 6e 6b 73 20 6c 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: s ul.devkit-footer-links{display: block;padding-left: 6px;margin: 0}.devkit-footer-groups ul.devkit-footer-links li,.devkit-info-group-links ul.devkit-footer-links li {display: inline;font-weight: 300;list-style-type: none;line-height
2023-11-06 16:08:31 UTC	4880	IN	Data Raw: 67 6c 65 2d 73 65 6c 65 63 74 2d 6c 69 73 74 2d 77 72 61 70 70 65 72 20 66 69 65 6c 64 73 65 74 20 2e 64 65 76 6b 69 74 2d 66 6f 72 6d 2d 72 6f 77 20 6f 70 74 67 72 6f 75 70 2e 64 65 76 6b 69 74 2d 6f 70 74 67 72 6f 75 70 0a 09 7b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 20 2d 73 6c 61 74 65 29 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0a 7d 0a 0a 2e 64 65 76 6b 69 74 2d 73 69 6e 67 6c 65 2d 73 65 6c 65 63 74 2d 6c 69 73 74 2d 77 72 61 70 70 65 72 20 66 69 65 6c 64 73 65 74 20 2e 64 65 76 6b 69 74 2d 66 6f 72 6d 2d 72 6f 77 20 6f 70 74 69 6f 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 36 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 Data Ascii: gle-select-list-wrapper fieldset .devkit-form-row optgroup.devkit-optgroup{color: #333333;color: var(- -slate);margin-top: 6px;font-size: 1rem;}.devkit-single-select-list-wrapper fieldset .devkit-form-row option {padding: 6px;font-size: 1
2023-11-06 16:08:31 UTC	4896	IN	Data Raw: 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 38 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 20 30 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 70 78 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 36 70 78 20 36 70 78 20 36 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 36 65 36 65 36 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 20 2d 74 61 62 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 35 36 39 30 3b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 20 2d 6c 69 6e 6b 2d 61 63 74 69 76 65 29 3b 0a 09 66 6f 6e 74 2d 73 Data Ascii: splay: block;width: 80px;border-right-width: 0;list-style: none;margin: 0 0 1px 0;padding: 10px 6px 6px 6px;background: #e6e6e6;background: var(- -tab-background);text-decoration: none;color: #005690;color: var(- -link-active);font-s
2023-11-06 16:08:31 UTC	4912	IN	Data Raw: 70 61 6e 20 37 3b 0a 09 09 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 20 32 3b 0a 09 09 67 72 69 64 2d 72 6f 77 3a 20 32 3b 0a 09 7d 0a 09 2e 64 65 76 6b 69 74 2d 6c 65 66 74 2d 6e 61 76 2d 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 7b 0a 09 09 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 39 3b 0a 09 09 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 6e 3a 20 31 34 3b 0a 09 09 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 39 2f 73 70 61 6e 20 31 34 3b 0a 09 09 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 20 32 3b 0a 09 09 67 72 69 64 2d 72 6f 77 3a 20 32 3b 0a 09 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 20 7b Data Ascii: pan 7;-ms-grid-row: 2;grid-row: 2;}.devkit-left-nav-main-wrapper .devkit-content-wrapper {-ms-grid-column: 9;-ms-grid-column-span: 14;grid-column: 9/span 14;-ms-grid-row: 2;grid-row: 2;}}@media screen and (min-width: 960px) {
2023-11-06 16:08:32 UTC	4929	IN	Data Raw: 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 6e 3a 20 31 31 3b 0a 09 09 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 33 2f 73 70 61 6e 20 31 31 3b 0a 09 09 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 20 33 3b 0a 09 09 67 72 69 64 2d 72 6f 77 3a 20 33 3b 0a 09 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 20 7b 0a 09 2e 64 65 76 6b 69 74 2d 66 6f 72 6d 73 2d 77 72 61 70 70 65 72 20 7b 0a 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 0a 09 7d 0a 09 2e 64 65 76 6b 69 74 2d 66 6f 72 6d 73 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 66 6f 72 6d 73 2d 74 61 62 2d 77 72 61 70 70 65 72 20 2e 64 65 76 6b 69 74 2d 76 65 72 74 69 63 61 6c 2d 74 61 62 2d 61 72 65 61 0a 09 09 7b 0a 09 09 64 Data Ascii: s-grid-column-span: 11;grid-column: 3/span 11;-ms-grid-row: 3;grid-row: 3;}}@media screen and (min-width: 960px) {.devkit-forms-wrapper {border-top: 0}.devkit-forms-wrapper .devkit-forms-tab-wrapper .devkit-vertical-tab-area{d
2023-11-06 16:08:32 UTC	4945	IN	Data Raw: 09 2f 2a 77 69 64 74 68 3a 20 31 30 30 30 70 78 3b 20 2a 2f 0a 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 30 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 09 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 66 6f 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 6d 73 2d 77 72 61 70 70 65 72 20 2e 6d 65 73 73 61 67 65 73 2d 77 72 61 70 70 65 72 20 7b 0a 09 6a 75 73 74 69 Data Ascii: /width: 1000px; /justify-content: center;border: 1px solid #ccc;padding: 12px 0;padding-left: 12px;padding-right: 12px;webkit-box-orient: vertical;webkit-box-direction: normal;}.forms-container .forms-wrapper .messages-wrapper {justi

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:31 UTC	4826	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5949 Connection: close Date: Mon, 06 Nov 2023 01:40:28 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Wed, 21 Jun 2023 21:01:25 GMT ETag: "faa6804dcf595a2e19d4d6c0e5918091" Expires: Tue, 05 Nov 2024 01:40:28 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 4df8cb483525e66d7562e7cbfa63945c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: 7r8WIr2PvPYPei3hGre3Zh9sc-9eb5CHcXHFciQmaIoP30s9oe_tuA== Age: 52083
2023-11-06 16:08:31 UTC	4827	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 76 00 00 00 78 08 06 00 00 00 27 ad 06 61 00 00 17 04 49 44 41 54 78 da ed 5d 09 78 53 55 be bf 59 db 74 df f7 52 a0 55 96 22 2e 55 d4 6e d9 d7 26 69 9a ee 65 2d db 20 ca 52 15 44 a1 c9 cd be 37 69 5a ba 43 11 a1 32 79 7e b8 0b 7c c3 67 e7 73 1f 9f 33 e3 e8 93 79 02 3e 9d c7 8c c0 30 83 1b 8a 3e a1 e7 dd 9b 14 6c 6d 29 cd d6 dc 5b fa ff be 43 be 36 24 3d e7 fe ce 39 ff fd ff 87 20 9c 92 cb e5 22 e5 6f 74 45 dd 5e 6f 4d 8a e0 db d3 b9 9b fb 6f cb a9 ef ac cc aa 6a 55 ce a9 b4 ef 4f 91 9a 8f c4 8a 0c 1f c4 0b 75 5f 90 99 f0 df e3 45 fa cb e1 6c f5 85 48 9e fa 4c 8a d8 f8 59 92 c4 74 3c 4e 68 de 93 5c d1 b2 83 b9 65 9f 74 4e 43 5f 4e 24 5b 97 3a b7 ba 3b 16 ee 1f 0c 87 66 68 ea a8 c5 f5 4e e6 bd ab ba Data Ascii: PNGIHDRvx'aIDATx]xSUYtRU".Un&ie- RD7iZC2y~\|gs3y>0>lm)[C6$=9 "otE^oMojUOu_ElHLYt<Nh\etNC_N$[:;fhN

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:32 UTC	4950	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5949 Connection: close Date: Mon, 06 Nov 2023 01:40:28 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Wed, 21 Jun 2023 21:01:25 GMT ETag: "faa6804dcf595a2e19d4d6c0e5918091" Expires: Tue, 05 Nov 2024 01:40:28 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 69c3a6c1e32b8c96e5765cc20e12c398.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: drxjvaKksytxGuuZb4ZH6P-m7y6H9Cx355VvSAF7xxjFyZevXw4AXQ== Age: 52084
2023-11-06 16:08:32 UTC	4951	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 76 00 00 00 78 08 06 00 00 00 27 ad 06 61 00 00 17 04 49 44 41 54 78 da ed 5d 09 78 53 55 be bf 59 db 74 df f7 52 a0 55 96 22 2e 55 d4 6e d9 d7 26 69 9a ee 65 2d db 20 ca 52 15 44 a1 c9 cd be 37 69 5a ba 43 11 a1 32 79 7e b8 0b 7c c3 67 e7 73 1f 9f 33 e3 e8 93 79 02 3e 9d c7 8c c0 30 83 1b 8a 3e a1 e7 dd 9b 14 6c 6d 29 cd d6 dc 5b fa ff be 43 be 36 24 3d e7 fe ce 39 ff fd ff 87 20 9c 92 cb e5 22 e5 6f 74 45 dd 5e 6f 4d 8a e0 db d3 b9 9b fb 6f cb a9 ef ac cc aa 6a 55 ce a9 b4 ef 4f 91 9a 8f c4 8a 0c 1f c4 0b 75 5f 90 99 f0 df e3 45 fa cb e1 6c f5 85 48 9e fa 4c 8a d8 f8 59 92 c4 74 3c 4e 68 de 93 5c d1 b2 83 b9 65 9f 74 4e 43 5f 4e 24 5b 97 3a b7 ba 3b 16 ee 1f 0c 87 66 68 ea a8 c5 f5 4e e6 bd ab ba Data Ascii: PNGIHDRvx'aIDATx]xSUYtRU".Un&ie- RD7iZC2y~\|gs3y>0>lm)[C6$=9 "otE^oMojUOu_ElHLYt<Nh\etNC_N$[:;fhN

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:32 UTC	4958	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 209350 Connection: close Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 11 Jul 2023 19:52:10 GMT x-amz-meta-sha1sum: 34f075e4d0f6b20eb712a2053d423869bb60771b Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 26 Oct 2023 11:46:17 GMT Expires: Fri, 25 Oct 2024 11:46:17 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 ETag: "d05a8c2e6bdf6d212b92af4d6b9cfefe" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6226ab6e028780025f47fde29881a478.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: Ais9FKdYxlh20xs853TRTEQY4CxgKXloa1_BbrJDpMRn3n2W4x5LVQ== Age: 966135
2023-11-06 16:08:32 UTC	4959	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 69 6e 69 74 4c 6f 67 69 6e 50 61 67 65 2e 70 61 63 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 4f 6b 74 61 4c 6f 67 69 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 39 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: /! For license information please see initLoginPage.pack.js.LICENSE.txt /var OktaLogin;!function(){var e={954:function(e,t,n){"use strict";var r,i,o;function a(e){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return t
2023-11-06 16:08:32 UTC	4975	IN	Data Raw: 6f 70 28 29 7d 7d 29 29 2c 68 61 73 3a 61 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 65 28 65 2c 74 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 29 2c 63 6f 6e 74 61 69 6e 73 3a 61 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 74 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 69 28 74 29 29 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 7d 7d 29 29 2c 6c 61 6e 67 3a 61 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4b 2e 74 65 73 74 28 65 7c 7c 22 22 29 7c 7c 69 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 Data Ascii: op()}})),has:ae((function(e){return function(t){return ie(e,t).length>0}})),contains:ae((function(e){return e=e.replace(te,ne),function(t){return(t.textContent\|\|t.innerText\|\|i(t)).indexOf(e)>-1}})),lang:ae((function(e){return K.test(e\|\|"")\|\|ie.error("unsu
2023-11-06 16:08:32 UTC	5038	IN	Data Raw: 5b 73 5d 29 7b 69 66 28 74 26 26 28 72 3d 6e 3f 61 5b 73 5d 3a 61 5b 73 5d 2e 64 61 74 61 29 29 7b 69 3d 28 74 3d 76 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 63 6f 6e 63 61 74 28 76 2e 6d 61 70 28 74 2c 76 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 74 20 69 6e 20 72 7c 7c 28 74 3d 76 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 69 2d 2d 3b 29 64 65 6c 65 74 65 20 72 5b 74 5b 69 5d 5d 3b 69 66 28 6e 3f 21 56 28 72 29 3a 21 76 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 72 65 74 75 72 6e 7d 28 6e 7c 7c 28 64 65 6c 65 74 65 20 61 5b 73 5d 2e 64 61 74 61 2c 56 28 61 5b 73 5d 29 29 29 26 26 28 6f 3f 76 2e 63 6c 65 61 6e 44 61 74 61 28 5b 65 5d 2c 21 30 Data Ascii: [s]){if(t&&(r=n?a[s]:a[s].data)){i=(t=v.isArray(t)?t.concat(v.map(t,v.camelCase)):t in r\|\|(t=v.camelCase(t))in r?[t]:t.split(" ")).length;for(;i--;)delete r[t[i]];if(n?!V(r):!v.isEmptyObject(r))return}(n\|\|(delete a[s].data,V(a[s])))&&(o?v.cleanData([e],!0
2023-11-06 16:08:32 UTC	5054	IN	Data Raw: 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 74 68 69 73 2e 74 79 70 65 7c 7c 28 76 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 2e 5f 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 63 68 65 63 6b 65 64 22 3d 3d 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 26 26 28 74 68 69 73 2e 5f 6a 75 73 74 43 68 61 6e 67 65 64 3d 21 30 29 7d 29 29 2c 76 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 63 6c 69 63 6b 2e 5f 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6a 75 73 74 43 68 61 6e 67 65 64 26 26 21 65 2e 69 73 54 72 69 67 67 65 72 26 26 28 74 68 69 73 2e 5f 6a 75 73 74 43 68 61 6e 67 65 64 3d 21 31 29 2c 76 2e 65 76 Data Ascii: pe&&"radio"!==this.type\|\|(v.event.add(this,"propertychange._change",(function(e){"checked"===e.originalEvent.propertyName&&(this._justChanged=!0)})),v.event.add(this,"click._change",(function(e){this._justChanged&&!e.isTrigger&&(this._justChanged=!1),v.ev
2023-11-06 16:08:32 UTC	5066	IN	Data Raw: 6c 61 79 22 29 29 29 29 3b 66 6f 72 28 61 3d 30 3b 61 3c 73 3b 61 2b 2b 29 28 72 3d 65 5b 61 5d 29 2e 73 74 79 6c 65 26 26 28 74 26 26 22 6e 6f 6e 65 22 21 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 26 26 22 22 21 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 7c 7c 28 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 3f 6f 5b 61 5d 7c 7c 22 22 3a 22 6e 6f 6e 65 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 74 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 72 5b 31 5d 2d 28 6e 7c 7c 30 29 29 2b 28 72 5b 32 5d 7c 7c 22 70 78 22 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 66 6f 72 28 76 61 72 20 6f Data Ascii: lay"))));for(a=0;a<s;a++)(r=e[a]).style&&(t&&"none"!==r.style.display&&""!==r.style.display\|\|(r.style.display=t?o[a]\|\|"":"none"));return e}function st(e,t,n){var r=et.exec(t);return r?Math.max(0,r[1]-(n\|\|0))+(r[2]\|\|"px"):t}function ut(e,t,n,r,i){for(var o
2023-11-06 16:08:33 UTC	5082	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 22 61 75 74 6f 22 29 2c 6e 7d 7d 7d 29 29 29 2c 6d 2e 73 74 79 6c 65 7c 7c 28 76 2e 61 74 74 72 48 6f 6f 6b 73 2e 73 74 79 6c 65 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 7c 7c 76 6f 69 64 20 30 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 74 2b 22 22 7d 7d 29 3b 76 61 72 20 50 74 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 69 2c 54 74 3d 2f 5e 28 3f 3a 61 7c 61 72 65 61 29 24 2f 69 3b 76 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: setAttribute(t,"auto"),n}}}))),m.style\|\|(v.attrHooks.style={get:function(e){return e.style.cssText\|\|void 0},set:function(e,t){return e.style.cssText=t+""}});var Pt=/^(?:input\|select\|textarea\|button\|object)$/i,Tt=/^(?:a\|area)$/i;v.fn.extend({prop:function(
2023-11-06 16:08:33 UTC	5097	IN	Data Raw: 22 2b 69 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 4f 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 69 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7c 7c 76 2e 65 72 72 6f 72 28 69 2b 22 20 77 61 73 20 6e 6f 74 20 63 61 6c 6c 65 64 22 29 2c 61 5b 30 5d 7d 2c 65 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3d 22 6a 73 6f 6e 22 2c 6f 3d 6e 5b 69 5d 2c 6e 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 61 72 67 75 6d 65 6e 74 73 7d 2c 72 2e 61 6c 77 61 79 73 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 28 6e 29 2e 72 65 6d 6f 76 65 50 72 6f Data Ascii: "+i):!1!==e.jsonp&&(e.url+=(Ot.test(e.url)?"&":"?")+e.jsonp+"="+i),e.converters["script json"]=function(){return a\|\|v.error(i+" was not called"),a[0]},e.dataTypes[0]="json",o=n[i],n[i]=function(){a=arguments},r.always((function(){void 0===o?v(n).removePro
2023-11-06 16:08:33 UTC	5113	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 69 74 75 6e 65 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 75 73 2f 61 70 70 2f 6f 6b 74 61 2d 6d 6f 62 69 6c 65 2f 69 64 35 38 30 37 30 39 32 35 31 3f 6d 74 3d 38 22 7d 2c 33 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 6e 63 3d 77 69 6e 64 6f 77 2e 63 73 70 4e 6f 6e 63 65 7d 2c 36 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3b 72 3d 5b 6e 28 39 35 34 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 Data Ascii: "https://itunes.apple.com/us/app/okta-mobile/id580709251?mt=8"},371:function(e,t,n){"use strict";n.nc=window.cspNonce},633:function(e,t,n){var r,i;r=[n(954)],void 0===(i=function(e){return function(e){"use strict";function t(e){void 0===e&&(e=window.navig
2023-11-06 16:08:33 UTC	5129	IN	Data Raw: 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 65 63 6b 20 6f 72 20 74 68 69 73 20 77 61 72 6e 69 6e 67 3a 5c 6e 53 65 65 20 68 74 74 70 73 3a 2f 2f 68 61 6e 64 6c 65 62 61 72 73 6a 73 2e 63 6f 6d 2f 61 70 69 2d 72 65 66 65 72 65 6e 63 65 2f 72 75 6e 74 69 6d 65 2d 6f 70 74 69 6f 6e 73 2e 68 74 6d 6c 23 6f 70 74 69 6f 6e 73 2d 74 6f 2d 63 6f 6e 74 72 6f 6c 2d 70 72 6f 74 6f 74 79 70 65 2d 61 63 63 65 73 73 20 66 6f 72 20 64 65 74 61 69 6c 73 27 29 29 7d 28 74 29 2c 21 31 29 7d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 2e 6d 65 74 68 6f 64 73 3a 74 2e 70 72 6f 70 65 72 74 69 65 73 2c 6e 29 7d 2c 74 2e 72 65 73 65 74 4c 6f 67 67 65 64 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 75 29 2e 66 6f 72 45 Data Ascii: to disable the check or this warning:\nSee https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details'))}(t),!1)}("function"==typeof e?t.methods:t.properties,n)},t.resetLoggedProperties=function(){i(u).forE
2023-11-06 16:08:33 UTC	5133	IN	Data Raw: 78 74 65 6e 64 28 7b 7d 2c 74 2e 68 65 6c 70 65 72 73 2c 72 2e 68 65 6c 70 65 72 73 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 65 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 3b 72 65 74 75 72 6e 20 70 2e 77 72 61 70 48 65 6c 70 65 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 65 78 74 65 6e 64 28 7b 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 3a 6e 7d 2c 65 29 7d 29 29 7d 28 72 2c 74 29 7d 29 29 7d 28 61 2c 6f 29 2c 6f 2e 68 65 6c 70 65 72 73 3d 61 2c 65 2e 75 73 65 50 61 72 74 69 61 6c 26 26 28 6f 2e 70 61 72 74 69 61 6c 73 3d 6f 2e Data Ascii: xtend({},t.helpers,r.helpers);!function(e,t){i(e).forEach((function(n){var r=e[n];e[n]=function(e,t){var n=t.lookupProperty;return p.wrapHelper(e,(function(e){return s.extend({lookupProperty:n},e)}))}(r,t)}))}(a,o),o.helpers=a,e.usePartial&&(o.partials=o.
2023-11-06 16:08:33 UTC	5149	IN	Data Raw: 2c 38 34 3a 5b 31 2c 33 32 5d 2c 38 35 3a 5b 31 2c 33 34 5d 2c 38 36 3a 33 33 7d 2c 7b 33 33 3a 5b 31 2c 31 30 35 5d 7d 2c 7b 33 33 3a 5b 32 2c 37 39 5d 2c 36 35 3a 5b 32 2c 37 39 5d 2c 37 32 3a 5b 32 2c 37 39 5d 2c 38 30 3a 5b 32 2c 37 39 5d 2c 38 31 3a 5b 32 2c 37 39 5d 2c 38 32 3a 5b 32 2c 37 39 5d 2c 38 33 3a 5b 32 2c 37 39 5d 2c 38 34 3a 5b 32 2c 37 39 5d 2c 38 35 3a 5b 32 2c 37 39 5d 7d 2c 7b 33 33 3a 5b 32 2c 38 31 5d 7d 2c 7b 32 33 3a 5b 32 2c 32 37 5d 2c 33 33 3a 5b 32 2c 32 37 5d 2c 35 34 3a 5b 32 2c 32 37 5d 2c 36 35 3a 5b 32 2c 32 37 5d 2c 36 38 3a 5b 32 2c 32 37 5d 2c 37 32 3a 5b 32 2c 32 37 5d 2c 37 35 3a 5b 32 2c 32 37 5d 2c 38 30 3a 5b 32 2c 32 37 5d 2c 38 31 3a 5b 32 2c 32 37 5d 2c 38 32 3a 5b 32 2c 32 37 5d 2c 38 33 3a 5b 32 2c 32 37 5d Data Ascii: ,84:[1,32],85:[1,34],86:33},{33:[1,105]},{33:[2,79],65:[2,79],72:[2,79],80:[2,79],81:[2,79],82:[2,79],83:[2,79],84:[2,79],85:[2,79]},{33:[2,81]},{23:[2,27],33:[2,27],54:[2,27],65:[2,27],68:[2,27],72:[2,27],75:[2,27],80:[2,27],81:[2,27],82:[2,27],83:[2,27]
2023-11-06 16:08:33 UTC	5165	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 61 63 63 65 70 74 4b 65 79 28 65 2c 22 70 72 6f 67 72 61 6d 22 29 7d 2c 43 6f 6e 74 65 6e 74 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 43 6f 6d 6d 65 6e 74 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 53 75 62 45 78 70 72 65 73 73 69 6f 6e 3a 61 2c 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 53 74 72 69 6e 67 4c 69 74 65 72 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4e 75 6d 62 65 72 4c 69 74 65 72 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 42 6f 6f 6c 65 61 6e 4c 69 74 65 72 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 55 6e 64 65 66 69 6e 65 64 4c 69 74 65 72 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .call(this,e),this.acceptKey(e,"program")},ContentStatement:function(){},CommentStatement:function(){},SubExpression:a,PathExpression:function(){},StringLiteral:function(){},NumberLiteral:function(){},BooleanLiteral:function(){},UndefinedLiteral:function(
2023-11-06 16:08:33 UTC	5181	IN	Data Raw: 73 2e 6c 61 73 74 43 6f 6e 74 65 78 74 29 29 7d 2c 6c 6f 6f 6b 75 70 4f 6e 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 30 3b 72 7c 7c 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 61 74 7c 7c 74 68 69 73 2e 6c 61 73 74 43 6f 6e 74 65 78 74 3f 74 68 69 73 2e 70 75 73 68 43 6f 6e 74 65 78 74 28 29 3a 74 68 69 73 2e 70 75 73 68 28 74 68 69 73 2e 64 65 70 74 68 65 64 4c 6f 6f 6b 75 70 28 65 5b 69 2b 2b 5d 29 29 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 50 61 74 68 28 22 63 6f 6e 74 65 78 74 22 2c 65 2c 69 2c 74 2c 6e 29 7d 2c 6c 6f 6f 6b 75 70 42 6c 6f 63 6b 50 61 72 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 75 73 65 42 6c 6f 63 6b 50 61 72 61 6d 73 3d 21 30 2c 74 68 69 73 2e 70 Data Ascii: s.lastContext))},lookupOnContext:function(e,t,n,r){var i=0;r\|\|!this.options.compat\|\|this.lastContext?this.pushContext():this.push(this.depthedLookup(e[i++])),this.resolvePath("context",e,i,t,n)},lookupBlockParam:function(e,t){this.useBlockParams=!0,this.p
2023-11-06 16:08:33 UTC	5197	IN	Data Raw: 3c 69 3b 72 2b 2b 29 74 5b 65 5b 6e 5b 72 5d 5d 5d 3d 6e 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 6a 28 65 5b 6e 5d 29 26 26 74 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 74 26 26 28 6e 3d 4f 62 6a 65 63 74 28 6e 29 29 2c 72 3c 32 7c 7c 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 72 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 2c 61 3d 65 28 6f Data Ascii: <i;r++)t[e[n[r]]]=n[r];return t}function we(e){var t=[];for(var n in e)j(e[n])&&t.push(n);return t.sort()}function ke(e,t){return function(n){var r=arguments.length;if(t&&(n=Object(n)),r<2\|\|null==n)return n;for(var i=1;i<r;i++)for(var o=arguments[i],a=e(o

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 84

Windows Analysis Report
https://faaframes.servicenowservices.com/nav_to.do?uri=x_nuvo_otam_asset_action.do%3Fsys_id=88970e5e875679905e9ab889cebb35d8%26sysparm_stack=x_nuvo_otam_asset_action_list.do%3Fsysparm_query=active=true

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:32 UTC	4991	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 22112 Connection: close Date: Tue, 24 Oct 2023 18:22:43 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 24 Oct 2023 17:31:03 GMT ETag: "6225f3ca44b83090833064727a09cc95" x-amz-meta-sha1sum: 3449db1ccdfe0aeaf89101cc28ecafaecae9fc89 Expires: Wed, 23 Oct 2024 18:22:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 2f9cccbe6803cd7d3398f019d84d53bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: 4FwhsRApE6aejo7_vWZRTFUQlw14IzL2GZBd0PE0jJ1A3N532fo9hw== Age: 1115149
2023-11-06 16:08:32 UTC	4993	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 56 60 00 0f 00 00 00 00 ab a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 56 44 00 00 00 1a 00 00 00 1c 65 b9 e8 47 47 44 45 46 00 00 4b 38 00 00 00 35 00 00 00 38 06 fc 05 40 47 50 4f 53 00 00 4d 9c 00 00 08 a6 00 00 15 7c 0b 86 e2 6c 47 53 55 42 00 00 4b 70 00 00 02 2b 00 00 04 7e 87 3f 8e 8c 4f 53 2f 32 00 00 01 d0 00 00 00 4c 00 00 00 60 68 3c 80 d4 63 6d 61 70 00 00 05 5c 00 00 02 ae 00 00 03 ce f1 f7 6d 11 67 61 73 70 00 00 4b 30 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0b 04 00 00 38 50 00 00 73 c8 90 a3 4b 0f 68 65 61 64 00 00 01 58 00 00 00 34 00 00 00 36 09 20 20 dd 68 68 65 61 00 00 01 8c 00 00 00 21 00 00 00 24 08 19 05 19 68 6d 74 78 00 00 02 1c 00 00 03 Data Ascii: wOFFV`FFTMVDeGGDEFK858@GPOSM\|lGSUBKp+~?OS/2L`h<cmap\mgaspK0glyf8PsKheadX46 hhea!$hmtx
2023-11-06 16:08:32 UTC	5023	IN	Data Raw: a4 c5 cb de 91 56 4a fa 8c 88 30 a7 df 33 22 f2 b9 d2 4b 3e 27 22 d5 fb 29 dd bb 73 a5 5e fa d9 11 24 86 fd 38 29 fc ed 8a 4b 3f 49 62 45 c0 13 25 da bd 4f 96 10 7a 0a cd e6 3e 60 7d 4f c4 2e 44 23 be ce 43 f4 7b da 17 05 e0 51 f6 3d eb 87 f2 e2 72 a1 11 ca 23 8f d0 ef f9 73 f8 56 2d f4 5a d6 e3 34 f9 73 42 a3 13 44 43 ec d7 8a e7 ef ef c8 11 6a 5f a7 09 ed c0 69 4b 2c e1 84 69 15 f2 69 99 1d a7 d4 6b f4 f4 f1 10 f8 83 9a 79 e4 98 c5 ba ad 7e fd e1 b4 d5 0b c2 c3 17 ac 4a 7b 65 43 fd 8d 79 e6 9e 0d dd 37 a7 40 24 ff d1 c4 89 90 cc 7f 63 b8 69 e6 da 7b 1d f9 c5 d7 0d 5b f5 29 fa 24 eb d2 eb 68 76 65 4f a3 35 39 59 9f 62 6d e8 66 3d 81 c6 3c f0 18 eb 49 9f 2c 75 c6 0f f7 ee f5 f4 b1 11 6a b4 a4 53 d0 c8 66 4f 3a 80 9a 9c a2 1f a7 25 a2 6d 98 d8 bd b2 ae 20 Data Ascii: VJ03"K>'")s^$8)K?IbE%Oz>`}O.D#C{Q=r#sV-Z4sBDCj_iK,iiky~J{eCy7@$ci{[)$hveO59Ybmf=<I,ujSfO:%m

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:32 UTC	5007	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 21980 Connection: close Date: Tue, 24 Oct 2023 18:22:48 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 24 Oct 2023 17:31:03 GMT ETag: "8f2822b73b5f9c106c6f2e0db820bcbb" x-amz-meta-sha1sum: b838e30072520735c49eda52cb2d3a0f4b30f0f2 Expires: Wed, 23 Oct 2024 18:22:48 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 0e812b6ba886ec48b1204f2c719f9a90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: 4QGWF3j5e0SwLMjIERMh2MxKilk8nVeTJFUsuh5IHRHphpCRPUHlcA== Age: 1115144
2023-11-06 16:08:32 UTC	5009	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 55 dc 00 0f 00 00 00 00 ab 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 55 c0 00 00 00 1a 00 00 00 1c 65 b9 e8 47 47 44 45 46 00 00 4a b4 00 00 00 35 00 00 00 38 06 fc 05 40 47 50 4f 53 00 00 4d 18 00 00 08 a8 00 00 15 76 29 fd c3 d0 47 53 55 42 00 00 4a ec 00 00 02 2b 00 00 04 7e 87 3f 8e 8c 4f 53 2f 32 00 00 01 d4 00 00 00 4d 00 00 00 60 68 a3 82 24 63 6d 61 70 00 00 05 68 00 00 02 ae 00 00 03 ce f1 f7 6d 11 67 61 73 70 00 00 4a ac 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0b 0c 00 00 37 e5 00 00 74 38 fc 48 cc dc 68 65 61 64 00 00 01 58 00 00 00 35 00 00 00 36 09 48 20 ef 68 68 65 61 00 00 01 90 00 00 00 21 00 00 00 24 08 41 05 3b 68 6d 74 78 00 00 02 24 00 00 03 Data Ascii: wOFFUFFTMUeGGDEFJ58@GPOSMv)GSUBJ+~?OS/2M`h$cmaphmgaspJglyf7t8HheadX56H hhea!$A;hmtx$
2023-11-06 16:08:32 UTC	5030	IN	Data Raw: 66 c9 7f 4d 31 26 58 08 3d 65 e1 cc fe 0b eb f3 10 cf 72 2b 49 fb 2e 76 2c d5 b3 9c 5c ea a3 93 eb 83 54 30 75 a5 2a 48 4d 2c 42 fc b8 c5 38 5a b1 fe 6c dc f2 ce 29 53 3a 57 c4 3f bb a1 62 8f ae a4 61 65 d9 48 cc 65 fe 1b 2f 6f 34 eb 72 cc 48 d9 b2 b3 d5 c6 fc 6d cb 0a 95 91 51 ca c2 25 d7 67 eb 9a 5a cb 72 0a 23 42 22 42 0b 73 ca ec 7e 63 74 0a f6 1d ed 39 45 6d 3c b9 b7 68 0f 18 e5 5a b3 02 8c ee d8 99 88 3e b2 03 15 eb 73 2e fa 46 24 17 96 26 d4 af b9 4e 1f 38 3f 49 d1 91 9b 1d ac 2a 69 0a c6 2f 14 e7 1e 3f 67 29 6e 4c df 7c b7 3a 33 07 79 f7 f5 95 6e 7a 31 77 4f 6e 44 94 20 f7 50 88 ac d8 6e 53 0a ce 2a f8 2e 57 6b 85 0e d3 c8 b2 b1 71 03 aa 40 d6 aa f5 99 eb aa 7b b6 6e ed c1 43 fc bd a8 ad 82 ef 40 89 3c cf ff 19 dd cd ff 88 7c 59 9f 62 d9 12 c0 39 Data Ascii: fM1&X=er+I.v,\T0uHM,B8Zl)S:W?baeHe/o4rHmQ%gZr#B"Bs~ct9Em<hZ>s.F$&N8?Ii/?g)nL\|:3ynz1wOnD PnS*.Wkq@{nC@<\|Yb9

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:32 UTC	5037	OUT	POST /idp/idx/introspect HTTP/1.1 Host: workforce.faa.gov Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Okta-User-Agent-Extended: okta-auth-js/7.0.1 okta-signin-widget-7.11.2 Accept-Language: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/ion+json; okta-version=1.0.0 Accept: application/ion+json; okta-version=1.0.0 sec-ch-ua-platform: "Windows" Origin: https://workforce.faa.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://workforce.faa.gov/app/faa-wf_samlafnframesprod_1/exk2kazqp5bPMBW464h7/sso/saml?SAMLRequest=lVJdb6MwEPwryO98JpBihUg00eki9QM1uTvpXqoFlsYK2NRrkra%2FvkBStX1odfdm2bMzszOeEzR10PK0Mzt5h48dkrGemloSP70krNOSKyBBXEKDxE3BN%2Bn1FQ8cj7daGVWomlkpEWojlFwqSV2DeoP6IAr8dXeVsJ0xLXHXrQAqPZA4dHqV6ng%2BkVOohlmrXl9IGIjex45K7yulC3R6AudBHVxo24HMPlb3g02o5Im391Pe%2By4%2B7YM9vDy2YZ5dX%2F6ZRtPdzCVS7gBm1o%2BBa9w4YRXUhMxarxK2uVnGURmFcRznpR94oX8RT8JJXmEBMwy93It7IGVAJA74PkrU4VqSAWkSFnjBxPZ924u2fsS9Cx5MnNk0%2Bsus7JzVpZClkA%2FfB5ufQMR%2FbreZnd1utiPBQZSob3r0%2F2T6GzWNefbEbDEfe%2BWja%2F2x6u8NwVu%2FbPGvynP3o9RZuOWD%2FfUqU7Uonq20rtVxqRFMv5LRHY7tNGC%2BduM7%2FngjSrsaoRwbEHValhqJmLs4637%2B1ItX&RelayState=https%3A%2F%2Ffaaframes.servicenowservices.com%2Fnav_to.do%3Furi%3Dx_nuvo_otam_asset_action.do%253Fsys_id%3D88970e5e875679905e9ab889cebb35d8%2526sysparm_stack%3Dx_nuvo_otam_asset_action_list.do%253Fsysparm_query%3Dactive%3Dtrue Accept-Encoding: gzip, deflate, br Cookie: JSESSIONID=2EB5BF333512BB28113F460842234D8F; t=default; DT=DI14vq6sK2rQyC-sUCHax1oiw
2023-11-06 16:08:32 UTC	5038	OUT	Data Raw: 7b 22 73 74 61 74 65 54 6f 6b 65 6e 22 3a 22 30 32 2e 69 64 2e 6e 69 54 6a 56 65 32 53 72 64 71 54 31 38 52 63 45 75 78 67 6e 78 36 52 49 66 6c 51 76 56 32 49 6c 4b 59 44 2d 57 54 53 22 7d Data Ascii: {"stateToken":"02.id.niTjVe2SrdqT18RcEuxgnx6RIflQvV2IlKYD-WTS"}

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:33 UTC	5211	IN	HTTP/1.1 200 OK Date: Mon, 06 Nov 2023 16:08:33 GMT Server: nginx Content-Type: application/ion+json;okta-version=1.0.0 x-okta-request-id: ZUkPgf8Ffhe9xnjfCgyW0gAAC24 x-xss-protection: 0 p3p: CP="HONK" content-security-policy: default-src 'self' faa-wf.okta.com workforce.faa.gov .oktacdn.com; connect-src 'self' faa-wf.okta.com faa-wf-admin.okta.com workforce.faa.gov .oktacdn.com .mixpanel.com .mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com .mtls.okta.com faa-wf.kerberos.okta.com .authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 .authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 .authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 .authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 .authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 .authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' faa-wf.okta.com workforce.faa.gov .oktacdn.com; style-src 'unsafe-inline' 'self' faa-wf.okta.com workforce.faa.gov .oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' faa-wf.okta.com faa-wf-admin.okta.com workforce.faa.gov login.okta.com com-okta-authenticator:; img-src 'self' faa-wf.okta.com workforce.faa.gov .oktacdn.com .tiles.mapbox.com .mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' faa-wf.okta.com workforce.faa.gov data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' x-rate-limit-limit: 10000 x-rate-limit-remaining: 9705 x-rate-limit-reset: 1699286914 access-control-allow-origin: https://workforce.faa.gov access-control-allow-credentials: true vary: Origin cache-control: no-cache, no-store pragma: no-cache expires: 0 x-content-type-options: nosniff Strict-Transport-Security: max-age=315360000; includeSubDomains X-Robots-Tag: noindex,nofollow set-cookie: sid="";Version=1;Path=/;Max-Age=0 set-cookie: autolaunch_triggered=""; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ set-cookie: JSESSIONID=BDFBF7460A7B834084F6C13E51F89070; Path=/; Secure; HttpOnly Connection: close Transfer-Encoding: chunked
2023-11-06 16:08:33 UTC	5213	IN	Data Raw: 31 33 62 36 0d 0a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 30 22 2c 22 73 74 61 74 65 48 61 6e 64 6c 65 22 3a 22 30 32 2e 69 64 2e 6e 69 54 6a 56 65 32 53 72 64 71 54 31 38 52 63 45 75 78 67 6e 78 36 52 49 66 6c 51 76 56 32 49 6c 4b 59 44 2d 57 54 53 7e 64 72 64 22 2c 22 65 78 70 69 72 65 73 41 74 22 3a 22 32 30 32 33 2d 31 31 2d 30 36 54 31 38 3a 30 38 3a 32 39 2e 30 30 30 5a 22 2c 22 69 6e 74 65 6e 74 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 6d 65 64 69 61 74 69 6f 6e 22 3a 7b 22 74 79 70 65 22 3a 22 61 72 72 61 79 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 72 65 6c 22 3a 5b 22 63 72 65 61 74 65 2d 66 6f 72 6d 22 5d 2c 22 6e 61 6d 65 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 77 6f 72 6b 66 6f 72 63 65 2e 66 Data Ascii: 13b6{"version":"1.0.0","stateHandle":"02.id.niTjVe2SrdqT18RcEuxgnx6RIflQvV2IlKYD-WTS~drd","expiresAt":"2023-11-06T18:08:29.000Z","intent":"LOGIN","remediation":{"type":"array","value":[{"rel":["create-form"],"name":"identify","href":"https://workforce.f

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:33 UTC	5220	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 35638 Connection: close Date: Mon, 06 Nov 2023 03:11:54 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" x-okta-request-id: ZUhZejEegyrqGSm51ijGWAAADRg x-xss-protection: 0 p3p: CP="HONK" content-security-policy-report-only: default-src 'self' ok10-okta.okta.com .oktacdn.com; connect-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com .oktacdn.com .mixpanel.com .mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com .mtls.okta.com ok10-okta.kerberos.okta.com https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' ok10-okta.okta.com .oktacdn.com; style-src 'unsafe-inline' 'nonce-b89mdtbduWE7gnbAHTvCpS0LqlVshvqnJbyeRNkgvtc' 'self' ok10-okta.okta.com .oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com login.okta.com; img-src 'self' ok10-okta.okta.com .oktacdn.com .tiles.mapbox.com .mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' ok10-okta.okta.com data: .oktacdn.com fonts.gstatic.com; frame-ancestors 'self' content-security-policy: default-src 'self' ok10-okta.okta.com .oktacdn.com; connect-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com .oktacdn.com .mixpanel.com .mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com .mtls.okta.com ok10-okta.kerberos.okta.com https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' ok10-okta.okta.com .oktacdn.com; style-src 'unsafe-inline' 'self' ok10-okta.okta.com .oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com login.okta.com; img-src 'self' ok10-okta.okta.com .oktacdn.com .tiles.mapbox.com .mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' ok10-okta.okta.com data: .oktacdn.com fonts.gstatic.com; frame-ancestors 'self' x-rate-limit-limit: 600 x-rate-limit-remaining: 599 x-rate-limit-reset: 1699240374 Expires: Tue, 05 Nov 2024 03:11:54 GMT Cache-Control: public,max-age=31536000,s-maxage=1814400 access-control-allow-origin: * x-content-type-options: nosniff Last-Modified: Wed, 21 Jun 2023 21:01:24 GMT Strict-Transport-Security: max-age=315360000; includeSubDomains X-Robots-Tag: noindex,nofollow X-Cache: Hit from cloudfront Via: 1.1 4eacf0f5cf6491a5ff7af0577ce459e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: lvFTL38U2tRKdzEYhPEYjIZAPYIyxxrqISyx6RabAlM2DkMaxUtPgg== Age: 46599
2023-11-06 16:08:33 UTC	5224	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 db 06 18 10 04 06 3f e9 0f dd 00 00 8a a6 49 44 41 54 78 5e ed dd 05 9c 54 d5 db 07 f0 df 76 77 b1 2c 2c dd dd 21 0d 2a 06 4a 18 08 8a 85 2d 16 58 80 2d 8a dd 0d 16 36 c6 6b 2b 22 88 b4 20 dd b9 0b cb c2 76 77 bd e7 b9 f7 ac 7f 83 d8 98 d9 a9 df f7 e3 38 7b cf 0c cb b2 73 ef 7d 9e d3 6e 55 0a 88 c8 e1 95 a1 0a 95 95 c0 be 23 19 f0 f4 f0 40 e2 b1 2c b8 a9 f2 e4 f4 7c 64 e5 17 c2 dd cd cd 78 ec 39 9c 81 0a 79 a3 7a 55 9e e3 63 42 11 Data Ascii: PNGIHDRxsRGBgAMAapHYs+bKGDtIME?IDATx^Tvw,,!*J-X-6k+" vw8{s}nU#@,\|dx9yzUcB
2023-11-06 16:08:33 UTC	5240	IN	Data Raw: bb f0 a2 dc e0 88 e8 b8 da c4 45 c0 b7 4d ac 31 8d 8a c8 a1 c8 dc 7f 1f 1f 9c dd af ad 2e a8 1b 26 00 ce 44 06 fb a5 64 23 71 c3 53 98 38 b8 83 2e 24 a2 13 59 f1 c2 e5 ea 9a c9 d5 47 44 0e 22 ab 00 cf ce 1e af 0f ea ce 9d cd 5f 4e 22 af 50 d5 fe cb 50 b0 ff 15 c4 47 72 39 5f a2 9a e8 d5 36 0e 6e 2d a3 cc 6e 33 22 47 50 59 61 cc ff bf fd 82 fe ba a0 6e d6 ee 38 a2 12 00 2e 89 e9 f8 64 3d 7f f5 39 56 6d 7f 16 fe 9e 6c d4 21 aa 8d af 1e be c8 a8 51 b1 32 44 0e 21 bb 08 f7 de 51 bf a5 db 5f f9 bf 75 f8 61 ed 6e b8 37 32 d6 c5 e6 82 18 0e 4b 82 bf aa bd 54 6d 7e 46 17 10 51 6d 9c 3f b0 03 10 a3 ee 83 1c 0b 40 f6 4e 2a ec e5 15 78 6c ea 48 5d 50 37 b7 bf f0 3d 02 7d 7d e0 ee ef e3 a5 32 5f ce 83 75 48 39 85 80 b7 a7 51 f3 27 a2 ba fb f9 e9 29 40 5a 9e 3e 22 b2 Data Ascii: EM1.&Dd#qS8.$YGD"_N"PPGr9_6n-n3"GPYan8.d=9Vml!Q2D!Q_uan72KTm~FQm?@N*xlH]P7=}}2_uH9Q')@Z>"
2023-11-06 16:08:34 UTC	5257	IN	Data Raw: 07 23 86 7d fd 0e 8d 09 80 93 da 7e 30 55 25 00 d1 fa a8 fe ee 7d f1 07 cc 7d 5e 25 01 d1 21 80 af ac 41 a0 5f 20 22 e7 26 c1 3f af 18 38 92 89 e1 e7 f4 c4 95 13 4f c3 65 aa f6 4f 8e 8f 09 00 d5 d8 9c 0f 7e c7 ec 87 3f 07 24 eb 97 65 83 b9 7f 00 91 f3 92 e6 fe 8a 4a 20 29 1d ee 8d c3 f1 f0 65 43 30 e5 82 fe 68 1a 59 bf 55 47 c9 7e 30 01 a0 5a 79 fe 8b 35 b8 fd 91 2f 80 b2 72 2e 1b 4c e4 ac a4 d6 9f 91 67 ac 34 3a fe c2 01 b8 78 4c 2f 5c 34 ac 93 f9 1a 39 0d 26 00 54 6b ef 2d da 8c bb 9f f9 16 29 fb 8e 41 55 07 cc 11 c1 44 e4 f8 24 f0 17 97 19 cd fd 4d ba 35 c7 ed 93 06 e1 aa b1 7d 11 ea cf 95 41 9d 11 13 00 aa 93 65 5b 12 31 eb f9 ef b1 f2 c7 4d 40 9b 46 e6 9c 60 9e 49 44 8e 49 02 bf fc 2f 29 03 f0 f6 c4 ed 57 0d c7 f8 d1 dd 31 a8 73 bc f1 32 39 27 26 00 Data Ascii: #}~0U%}}^%!A_ "&?8OeO~?$eJ )eC0hYUG~0Zy5/r.Lg4:xL/\49&Tk-)AUD$M5}Ae[1M@F`IDI/)W1s29'&

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:34 UTC	5256	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 451 Connection: close Last-Modified: Wed, 01 Nov 2023 16:07:38 GMT Server: AmazonS3 Date: Mon, 06 Nov 2023 10:50:28 GMT ETag: "fe4139cbc5a13528dbecbf548e6dd39c" X-Cache: Hit from cloudfront Via: 1.1 345ac40e43857b24ab85c7affa4ec84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P2 X-Amz-Cf-Id: SU0gPRTQ5MEZxjsktjp5vPlfCuI0oFDnPfYODffocCInjKtlX5e9nQ== Age: 19086 Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-11-06 16:08:34 UTC	5256	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 78 2d 6d 79 2d 6f 6b 74 61 2d 76 65 72 73 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 76 65 72 73 69 6f 6e 3a 20 31 2e 35 38 2e 30 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 Data Ascii: <!doctype html><html class="no-js" lang=""><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="x-my-okta-version" content="version: 1.58.0"/><title></title><meta name="description" content=""><meta name="viewport"

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:34 UTC	5259	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3141 Connection: close Date: Mon, 06 Nov 2023 05:09:26 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" Last-Modified: Tue, 24 Oct 2023 17:31:04 GMT ETag: "7846b2f8c6d0a7ca69fdd3d3c294e92d" x-amz-meta-sha1sum: e0bb021ffdf93c68fef44de2a3b08f378b6fb50a Expires: Tue, 05 Nov 2024 05:09:26 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 7db4e24dac37de5a6dd7ddc6e5551834.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: TcpK1nl3-QmvC1dfQn9gTQyIEhrhHlMFMKvGqm_x0foleZCMjjoUZA== Age: 39548
2023-11-06 16:08:34 UTC	5260	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 04 83 08 06 00 00 00 3b e6 6c 72 00 00 0c 0c 49 44 41 54 78 9c ed dc 5f 6c 95 f5 01 c6 f1 e7 ed 7b ce a1 f6 40 a1 2c 8a 67 ce b5 65 d8 32 9c 8c 82 6c 24 cb 12 c7 70 38 f7 e7 c6 98 48 cc 6e 64 78 53 8d c3 19 37 6f bc 5c 16 8c 31 c6 34 5c 9c 7a b1 0b b7 25 4b bc 5b b6 25 55 90 30 97 a5 38 90 30 b0 b2 85 53 a9 16 63 11 0b 3d b0 f6 70 ce bb 1b db 80 2d e8 eb fb 6b 79 24 df cf e5 31 ef fb 3b df 9c 73 ca eb cd 23 01 00 00 00 00 00 47 51 d6 1b 94 cb e5 6d 51 14 95 eb f5 7a 31 cd 75 71 1c 57 93 24 d9 b1 63 c7 8e 3f 64 7d 0f 92 94 cb 7a 83 28 8a ca 5b b6 6c 29 96 4a a5 54 d7 8d 8e 8e 16 07 06 06 ca 92 3c 42 ea f5 7a b1 54 2a a9 50 28 a4 ba ae bd bd 5d 69 3f c5 ab 69 0a 75 a3 6b 8d 10 37 84 b8 21 c4 Data Ascii: PNGIHDR2;lrIDATx_l{@,ge2l$p8HndxS7o\14\z%K[%U080Sc=p-ky$1;s#GQmQz1uqW$c?d}z([l)JT<BzT*P(]i?iuk7!

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:34 UTC	5264	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WamsDkd9cfVEPuS&MD=aohfRh5E HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-06 16:08:34 UTC	5336	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f29a5275-3c3b-4a13-9522-994d5f553ee0 MS-RequestId: 85cc0c65-6a0d-4801-afb5-924e09431df0 MS-CV: M16zCYtdNkuyD010.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 06 Nov 2023 16:08:34 GMT Connection: close Content-Length: 24490
2023-11-06 16:08:34 UTC	5337	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-11-06 16:08:34 UTC	5352	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:34 UTC	5266	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 35638 Connection: close Date: Mon, 06 Nov 2023 03:11:54 GMT Server: nginx Public-Key-Pins-Report-Only: pin-sha256="r5EfzZxQVvQpKo3AgYRaT7X2bDO/kj3ACwmxfdT2zt8="; pin-sha256="MaqlcUgk2mvY/RFSGeSwBRkI+rZ6/dxe/DuQfBT/vnQ="; pin-sha256="72G5IEvDEWn+EThf3qjR7/bQSWaS2ZSLqolhnO6iyJI="; pin-sha256="rrV6CLCCvqnk89gWibYT0JO6fNQ8cCit7GGoiVTjCOg="; max-age=60; report-uri="https://okta.report-uri.com/r/default/hpkp/reportOnly" x-okta-request-id: ZUhZejEegyrqGSm51ijGWAAADRg x-xss-protection: 0 p3p: CP="HONK" content-security-policy-report-only: default-src 'self' ok10-okta.okta.com .oktacdn.com; connect-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com .oktacdn.com .mixpanel.com .mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com .mtls.okta.com ok10-okta.kerberos.okta.com https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' ok10-okta.okta.com .oktacdn.com; style-src 'unsafe-inline' 'nonce-b89mdtbduWE7gnbAHTvCpS0LqlVshvqnJbyeRNkgvtc' 'self' ok10-okta.okta.com .oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com login.okta.com; img-src 'self' ok10-okta.okta.com .oktacdn.com .tiles.mapbox.com .mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' ok10-okta.okta.com data: .oktacdn.com fonts.gstatic.com; frame-ancestors 'self' content-security-policy: default-src 'self' ok10-okta.okta.com .oktacdn.com; connect-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com .oktacdn.com .mixpanel.com .mapbox.com app.pendo.io data.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com .mtls.okta.com ok10-okta.kerberos.okta.com https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' ok10-okta.okta.com .oktacdn.com; style-src 'unsafe-inline' 'self' ok10-okta.okta.com .oktacdn.com app.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com; frame-src 'self' ok10-okta.okta.com ok10-okta-admin.okta.com login.okta.com; img-src 'self' ok10-okta.okta.com .oktacdn.com .tiles.mapbox.com .mapbox.com app.pendo.io data.pendo.io cdn.pendo.io pendo-static-5634101834153984.storage.googleapis.com pendo-static-5391521872216064.storage.googleapis.com data: blob:; font-src 'self' ok10-okta.okta.com data: .oktacdn.com fonts.gstatic.com; frame-ancestors 'self' x-rate-limit-limit: 600 x-rate-limit-remaining: 599 x-rate-limit-reset: 1699240374 Expires: Tue, 05 Nov 2024 03:11:54 GMT Cache-Control: public,max-age=31536000,s-maxage=1814400 access-control-allow-origin: * x-content-type-options: nosniff Last-Modified: Wed, 21 Jun 2023 21:01:24 GMT Strict-Transport-Security: max-age=315360000; includeSubDomains X-Robots-Tag: noindex,nofollow X-Cache: Hit from cloudfront Via: 1.1 4793b6b9cde3a68180da20041b40b958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA73-P3 X-Amz-Cf-Id: fhj4xAX39VPuyDIdCyaGeeD6ZKBE1xp6uP_HaOH2fF-Y1wcFvWRd9w== Age: 46600
2023-11-06 16:08:34 UTC	5269	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 db 06 18 10 04 06 3f e9 0f dd 00 00 8a a6 49 44 41 54 78 5e ed dd 05 9c 54 d5 db 07 f0 df 76 77 b1 2c 2c dd dd 21 0d 2a 06 4a 18 08 8a 85 2d 16 58 80 2d 8a dd 0d 16 36 c6 6b 2b 22 88 b4 20 dd b9 0b cb c2 76 77 bd e7 b9 f7 ac 7f 83 d8 98 d9 a9 df f7 e3 38 7b cf 0c cb b2 73 ef 7d 9e d3 6e 55 0a 88 c8 e1 95 a1 0a 95 95 c0 be 23 19 f0 f4 f0 40 e2 b1 2c b8 a9 f2 e4 f4 7c 64 e5 17 c2 dd cd cd 78 ec 39 9c 81 0a 79 a3 7a 55 9e e3 63 42 11 Data Ascii: PNGIHDRxsRGBgAMAapHYs+bKGDtIME?IDATx^Tvw,,!*J-X-6k+" vw8{s}nU#@,\|dx9yzUcB
2023-11-06 16:08:34 UTC	5317	IN	Data Raw: bb f0 a2 dc e0 88 e8 b8 da c4 45 c0 b7 4d ac 31 8d 8a c8 a1 c8 dc 7f 1f 1f 9c dd af ad 2e a8 1b 26 00 ce 44 06 fb a5 64 23 71 c3 53 98 38 b8 83 2e 24 a2 13 59 f1 c2 e5 ea 9a c9 d5 47 44 0e 22 ab 00 cf ce 1e af 0f ea ce 9d cd 5f 4e 22 af 50 d5 fe cb 50 b0 ff 15 c4 47 72 39 5f a2 9a e8 d5 36 0e 6e 2d a3 cc 6e 33 22 47 50 59 61 cc ff bf fd 82 fe ba a0 6e d6 ee 38 a2 12 00 2e 89 e9 f8 64 3d 7f f5 39 56 6d 7f 16 fe 9e 6c d4 21 aa 8d af 1e be c8 a8 51 b1 32 44 0e 21 bb 08 f7 de 51 bf a5 db 5f f9 bf 75 f8 61 ed 6e b8 37 32 d6 c5 e6 82 18 0e 4b 82 bf aa bd 54 6d 7e 46 17 10 51 6d 9c 3f b0 03 10 a3 ee 83 1c 0b 40 f6 4e 2a ec e5 15 78 6c ea 48 5d 50 37 b7 bf f0 3d 02 7d 7d e0 ee ef e3 a5 32 5f ce 83 75 48 39 85 80 b7 a7 51 f3 27 a2 ba fb f9 e9 29 40 5a 9e 3e 22 b2 Data Ascii: EM1.&Dd#qS8.$YGD"_N"PPGr9_6n-n3"GPYan8.d=9Vml!Q2D!Q_uan72KTm~FQm?@N*xlH]P7=}}2_uH9Q')@Z>"
2023-11-06 16:08:34 UTC	5365	IN	Data Raw: 07 23 86 7d fd 0e 8d 09 80 93 da 7e 30 55 25 00 d1 fa a8 fe ee 7d f1 07 cc 7d 5e 25 01 d1 21 80 af ac 41 a0 5f 20 22 e7 26 c1 3f af 18 38 92 89 e1 e7 f4 c4 95 13 4f c3 65 aa f6 4f 8e 8f 09 00 d5 d8 9c 0f 7e c7 ec 87 3f 07 24 eb 97 65 83 b9 7f 00 91 f3 92 e6 fe 8a 4a 20 29 1d ee 8d c3 f1 f0 65 43 30 e5 82 fe 68 1a 59 bf 55 47 c9 7e 30 01 a0 5a 79 fe 8b 35 b8 fd 91 2f 80 b2 72 2e 1b 4c e4 ac a4 d6 9f 91 67 ac 34 3a fe c2 01 b8 78 4c 2f 5c 34 ac 93 f9 1a 39 0d 26 00 54 6b ef 2d da 8c bb 9f f9 16 29 fb 8e 41 55 07 cc 11 c1 44 e4 f8 24 f0 17 97 19 cd fd 4d ba 35 c7 ed 93 06 e1 aa b1 7d 11 ea cf 95 41 9d 11 13 00 aa 93 65 5b 12 31 eb f9 ef b1 f2 c7 4d 40 9b 46 e6 9c 60 9e 49 44 8e 49 02 bf fc 2f 29 03 f0 f6 c4 ed 57 0d c7 f8 d1 dd 31 a8 73 bc f1 32 39 27 26 00 Data Ascii: #}~0U%}}^%!A_ "&?8OeO~?$eJ )eC0hYUG~0Zy5/r.Lg4:xL/\49&Tk-)AUD$M5}Ae[1M@F`IDI/)W1s29'&

Timestamp	kBytes transferred	Direction	Data
2023-11-06 16:08:34 UTC	5285	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 98194 Connection: close Last-Modified: Wed, 01 Nov 2023 16:07:39 GMT Server: AmazonS3 Date: Mon, 06 Nov 2023 13:41:07 GMT ETag: "6ba68ae0d3bea7d2d2d7262b7afe570e" X-Cache: Hit from cloudfront Via: 1.1 3d74f66e3b711da20aa96fcd74e086d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P2 X-Amz-Cf-Id: ecym3RA6DmB6XMMGvD0v20v4EDzapKOHgKWBef79d2VHpq-K49giqQ== Age: 8848 Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-11-06 16:08:34 UTC	5285	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 69 73 63 6f 76 65 72 79 49 66 72 61 6d 65 2d 65 61 39 32 33 30 63 34 32 61 32 30 32 34 37 35 65 66 64 38 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 4d 79 4f 6b 74 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 79 4f 6b 74 61 3f 4d 79 4f 6b 74 61 3a 7b 7d 3b 4d 79 4f 6b 74 61 2e 64 69 73 63 6f 76 65 72 79 49 66 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 Data Ascii: /! For license information please see discoveryIframe-ea9230c42a202475efd8.min.js.LICENSE.txt /var MyOkta="object"==typeof MyOkta?MyOkta:{};MyOkta.discoveryIframe=function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,expor
2023-11-06 16:08:34 UTC	5301	IN	Data Raw: 69 73 7d 28 29 3b 74 72 79 7b 72 3d 72 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 72 3d 77 69 6e 64 6f 77 29 7d 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 39 29 2e 66 2c 69 3d 72 28 31 35 29 2c 6f 3d 72 28 36 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 26 26 21 69 28 74 3d 72 3f 74 3a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 26 26 65 28 74 2c 6f 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 7d 7d 2c 66 75 6e 63 Data Ascii: is}();try{r=r\|\|new Function("return this")()}catch(t){"object"==typeof window&&(r=window)}t.exports=r},function(t,n,r){var e=r(9).f,i=r(15),o=r(6)("toStringTag");t.exports=function(t,n,r){t&&!i(t=r?t:t.prototype,o)&&e(t,o,{configurable:!0,value:n})}},func
2023-11-06 16:08:34 UTC	5367	IN	Data Raw: 26 21 72 28 34 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 28 36 39 29 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 2e 66 3d 72 28 36 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 31 35 29 2c 69 3d 72 28 31 36 29 2c 6f 3d 72 28 35 35 29 28 21 31 29 2c 75 3d 72 28 37 31 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 63 3d 69 28 74 29 2c 61 3d 30 2c 66 3d 5b 5d 3b 66 6f 72 28 72 20 69 6e 20 63 29 72 21 Data Ascii: &!r(4)((function(){return 7!=Object.defineProperty(r(69)("div"),"a",{get:function(){return 7}}).a}))},function(t,n,r){n.f=r(6)},function(t,n,r){var e=r(15),i=r(16),o=r(55)(!1),u=r(71)("IE_PROTO");t.exports=function(t,n){var r,c=i(t),a=0,f=[];for(r in c)r!
2023-11-06 16:08:34 UTC	5384	IN	Data Raw: 61 72 20 65 3d 72 28 30 29 3b 65 28 65 2e 53 2b 65 2e 46 2a 21 72 28 38 29 2c 22 4f 62 6a 65 63 74 22 2c 7b 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 72 28 39 29 2e 66 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 30 29 3b 65 28 65 2e 53 2b 65 2e 46 2a 21 72 28 38 29 2c 22 4f 62 6a 65 63 74 22 2c 7b 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 72 28 31 30 31 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 31 36 29 2c 69 3d 72 28 31 37 29 2e 66 3b 72 28 32 36 29 28 22 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 69 28 65 Data Ascii: ar e=r(0);e(e.S+e.F!r(8),"Object",{defineProperty:r(9).f})},function(t,n,r){var e=r(0);e(e.S+e.F!r(8),"Object",{defineProperties:r(101)})},function(t,n,r){var e=r(16),i=r(17).f;r(26)("getOwnPropertyDescriptor",(function(){return function(t,n){return i(e
2023-11-06 16:08:34 UTC	5400	IN	Data Raw: 3b 65 28 65 2e 50 2c 22 41 72 72 61 79 22 2c 7b 66 69 6c 6c 3a 72 28 38 38 29 7d 29 2c 72 28 33 32 29 28 22 66 69 6c 6c 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 30 29 2c 69 3d 72 28 32 37 29 28 35 29 2c 6f 3d 22 66 69 6e 64 22 2c 75 3d 21 30 3b 6f 20 69 6e 5b 5d 26 26 41 72 72 61 79 28 31 29 5b 6f 5d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 75 3d 21 31 7d 29 29 2c 65 28 65 2e 50 2b 65 2e 46 2a 75 2c 22 41 72 72 61 79 22 2c 7b 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 72 28 33 32 29 28 6f 29 7d Data Ascii: ;e(e.P,"Array",{fill:r(88)}),r(32)("fill")},function(t,n,r){"use strict";var e=r(0),i=r(27)(5),o="find",u=!0;o in[]&&Array(1)[o]((function(){u=!1})),e(e.P+e.F*u,"Array",{find:function(t){return i(this,t,arguments.length>1?arguments[1]:void 0)}}),r(32)(o)}
2023-11-06 16:08:34 UTC	5416	IN	Data Raw: 28 74 68 69 73 29 2c 65 3d 6f 28 74 2c 21 30 29 3b 64 6f 7b 69 66 28 6e 3d 63 28 72 2c 65 29 29 72 65 74 75 72 6e 20 6e 2e 67 65 74 7d 77 68 69 6c 65 28 72 3d 75 28 72 29 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 30 29 2c 69 3d 72 28 31 30 29 2c 6f 3d 72 28 32 34 29 2c 75 3d 72 28 31 38 29 2c 63 3d 72 28 31 37 29 2e 66 3b 72 28 38 29 26 26 65 28 65 2e 50 2b 72 28 36 36 29 2c 22 4f 62 6a 65 63 74 22 2c 7b 5f 5f 6c 6f 6f 6b 75 70 53 65 74 74 65 72 5f 5f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 72 3d 69 28 74 68 69 73 29 2c 65 3d 6f 28 74 2c 21 30 29 3b 64 6f 7b 69 66 28 6e 3d 63 28 72 2c 65 29 29 72 65 74 75 72 6e 20 6e 2e 73 65 74 7d 77 68 69 6c 65 28 72 Data Ascii: (this),e=o(t,!0);do{if(n=c(r,e))return n.get}while(r=u(r))}})},function(t,n,r){"use strict";var e=r(0),i=r(10),o=r(24),u=r(18),c=r(17).f;r(8)&&e(e.P+r(66),"Object",{__lookupSetter__:function(t){var n,r=i(this),e=o(t,!0);do{if(n=c(r,e))return n.set}while(r
2023-11-06 16:08:34 UTC	5432	IN	Data Raw: 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6e 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 6e 3d 65 2e 64 65 66 61 75 6c 74 2e 67 65 74 4f 6b 74 61 45 6e 76 69 72 6f 6e 6d 65 6e 74 28 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 3b 69 2e 64 65 66 61 75 6c 74 2e 73 74 61 72 74 41 63 63 6f 75 6e 74 53 74 6f 72 61 67 65 28 6e 2e 74 72 75 73 74 65 64 52 6f 6f 74 44 6f 6d 61 69 6e 73 2c 74 29 2c 74 2e 70 61 72 65 6e 74 26 26 74 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 6d 65 73 73 61 67 65 54 79 70 65 3a 22 69 66 72 61 6d 65 5f 6c 6f 61 64 65 64 22 7d 2c 22 2a 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 3b 76 61 72 20 Data Ascii: ,{value:!0}),n.init=function(t){try{t.onerror=function(){return!0};var n=e.default.getOktaEnvironment(t.location.host);i.default.startAccountStorage(n.trustedRootDomains,t),t.parent&&t.parent.postMessage({messageType:"iframe_loaded"},"*")}catch(t){}};var