Edit tour

Windows Analysis Report
Notification Detail.html

Overview

General Information

Sample name:	Notification Detail.html
Analysis ID:	1387093
MD5:	d066c67632e0b40d9da9ef516fa02a09
SHA1:	3db9ee637ea202315123febf1ccb271d7f2140df
SHA256:	8d7fc71a564ae2c447016652da0e406e54944f60a559078aa44baaaefedeae2d
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected javascript redirector / loader

HTML document with suspicious name

Creates files inside the system directory

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2484 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Notification Detail.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1900,i,15241624116434089059,17499599999723908325,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

Phishing

Detected javascript redirector / loader

Source: Notification Detail.html

HTTP Parser: Low number of body elements: 0

Source: Notification Detail.html

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49805 version: TLS 1.2

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi/tm?code=85abf7d1be83e9a0 HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/tmindex.html HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/jquery.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/jquery-ui.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/jquery.ui.touch-punch.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/jquery-migrate.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/init.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/hammer.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/jquery.dotdotdot.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/velocity.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/slick.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/external/elliptic.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/wspinner@2x.gif HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/ctxs.core.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/ctxs.webui.min.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/wspinner@2x.gif HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/style.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/script.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/actionSprite.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/folder_template.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/viewSprite.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/localization/en/ctxs.strings.js?_=1707160776753 HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0X-Citrix-IsUsingHTTPS: YesUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/Home/Configuration HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/icon_vpn.ico HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/actionSprite.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/folder_template.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/viewSprite.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/ico_search.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://isupplier.gdls.com/logon/LogonPoint/tmindex.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "136c4-60f55b1081e40"If-Modified-Since: Sat, 20 Jan 2024 00:29:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a0e-60f9277464640"If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/style.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "0-60f9277558880"If-Modified-Since: Tue, 23 Jan 2024 01:00:02 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/ico_desktop_ready.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://isupplier.gdls.com/logon/LogonPoint/tmindex.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/strings.en.js?_=1707160776754 HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0X-Citrix-IsUsingHTTPS: YesUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/js/localization/en/ctxs.strings.js?_=1707160776753 HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/icon_vpn.ico HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/ico_search.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/strings.en.json HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0X-Citrix-IsUsingHTTPS: YesUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/custom_media/1586320.jpg HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/1x/ico_desktop_ready.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/strings.en.js?_=1707160776754 HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/plugins/ns-gateway/nsg-epa.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/plugins/ns-gateway/nsg-setclient.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/strings.en.json HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/plugins/ns-gateway/ns-nfactor.js HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /nf/auth/getECdetails HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0X-Citrix-IsUsingHTTPS: YesUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/custom_media/1586320.jpg HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /cgi/Resources/List HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /vpn/images/NetScaler-AAA-logo-white-header.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /nf/auth/getECdetails HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/Resources/List HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /cgi/Resources/List HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /cgi/GetAuthMethods HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /vpn/images/NetScaler-AAA-logo-white-header.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "136c4-60f55b1081e40"If-Modified-Since: Sat, 20 Jan 2024 00:29:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a0e-60f9277464640"If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /nf/auth/getAuthenticationRequirements.do HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/custom_media/logo.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/authspinner.gif HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/authspinner.gif HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/custom_media/logo.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UE+GEmCtMd9tGWv&MD=FbBOknD2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "136c4-60f55b1081e40"If-Modified-Since: Sat, 20 Jan 2024 00:29:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a0e-60f9277464640"If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/custom/style.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "0-60f9277558880"If-Modified-Since: Tue, 23 Jan 2024 01:00:02 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/ReceiverFullScreenBackground.jpg HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /vpn/media/NetScaler-AAA-logo-center.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /vpn/media/NetScaler-AAA-logo-center.png HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/images/common/ReceiverFullScreenBackground.jpg HTTP/1.1Host: isupplier.gdls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "136c4-60f55b1081e40"If-Modified-Since: Sat, 20 Jan 2024 00:29:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a0e-60f9277464640"If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "136c4-60f55b1081e40"If-Modified-Since: Sat, 20 Jan 2024 00:29:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /logon/themes/Default/css/theme.css HTTP/1.1Host: isupplier.gdls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "a0e-60f9277464640"If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UE+GEmCtMd9tGWv&MD=FbBOknD2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000007903955570 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: chromecache_158.2.dr	String found in binary or memory: http://citrix.com/authentication/response/extensions/1
Source: chromecache_158.2.dr	String found in binary or memory: http://citrix.com/authentication/response/webview/1
Source: chromecache_158.2.dr	String found in binary or memory: http://support.citrix.com/article/CTX141137
Source: chromecache_153.2.dr	String found in binary or memory: https://downloadplugins.citrix.com/Mac/CitrixWorkspaceAppWeb.dmg
Source: chromecache_153.2.dr	String found in binary or memory: https://downloadplugins.citrix.com/Windows/CitrixWorkspaceAppWeb.exe
Source: chromecache_156.2.dr	String found in binary or memory: https://github.com/indutny/elliptic
Source: chromecache_156.2.dr	String found in binary or memory: https://github.com/indutny/elliptic/issues
Source: Notification Detail.html	String found in binary or memory: https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_grou
Source: chromecache_126.2.dr	String found in binary or memory: https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=change
Source: chromecache_126.2.dr	String found in binary or memory: https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=enroll
Source: chromecache_126.2.dr	String found in binary or memory: https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=reset
Source: chromecache_142.2.dr	String found in binary or memory: https://otp.com
Source: chromecache_142.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49805 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Notification Detail.html

Initial sample: detail

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_2484_1341771328

Jump to behavior

Source: classification engine

Classification label: mal48.phis.winHTML@27/89@12/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Notification Detail.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1900,i,15241624116434089059,17499599999723908325,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1900,i,15241624116434089059,17499599999723908325,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_123.2.dr	Binary or memory string: function aggregateVMWareapps(){var a=CTXS.getCookie("NSC_AAAC");a&&(a=Base64.encode(a));$.ctxsAjax({type:"GET",url:"/cgi/pcoip",dataType:"xml",async:!1,suppressEvents:!0,success:function(b,d,c){var e=$($(c.responseXML).find("launch-items")).find("desktops");c=$($(c.responseXML).find("launch-items")).find("applications");b={clienttypes:[],iconurl:"/vpn/media/Desktop.png",id:"",launchurl:"",playlists:[],isVMWareApp:!0,isGatewayBookmark:!0,shortcutvalidationurl:"",subscriptionstatus:"unsubscribed",subscriptionurl:CTXS.Gateway.HomePageConfig.GatewayBaseURL+
Source: chromecache_123.2.dr	Binary or memory string: 2,0,vmwarebundle),console.log(json.resources)):b&&(adminBundlePushed\|\|personalBundlePushed)?json.bundles.splice(json.bundles.length-1,0,vmwarebundle):b&&json.bundles.push(vmwarebundle)}}function failCb(){console.log("VMware client not installed");CTXS.ExtensionAPI.showMessage({localize:!0,messageText:"vmware_install_reqd_msg",messageTitle:"vmware_missing_title",okButtonText:"OK",isalert:!1,okAction:function(){}})}function successCb(){}
Source: chromecache_163.2.dr	Binary or memory string: "vmware_apps_title":"VMware Apps",
Source: chromecache_133.2.dr	Binary or memory string: Personal_apps_bundle_title:"Personal Bookmarks",Admin_apps_title:"Citrix Gateway Bookmarks",Personal_apps_title:"Personal Bookmarks",vmware_bundle_descr:"Apps from VMware",vmware_bundle_title:"VMware Apps",vmware_apps_title:"VMware Apps",vmware_missing_title:"VMware client missing",vmware_install_reqd_msg:"Please install the VMware Horizon Client",MaxLoginAttempts:"You have exceeded the maximum login attempts.",NoClientChoices:"There are no access modes available to you at this time. Please contact your help desk",
Source: chromecache_123.2.dr	Binary or memory string: (CTXS.Gateway.bookmarksKnob.vmwareAppsAggregated\|\|aggregateVMWareapps());DeleteButton=a('<a id="appInfoDeleteBtn" href="#" class="theme-highlight-color theme-highlight-border-color appInfoActionButton _ctxstxt_Delete"></a>');DeleteButton.text(_localize("Delete"));a(".appInfoActions").append(DeleteButton);CTXS.Widgets.AppInfoWidget.prototype.displayButtons=function(c){this.$DeleteBtn=this.$actionButtons.find("#appInfoDeleteBtn");var b=this.$addBtn.is(":visible"),d=this.$removeBtn.is(":visible"),e=
Source: chromecache_123.2.dr	Binary or memory string: function aggregateAllApps(a){getHomepageConfig(a);getBoomarksDisplay();aggregatePersonalBookmarks(a);aggregateAdminBookmarks(a);mixvmwareapps(a);getSFHomeConfig(a)}
Source: chromecache_163.2.dr	Binary or memory string: "vmware_bundle_descr":"Apps from VMware",
Source: chromecache_163.2.dr	Binary or memory string: "vmware_bundle_title":"VMware Apps",
Source: chromecache_123.2.dr	Binary or memory string: CTXS.Gateway.bookmarksKnob={getBookmarkDisplayDone:!1,vmwareAppsAggregated:!1,personalBookmarkRefreshNeeded:!0,getHomepageConfigDone:!1,loadedVMwareapps:!1,AdminBookmarksadded:!1};CTXS.Gateway.Apps={hasVmwareApps:!1,hasVmwareDesktops:!1};
Source: chromecache_163.2.dr	Binary or memory string: "vmware_install_reqd_msg":"Please install the VMware Horizon Client",
Source: chromecache_123.2.dr	Binary or memory string: c){return a.isGatewayBookmark?(d=a.content.toLowerCase(),0!=d.indexOf("http://")&&0!=d.indexOf("rdp://")&&0!=d.indexOf("https://")&&0!=d.indexOf("ftp://")&&0!=d.indexOf("vmware-view://")&&(a.content="https://"+a.content),c().replace('<a href="#" class="storeapp-details-link">','<a href="'+a.content+'" class="storeapp-details-link">')):c()}})})(jQuery);
Source: chromecache_123.2.dr	Binary or memory string: function checkifVMwareApp(a,b,d){(b=CTXS.Store.getAppByShortId(d))&&b.isVMWareApp&&(b.isLaunchInProgress?1==b.tries&&(b.isLaunchInProgress=!1,b.tries=0):(b.tries=1,b.isLaunchInProgress=!0,window.protocolCheck(b.content,failCb,successCb),a.preventDefault(),a.stopPropagation()))}
Source: chromecache_123.2.dr	Binary or memory string: "/vpns/portal/scripts/subscription.pl"};var h;for(h=0;h<e.find("desktop").length;h++){d=$.extend(!0,{},b);for(var f=$($(e.find("desktop")[h]).find("protocols")).find("protocol"),g=0;g<f.length;g++)if("PCOIP"==$(f[g]).find("name").text()){d.pcoip=!0;break}1==d.pcoip&&(f=window.location.host,g=$(e.find("desktop")[h]).find("id").text(),d.content="vmware-view://"+f+"/"+escape(g)+"?SAMLart="+a,d.name=$($(e.find("desktop")[h]).find("name")[0]).text(),d.playlists.push(d.name),d.path="\\"+_localize("vmware_apps_title"),
Source: chromecache_123.2.dr	Binary or memory string: h=$(c.find("application")[e]).find("id").text();d.content="vmware-view://"+f+"/"+escape(h)+"?SAMLart="+a;d.name=$($(c.find("application")[e]).find("name")[0]).text();d.playlists.push(d.name);d.path="\\"+_localize("vmware_apps_title");d.id=d.name;d.keywords=vmwareBookmarksKeyword;h=$($(c.find("application")[e]).find("icons")[0]).find("icon");for(f=0;f<h.length;f++)"48"==$(h[f]).find("width").text()&&(d.iconurl=$(h[f]).find("path").text());vmwareApps.resources.push(d)}}CTXS.Gateway.Apps.hasVmwareApps=
Source: chromecache_163.2.dr	Binary or memory string: "vmware_missing_title":"VMware client missing",
Source: chromecache_123.2.dr	Binary or memory string: function mixvmwareapps(a){$(".store-apps-container").on("click",".storeapp-details-link",function(b){var c=$(this).closest(".storeapp"),c=CTXS.Views.AppView.getAppShortId(c);checkifVMwareApp(b,a,c)});if(CTXS.Gateway.bookmarksKnob.loadedVMwareapps){for(var b=0;b<vmwareApps.resources.length;b++)json.resources.push(vmwareApps.resources[b]);if(b){$("body").find(".home-view").find(".no-apps-or-desktops-message").hide();var d="apps"===CTXS.Config.getConfigValue("userInterface.uiViews.defaultView")&&"true"===
Source: chromecache_123.2.dr	Binary or memory string: var vmwareApps={resources:[]};
Source: chromecache_123.2.dr	Binary or memory string: e?!0:!1;CTXS.Gateway.bookmarksKnob.loadedVMwareapps=!0;CTXS.Gateway.bookmarksKnob.personalBookmarkRefreshNeeded=!1;refreshApps();CTXS.Gateway.bookmarksKnob.vmwareAppsAggregated=!0},error:function(a,d,c){console.log("Error in getting VMware resources")},refreshSession:!0})}
Source: chromecache_123.2.dr	Binary or memory string: keywords:personalBookmarksKeyword,apps:[]},vmwarebundle={description:_localize("vmware_bundle_descr"),tileid:"appBundle4",title:_localize("vmware_bundle_title"),keywords:vmwareBookmarksKeyword,apps:[]};CTXS.UI.repeatAppGroupTiles=!1;
Source: chromecache_123.2.dr	Binary or memory string: d.id=d.name+".vmware",f=getSubscriptionStatus(Base64.encode(d.id)),null!=f&&(d.subscriptionstatus="subscribed",d.position=f),d.isdesktop="true",d.keywords=vmwareBookmarksKeyword,vmwareApps.resources.push(d))}CTXS.Gateway.Apps.hasVmwareDesktops=h?!0:!1;for(e=0;e<c.find("application").length;e++){d=$.extend(!0,{},b);f=$($(c.find("application")[e]).find("protocols")).find("protocol");for(g=0;g<f.length;g++)if("PCOIP"==$(f[g]).find("name").text()){d.pcoip=!0;break}if(1==d.pcoip){f=window.location.host;
Source: chromecache_123.2.dr	Binary or memory string: var showEnterpriseBookmarks=!0,showPersonalBookmarks=!0,showLogout,gatewayBookmarksKeyword=["GatewayEnterpriseBookmarks"],personalBookmarksKeyword=["GatewayPersonalBookmarks"],vmwareBookmarksKeyword=["vmwareBookmarks"],gatewayBundle={description:_localize("Admin_apps_bundle_descr"),tileid:"appBundle3",title:_localize("Admin_apps_bundle_title"),keywords:gatewayBookmarksKeyword,apps:[]},personalBundle={description:_localize("Personal_apps_bundle_descr"),tileid:"appBundle2",title:_localize("Personal_apps_bundle_title"),
Source: chromecache_123.2.dr	Binary or memory string: CTXS.Config.getConfigValue("userInterface.uiViews.showAppsView")&&CTXS.Gateway.Apps.hasVmwareApps,c="desktops"===CTXS.Config.getConfigValue("userInterface.uiViews.defaultView")&&"true"===CTXS.Config.getConfigValue("userInterface.uiViews.showDesktopsView")&&CTXS.Gateway.Apps.hasVmwareDesktops;d?CTXS.Events.publish(CTXS.Events.ui.showAllApps):c?CTXS.Events.publish(CTXS.Events.ui.showDesktops):CTXS.Events.publish(CTXS.Events.ui.showMyApps)}b&&adminBundlePushed&&personalBundlePushed?(json.bundles.splice(json.bundles.length-

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
about:blank	0%	Avira URL Cloud	safe
https://otp.com	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
isupplier.gdls.com	192.136.15.207	true	false	high
accounts.google.com	142.250.105.84	true	false	high
www.google.com	64.233.177.104	true	false	high
clients.l.google.com	172.217.215.102	true	false	high
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://isupplier.gdls.com/logon/LogonPoint/Resources/List	false		high
https://isupplier.gdls.com/logon/themes/Default/custom_media/logo.png	false		high
https://isupplier.gdls.com/cgi/tm?code=85abf7d1be83e9a0	false		high
https://isupplier.gdls.com/logon/LogonPoint/init.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/hammer.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/1x/viewSprite.png	false		high
about:blank	false	Avira URL Cloud: safe	low
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery-ui.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/slick.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/elliptic.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/plugins/ns-gateway/nsg-setclient.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/common/authspinner.gif	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/custom/strings.en.js?_=1707160776754	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/common/wspinner@2x.gif	false		high
https://isupplier.gdls.com/nf/auth/getAuthenticationRequirements.do	false		high
https://isupplier.gdls.com/vpn/media/NetScaler-AAA-logo-center.png	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/1x/actionSprite.png	false		high
https://isupplier.gdls.com/logon/themes/Default/css/theme.css	false		high
https://isupplier.gdls.com/logon/LogonPoint/custom/script.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/ctxs.webui.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery.dotdotdot.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/custom/strings.en.json	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/common/ReceiverFullScreenBackground.jpg	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/localization/en/ctxs.strings.js?_=1707160776753	false		high
https://isupplier.gdls.com/logon/LogonPoint/plugins/ns-gateway/ns-nfactor.js	false		high
https://isupplier.gdls.com/cgi/Resources/List	false		high
https://isupplier.gdls.com/vpn/images/NetScaler-AAA-logo-white-header.png	false		high
https://isupplier.gdls.com/logon/LogonPoint/plugins/ns-gateway/nsg-epa.js	false		high
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000007903955570	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/1x/ico_desktop_ready.png	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery.ui.touch-punch.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery-migrate.min.js	false		high
https://isupplier.gdls.com/logon/LogonPoint/custom/style.css	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/common/icon_vpn.ico	false		high
https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta	false		high
https://isupplier.gdls.com/nf/auth/getECdetails	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/1x/ico_search.png	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/images/1x/folder_template.png	false		high
https://isupplier.gdls.com/logon/LogonPoint/tmindex.html	false		high
https://isupplier.gdls.com/logon/LogonPoint/Home/Configuration	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/velocity.min.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://isupplier.gdls.com/logon/themes/Default/custom_media/1586320.jpg	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/css/ctxs.large-ui.min.css	false		high
https://isupplier.gdls.com/cgi/GetAuthMethods	false		high
https://isupplier.gdls.com/logon/LogonPoint/receiver/js/ctxs.core.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://citrix.com/authentication/response/extensions/1	chromecache_158.2.dr	false		high
https://otp.com	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://downloadplugins.citrix.com/Mac/CitrixWorkspaceAppWeb.dmg	chromecache_153.2.dr	false		high
https://downloadplugins.citrix.com/Windows/CitrixWorkspaceAppWeb.exe	chromecache_153.2.dr	false		high
https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=change	chromecache_126.2.dr	false		high
https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_grou	Notification Detail.html	false		high
https://www.google.com/recaptcha/api.js	chromecache_142.2.dr	false		high
https://github.com/indutny/elliptic/issues	chromecache_156.2.dr	false		high
https://github.com/indutny/elliptic	chromecache_156.2.dr	false		high
http://support.citrix.com/article/CTX141137	chromecache_158.2.dr	false		high
https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=reset	chromecache_126.2.dr	false		high
https://isupplierreset.gdls.com/pwreset/apr.dll?cmd=enroll	chromecache_126.2.dr	false		high
http://citrix.com/authentication/response/webview/1	chromecache_158.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.124.100	unknown	United States	15169	GOOGLEUS	false
172.217.215.102	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.105.84	accounts.google.com	United States	15169	GOOGLEUS	false
64.233.177.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.136.15.207	isupplier.gdls.com	United States	26649	GDCLSD-ASUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	39.0.0 Ruby
Analysis ID:	1387093
Start date and time:	2024-02-05 20:18:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Notification Detail.html
Detection:	MAL
Classification:	mal48.phis.winHTML@27/89@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 34.104.35.123, 64.233.176.95, 74.125.136.95, 142.250.105.95, 142.250.9.95, 64.233.185.95, 64.233.177.95, 172.217.215.95, 142.251.15.95, 173.194.219.95, 172.253.124.95, 108.177.122.95, 74.125.138.95, 69.164.42.0, 192.229.211.108, 142.251.15.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, optimizationguide-pa.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: Notification Detail.html

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://gmailfsou5.ebtrk2.com/openurl?lid=6562454599630848&nid=4795232885669888&c=&s=&ci=&e_id=	Get hash	malicious	Unknown	Browse
	https://www.research.net/r/RXY5HK9	Get hash	malicious	HTMLPhisher	Browse
	INV_093833635.html	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	Kwoodman_Fax.html	Get hash	malicious	Unknown	Browse
	https://telegra.ph/St-JCPD-02-05-2	Get hash	malicious	HTMLPhisher	Browse
	3048923].eml	Get hash	malicious	Unknown	Browse
	https://padlet.com/ashleeruhl/amerisave-realty-llc-pta3kpc1h3bxydr4	Get hash	malicious	Unknown	Browse
	http://www.norwii.com/downloads/presenter/windows/nda.exe	Get hash	malicious	Unknown	Browse
	https://supply-chain.my.canva.site/blue-heron	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://www.google.com.np/amp/s/www.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Fimmofiplus.com%252Fcgi-bin%252F%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw3plx_rZYk875jSTY_j4-Gb#?im=Y2dhdGVzQGFjYy5vcmc=	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GDCLSD-ASUS	NsOfoVRd69.elf	Get hash	malicious	Mirai	Browse	136.180.127.49
	Y0MTq91T1o.elf	Get hash	malicious	Mirai, RapperBot	Browse	136.180.127.61
	8p0gCkbCXN.elf	Get hash	malicious	Mirai, Moobot	Browse	136.180.203.174
	DCAXKjdwLY.elf	Get hash	malicious	Mirai	Browse	136.180.198.251
	pqFJlR8iBF.elf	Get hash	malicious	Mirai	Browse	136.180.103.84
	xPD6Q78Pfn.elf	Get hash	malicious	Mirai, Moobot	Browse	136.180.103.52
	x86_64-20220923-2007.elf	Get hash	malicious	Mirai, Moobot	Browse	136.180.203.184
	arm-20220921-0518.elf	Get hash	malicious	Mirai, Moobot	Browse	136.180.198.251
	b3astmode.arm	Get hash	malicious	Mirai	Browse	136.180.36.114
	oEzG7ys5uh	Get hash	malicious	Mirai	Browse	136.180.103.36

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://gmailfsou5.ebtrk2.com/openurl?lid=6562454599630848&nid=4795232885669888&c=&s=&ci=&e_id=	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	INV_093833635.html	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.165.165.26 23.54.200.130
	https://padlet.com/ashleeruhl/amerisave-realty-llc-pta3kpc1h3bxydr4	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	http://www.norwii.com/downloads/presenter/windows/nda.exe	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	https://www.google.com.np/amp/s/www.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Fimmofiplus.com%252Fcgi-bin%252F%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw3plx_rZYk875jSTY_j4-Gb#?im=Y2dhdGVzQGFjYy5vcmc=	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	http://yaatde.com	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	http://booking.id-72395.com/booking-id/	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	https://app.milanote.com/1RwUfA1xOhZo6R?p=6OczvyXVPum	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	FW EXTERNALRequest For ACH Completion Form February 05 2024.msg	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130
	http://v22-ispdy5ersd-ai-verify--gcs.g-xyz.xyz	Get hash	malicious	Unknown	Browse	52.165.165.26 23.54.200.130

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	5.039763752920854
Encrypted:	false
SSDEEP:	24:2qpbx7akbZL8VdeO0ptJ4zaVS8RARtq6oU2s1z6oHaBv:L6Y/KRVWUd6Z
MD5:	366B5BB7E1A9493A85FB55C1214AC0B3
SHA1:	D9C66739293C205420E5BE0DE117370DD82EBE45
SHA-256:	BA4E6AF952AD38ED336E34950AC7DD236DB7238C315418431A53263A84760305
SHA-512:	FE9EE086C4B2619D328D698E5F2140203EFF2E684187E3F9DC32A45BF3063DEFC93C2E48EB64527E3AD5F308E74C0A71B773BD1C23C4C761229D3D21E76AD75A
Malicious:	false
Reputation:	low
URL:	https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery.ui.touch-punch.min.js
Preview:	(function(c){function b(a,c){if(!(1<a.originalEvent.touches.length)){a.preventDefault();var b=a.originalEvent.changedTouches[0],d=document.createEvent("MouseEvents");d.initMouseEvent(c,!0,!0,window,1,b.screenX,b.screenY,b.clientX,b.clientY,!1,!1,!1,!1,0,null);a.target.dispatchEvent(d)}}c.support.touch="ontouchend"in document;if(c.support.touch){var d=c.ui.mouse.prototype,f=d._mouseInit,g=d._mouseDestroy,e;d._touchStart=function(a){!e&&this._mouseCapture(a.originalEvent.changedTouches[0])&&(e=!0,this._touchMoved=.!1,b(a,"mouseover"),b(a,"mousemove"),b(a,"mousedown"))};d._touchMove=function(a){e&&(this._touchMoved=!0,b(a,"mousemove"))};d._touchEnd=function(a){e&&(b(a,"mouseup"),b(a,"mouseout"),this._touchMoved\|\|b(a,"click"),e=!1)};d._mouseInit=function(){this.element.bind({touchstart:c.proxy(this,"_touchStart"),touchmove:c.proxy(this,"_touchMove"),touchend:c.proxy(this,"_touchEnd")});f.call(this)};d._mouseDestroy=function(){this.element.unbind({touchstart:c.proxy(this,"_touchStart"),touc

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.707364559893946
TrID:	HyperText Markup Language (12001/1) 40.67% HyperText Markup Language (11501/1) 38.98% HyperText Markup Language (6006/1) 20.35%
File name:	Notification Detail.html
File size:	371 bytes
MD5:	d066c67632e0b40d9da9ef516fa02a09
SHA1:	3db9ee637ea202315123febf1ccb271d7f2140df
SHA256:	8d7fc71a564ae2c447016652da0e406e54944f60a559078aa44baaaefedeae2d
SHA512:	9cbc1fa8940ce9d72b43bebbb43e64295c1706619800e7b0bf630951e44a7c82ae52be82b0ae3b3d954898133a6760ef07cd52337851770f97e9783ade4cd687
SSDEEP:	6:q43tWuJGqK/0MFpROUt+b1UyvErHacRO0yneFLxwiXkQfGb:TsBX/LFHOUov6aze/wiXk8Gb
TLSH:	E8E0C0FB4150EC6616BB44BD24C3DC4450F320066A8B538DD624C9E323B4A6AD7875EC
File Content Preview:	<html>..<head>..<title>Detail notification for SANDRA KELLER</title>..</head>..<body>..<SCRIPT LANGUAGE="JavaScript">.. ..self.location = 'https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_c

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 5, 2024 20:19:34.192235947 CET	53	52291	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.233501911 CET	56591	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.233876944 CET	61953	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.235182047 CET	58811	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.235522032 CET	50479	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.236413956 CET	61272	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.236675024 CET	65438	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:34.351000071 CET	53	56591	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.352349043 CET	53	61953	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.352946997 CET	53	50479	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.352991104 CET	53	58811	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.378199100 CET	53	61272	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.390645981 CET	53	65438	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:34.955138922 CET	53	54236	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:37.249912024 CET	58025	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:37.250665903 CET	58414	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:37.412765026 CET	53	58025	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:37.415394068 CET	53	58414	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:38.728943110 CET	51260	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:38.729743958 CET	51400	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:19:38.846050024 CET	53	51260	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:38.847038031 CET	53	51400	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:39.071577072 CET	53	59939	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:47.314558983 CET	53	59800	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:52.064769030 CET	53	65493	1.1.1.1	192.168.2.4
Feb 5, 2024 20:19:54.170974016 CET	138	138	192.168.2.4	192.168.2.255
Feb 5, 2024 20:20:10.844274998 CET	53	57740	1.1.1.1	192.168.2.4
Feb 5, 2024 20:20:33.156477928 CET	53	51575	1.1.1.1	192.168.2.4
Feb 5, 2024 20:20:33.844985962 CET	53	56346	1.1.1.1	192.168.2.4
Feb 5, 2024 20:21:01.935750008 CET	53	51638	1.1.1.1	192.168.2.4
Feb 5, 2024 20:21:03.426805973 CET	63981	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:21:03.427359104 CET	59003	53	192.168.2.4	1.1.1.1
Feb 5, 2024 20:21:03.544397116 CET	53	63981	1.1.1.1	192.168.2.4
Feb 5, 2024 20:21:03.545820951 CET	53	59003	1.1.1.1	192.168.2.4
Feb 5, 2024 20:21:48.060363054 CET	53	55877	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:34 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-05 19:19:34 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-05 19:19:34 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 05 Feb 2024 19:19:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-BH6HSIRAapyl0dwEINrmDg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw1JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQFiIR6OYy9b1rEJzPg_6RETALeQF9U" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-05 19:19:34 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-05 19:19:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:34 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-05 19:19:34 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-AucS7Dr856jGlitLRGIw6A' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 05 Feb 2024 19:19:34 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6244 X-Daystart: 40774 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-05 19:19:34 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 34 34 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 30 37 37 34 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6244" elapsed_seconds="40774"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-05 19:19:34 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-05 19:19:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:34 UTC	811	OUT	GET /OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-05 19:19:35 UTC	383	IN	HTTP/1.1 302 Object Moved Location: https://isupplier.gdls.com/cgi/tm?code=85abf7d1be83e9a0 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Content-Length: 0 Cache-control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: text/html; charset=utf-8

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:35 UTC	675	OUT	GET /cgi/tm?code=85abf7d1be83e9a0 HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-05 19:19:35 UTC	941	IN	HTTP/1.1 302 Object Moved Location: /logon/LogonPoint/tmindex.html Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Set-Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0;HttpOnly;Path=/;Secure Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Content-Length: 413 Cache-control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: text/html; charset=utf-8
2024-02-05 19:19:35 UTC	279	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 76 70 6e 2f 72 65 73 6f 75 72 63 65 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 76 70 6e 2f 69 6e 69 74 2f 72 65 64 69 72 65 63 74 69 6f 6e 5f 62 6f 64 79 5f 72 65 73 6f 75 72 63 65 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 70 61 6e 20 69 64 3d 22 54 68 69 Data Ascii: <html><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8"><script type="text/javascript" src="/vpn/resources.js"></script><script type="text/javascript" src="/vpn/init/redirection_body_resources.js"></script></head><body><span id="Thi
2024-02-05 19:19:35 UTC	134	IN	Data Raw: 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 6e 2f 4c 6f 67 6f 6e 50 6f 69 6e 74 2f 74 6d 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 3c 73 70 61 6e 20 69 64 3d 22 68 65 72 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 73 70 61 6e 20 69 64 3d 22 54 72 61 69 6c 69 6e 67 20 70 68 72 61 73 65 20 61 66 74 65 72 20 68 65 72 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: </span><a href="/logon/LogonPoint/tmindex.html"><span id="here"></span></a><span id="Trailing phrase after here"></span></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:36 UTC	769	OUT	GET /logon/LogonPoint/receiver/js/external/jquery-ui.min.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:36 UTC	695	IN	HTTP/1.1 200 OK Age: 69 Date: Mon, 05 Feb 2024 19:16:51 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "3e4c7-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 255175 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=100 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:36 UTC	6596	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 64 29 3a 64 28 6a 51 75 65 72 79 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 55 5b 66 61 2e 63 61 6c 6c 28 61 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 57 5b 62 2e 74 79 70 65 5d 7c 7c 7b 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 63 7c 7c 21 62 2e 64 65 66 3f 6e 75 6c 6c 3a Data Ascii: (function(d){"function"===typeof define&&define.amd?define(["jquery"],d):d(jQuery)})(function(d){function J(a){return null==a?a+"":"object"===typeof a?U[fa.call(a)]\|\|"object":typeof a}function M(a,b,c){var d=W[b.type]\|\|{};if(null==a)return c\|\|!b.def?null:
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 7b 7d 3b 64 2e 57 69 64 67 65 74 2e 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3d 0a 5b 5d 3b 64 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 77 69 64 67 65 74 4e 61 6d 65 3a 22 77 69 64 67 65 74 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 22 2c 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 3a 22 3c 64 69 76 3e 22 2c 6f 70 74 69 6f 6e 73 3a 7b 63 6c 61 73 73 65 73 3a 7b 7d 2c 64 69 73 61 62 6c 65 64 3a 21 31 2c 63 72 65 61 74 65 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 57 69 64 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 64 28 62 7c 7c 74 68 69 73 2e 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 29 5b 30 5d 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 64 28 62 29 3b 74 68 69 73 2e 75 75 69 Data Ascii: {};d.Widget._childConstructors=[];d.Widget.prototype={widgetName:"widget",widgetEventPrefix:"",defaultElement:"<div>",options:{classes:{},disabled:!1,create:null},_createWidget:function(a,b){b=d(b\|\|this.defaultElement\|\|this)[0];this.element=d(b);this.uui
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 26 26 39 3d 3d 3d 62 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 6e 74 3a 62 2c 69 73 57 69 6e 64 6f 77 3a 63 2c 69 73 44 6f 63 75 6d 65 6e 74 3a 66 2c 6f 66 66 73 65 74 3a 63 7c 7c 66 3f 7b 6c 65 66 74 3a 30 2c 74 6f 70 3a 30 7d 3a 64 28 61 29 2e 6f 66 66 73 65 74 28 29 2c 73 63 72 6f 6c 6c 4c 65 66 74 3a 62 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 73 63 72 6f 6c 6c 54 6f 70 3a 62 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 77 69 64 74 68 3a 62 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 62 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 7d 7d 3b 64 2e 66 6e 2e 70 6f 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 21 63 7c 7c 21 63 2e 6f 66 29 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 68 Data Ascii: &&9===b[0].nodeType;return{element:b,isWindow:c,isDocument:f,offset:c\|\|f?{left:0,top:0}:d(a).offset(),scrollLeft:b.scrollLeft(),scrollTop:b.scrollTop(),width:b.outerWidth(),height:b.outerHeight()}}};d.fn.position=function(c){if(!c\|\|!c.of)return n.apply(th
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 6e 20 63 7d 2c 5f 73 70 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 5d 2c 62 3d 74 68 69 73 3b 45 28 46 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 62 5b 64 2e 63 61 63 68 65 5d 26 26 61 2e 70 75 73 68 28 63 29 7d 29 3b 72 65 74 75 72 6e 20 61 2e 70 6f 70 28 29 7d 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 77 28 61 29 2c 64 3d 63 2e 5f 73 70 61 63 65 28 29 2c 65 3d 46 5b 64 5d 2c 67 3d 30 3d 3d 3d 74 68 69 73 2e 61 6c 70 68 61 28 29 3f 77 28 22 74 72 61 6e 73 70 61 72 65 6e 74 22 29 3a 74 68 69 73 2c 68 3d 67 5b 65 2e 63 61 63 68 65 5d 7c 7c 65 2e 74 6f 28 67 2e 5f 72 67 62 61 29 2c 6b 3d 68 2e 73 6c 69 63 65 28 29 2c 63 3d 63 5b 65 2e 63 61 63 68 65 5d 3b 45 28 65 2e 70 72 6f 70 Data Ascii: n c},_space:function(){var a=[],b=this;E(F,function(c,d){b[d.cache]&&a.push(c)});return a.pop()},transition:function(a,b){var c=w(a),d=c._space(),e=F[d],g=0===this.alpha()?w("transparent"):this,h=g[e.cache]\|\|e.to(g._rgba),k=h.slice(),c=c[e.cache];E(e.prop
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 3d 30 2c 6b 3d 62 2e 6c 65 6e 67 74 68 3b 64 3c 6b 3b 64 2b 2b 29 6e 75 6c 6c 21 3d 3d 62 5b 64 5d 26 26 28 63 3d 61 2e 64 61 74 61 28 22 75 69 2d 65 66 66 65 63 74 73 2d 22 2b 62 5b 64 5d 29 2c 61 2e 63 73 73 28 62 5b 64 5d 2c 63 29 29 7d 2c 73 65 74 4d 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 74 6f 67 67 6c 65 22 3d 3d 3d 62 26 26 28 62 3d 61 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 3f 22 73 68 6f 77 22 3a 22 68 69 64 65 22 29 3b 72 65 74 75 72 6e 20 62 7d 2c 63 72 65 61 74 65 57 72 61 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 22 2e 75 69 2d 65 66 66 65 63 74 73 2d 77 72 61 70 70 65 72 22 29 29 72 65 74 75 72 6e 20 61 2e 70 61 72 Data Ascii: a,b){for(var c,d=0,k=b.length;d<k;d++)null!==b[d]&&(c=a.data("ui-effects-"+b[d]),a.css(b[d],c))},setMode:function(a,b){"toggle"===b&&(b=a.is(":hidden")?"show":"hide");return b},createWrapper:function(a){if(a.parent().is(".ui-effects-wrapper"))return a.par
2024-02-05 19:19:36 UTC	4503	IN	Data Raw: 73 29 2c 67 3d 61 2e 6d 6f 64 65 2c 68 3d 22 68 69 64 65 22 3d 3d 3d 67 3b 66 3d 22 73 68 6f 77 22 3d 3d 3d 67 3b 76 61 72 20 6b 3d 61 2e 64 69 72 65 63 74 69 6f 6e 7c 7c 22 75 70 22 2c 67 3d 61 2e 64 69 73 74 61 6e 63 65 2c 6c 3d 61 2e 74 69 6d 65 73 7c 7c 35 2c 6d 3d 32 2a 6c 2b 28 66 7c 7c 68 3f 31 3a 30 29 2c 0a 6e 3d 61 2e 64 75 72 61 74 69 6f 6e 2f 6d 2c 70 3d 61 2e 65 61 73 69 6e 67 2c 71 3d 22 75 70 22 3d 3d 3d 6b 7c 7c 22 64 6f 77 6e 22 3d 3d 3d 6b 3f 22 74 6f 70 22 3a 22 6c 65 66 74 22 2c 6b 3d 22 75 70 22 3d 3d 3d 6b 7c 7c 22 6c 65 66 74 22 3d 3d 3d 6b 2c 76 3d 30 2c 75 3d 65 2e 71 75 65 75 65 28 29 2e 6c 65 6e 67 74 68 3b 64 2e 65 66 66 65 63 74 73 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 28 65 29 3b 63 3d 65 2e 63 73 73 28 71 29 Data Ascii: s),g=a.mode,h="hide"===g;f="show"===g;var k=a.direction\|\|"up",g=a.distance,l=a.times\|\|5,m=2*l+(f\|\|h?1:0),n=a.duration/m,p=a.easing,q="up"===k\|\|"down"===k?"top":"left",k="up"===k\|\|"left"===k,v=0,u=e.queue().length;d.effects.createPlaceholder(e);c=e.css(q)
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 64 65 6c 65 74 65 20 78 2e 6f 75 74 65 72 57 69 64 74 68 3b 6c 2e 63 73 73 28 78 29 3b 69 66 28 22 63 6f 6e 74 65 6e 74 22 3d 3d 3d 76 7c 7c 22 62 6f 74 68 22 3d 3d 3d 76 29 6e 3d 6e 2e 63 6f 6e 63 61 74 28 5b 22 6d 61 72 67 69 6e 54 6f 70 22 2c 22 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 22 5d 29 2e 63 6f 6e 63 61 74 28 6d 29 2c 70 3d 70 2e 63 6f 6e 63 61 74 28 5b 22 6d 61 72 67 69 6e 4c 65 66 74 22 2c 22 6d 61 72 67 69 6e 52 69 67 68 74 22 5d 29 2c 6c 2e 66 69 6e 64 28 22 2a 5b 77 69 64 74 68 5d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 0a 64 28 74 68 69 73 29 2c 68 3d 64 2e 65 66 66 65 63 74 73 2e 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 28 62 29 2c 6b 3d 7b 68 65 69 67 68 74 3a 68 2e 68 65 69 67 68 74 2a 65 2c 77 69 Data Ascii: delete x.outerWidth;l.css(x);if("content"===v\|\|"both"===v)n=n.concat(["marginTop","marginBottom"]).concat(m),p=p.concat(["marginLeft","marginRight"]),l.find("[width]").each(function(){var b=d(this),h=d.effects.scaledDimensions(b),k={height:h.heighte,wi
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 65 72 2d 69 63 6f 6e 22 2c 22 75 69 2d 69 63 6f 6e 20 22 2b 62 2e 68 65 61 64 65 72 29 2c 61 2e 70 72 65 70 65 6e 64 54 6f 28 74 68 69 73 2e 68 65 61 64 65 72 73 29 2c 61 3d 74 68 69 73 2e 61 63 74 69 76 65 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 69 63 6f 6e 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 61 2c 62 2e 68 65 61 64 65 72 29 2e 5f 61 64 64 43 6c 61 73 73 28 61 2c 0a 6e 75 6c 6c 2c 62 2e 61 63 74 69 76 65 48 65 61 64 65 72 29 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 68 65 61 64 65 72 73 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 6f 6e 73 22 29 29 7d 2c 5f 64 65 73 74 72 6f 79 49 63 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 Data Ascii: er-icon","ui-icon "+b.header),a.prependTo(this.headers),a=this.active.children(".ui-accordion-header-icon"),this._removeClass(a,b.header)._addClass(a,null,b.activeHeader)._addClass(this.headers,"ui-accordion-icons"))},_destroyIcons:function(){this._remov
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 67 67 65 72 28 22 61 63 74 69 76 61 74 65 22 2c 6e 75 6c 6c 2c 61 29 7d 7d 29 3b 64 2e 75 69 2e 73 61 66 65 41 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 0a 74 72 79 7b 62 3d 61 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 62 3d 61 2e 62 6f 64 79 7d 62 7c 7c 28 62 3d 61 2e 62 6f 64 79 29 3b 62 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 28 62 3d 61 2e 62 6f 64 79 29 3b 72 65 74 75 72 6e 20 62 7d 3b 64 2e 77 69 64 67 65 74 28 22 75 69 2e 6d 65 6e 75 22 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 33 2e 32 22 2c 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 3a 22 3c 75 6c 3e 22 2c 64 65 6c 61 79 3a 33 30 30 2c 6f 70 74 69 6f 6e 73 3a 7b 69 63 6f 6e 73 3a 7b 73 75 62 6d 65 6e 75 3a 22 75 69 2d 69 63 Data Ascii: gger("activate",null,a)}});d.ui.safeActiveElement=function(a){var b;try{b=a.activeElement}catch(c){b=a.body}b\|\|(b=a.body);b.nodeName\|\|(b=a.body);return b};d.widget("ui.menu",{version:"1.13.2",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-ic
2024-02-05 19:19:36 UTC	7291	IN	Data Raw: 6f 6e 28 61 29 7b 61 7c 7c 28 61 3d 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 61 63 74 69 76 65 2e 70 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 61 2e 66 69 6e 64 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 68 69 64 65 28 29 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 0a 22 74 72 75 65 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 2c 5f 63 6c 6f 73 65 4f 6e 44 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 64 28 61 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 7d 2c 5f 69 73 44 69 76 69 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 Data Ascii: on(a){a\|\|(a=this.active?this.active.parent():this.element);a.find(".ui-menu").hide().attr("aria-hidden","true").attr("aria-expanded","false")},_closeOnDocumentClick:function(a){return!d(a.target).closest(".ui-menu").length},_isDivider:function(a){return!

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:36 UTC	739	OUT	GET /logon/LogonPoint/init.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:36 UTC	691	IN	HTTP/1.1 200 OK Age: 69 Date: Mon, 05 Feb 2024 19:16:51 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "15eb-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 5611 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=98 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:36 UTC	5611	IN	Data Raw: 2f 2f 20 43 61 6c 63 75 6c 61 74 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 77 69 64 74 68 20 74 68 61 74 20 77 6f 75 6c 64 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 74 68 65 20 77 65 62 20 55 49 20 6f 6e 20 74 68 69 73 20 64 65 76 69 63 65 0a 66 75 6e 63 74 69 6f 6e 20 63 61 6c 63 75 6c 61 74 65 4d 69 6e 69 6d 75 6d 41 76 61 69 6c 61 62 6c 65 57 69 64 74 68 28 75 72 6c 50 61 72 61 6d 73 29 20 7b 0a 20 20 20 20 76 61 72 20 61 76 61 69 6c 61 62 6c 65 57 69 64 74 68 2c 20 61 76 61 69 6c 61 62 6c 65 48 65 69 67 68 74 2c 0a 20 20 20 20 20 20 20 20 64 65 76 69 63 65 53 75 70 70 6f 72 74 73 52 6f 74 61 74 69 6f 6e 20 3d 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 73 63 72 65 65 6e 57 69 64 74 68 49 6e 55 72 6c 20 3d 20 75 72 6c 50 61 72 61 6d 73 2e Data Ascii: // Calculates the minimum width that would be available to the web UI on this devicefunction calculateMinimumAvailableWidth(urlParams) { var availableWidth, availableHeight, deviceSupportsRotation = true, screenWidthInUrl = urlParams.

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:36 UTC	768	OUT	GET /logon/LogonPoint/receiver/js/external/elliptic.min.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:37 UTC	694	IN	HTTP/1.1 200 OK Age: 69 Date: Mon, 05 Feb 2024 19:16:52 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "206a7-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 132775 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=99 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:37 UTC	6597	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6b 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6b 61 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 6b 61 29 3a 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 65 6c 6c 69 70 Data Ascii: (function(ka){"object"===typeof exports&&"undefined"!==typeof module?module.exports=ka():"function"===typeof define&&define.amd?define([],ka):("undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:this).ellip
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 2e 79 29 2c 74 68 69 73 2e 7a 4f 6e 65 7c 7c 28 74 68 69 73 2e 74 3d 0a 74 68 69 73 2e 74 2e 72 65 64 4d 75 6c 28 74 68 69 73 2e 7a 2e 72 65 64 49 6e 76 6d 28 29 29 29 29 29 7d 6e 3d 70 28 22 2e 2e 2f 63 75 72 76 65 22 29 3b 76 61 72 20 63 3d 70 28 22 2e 2e 2f 2e 2e 2f 65 6c 6c 69 70 74 69 63 22 29 2c 66 3d 70 28 22 62 6e 2e 6a 73 22 29 3b 70 3d 70 28 22 69 6e 68 65 72 69 74 73 22 29 3b 76 61 72 20 61 3d 6e 2e 62 61 73 65 2c 62 3d 63 2e 75 74 69 6c 73 2e 61 73 73 65 72 74 3b 70 28 67 2c 61 29 3b 72 2e 65 78 70 6f 72 74 73 3d 67 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6d 75 6c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 4f 6e 65 41 3f 61 2e 72 65 64 4e 65 67 28 29 3a 74 68 69 73 2e 61 2e 72 65 64 4d 75 6c 28 61 29 7d Data Ascii: .y),this.zOne\|\|(this.t=this.t.redMul(this.z.redInvm()))))}n=p("../curve");var c=p("../../elliptic"),f=p("bn.js");p=p("inherits");var a=n.base,b=c.utils.assert;p(g,a);r.exports=g;g.prototype._mulA=function(a){return this.mOneA?a.redNeg():this.a.redMul(a)}
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 6e 20 74 68 69 73 2e 63 75 72 76 65 2e 70 6f 69 6e 74 28 6c 2c 64 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 75 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 68 3d 61 2e 63 6c 6f 6e 65 28 29 3b 61 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 64 3d 74 68 69 73 2e 63 75 72 76 65 2e 70 6f 69 6e 74 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 6c 3d 5b 5d 3b 30 21 3d 3d 68 2e 63 6d 70 6e 28 30 29 3b 68 2e 69 75 73 68 72 6e 28 31 29 29 6c 2e 70 75 73 68 28 68 2e 61 6e 64 6c 6e 28 31 29 29 3b 66 6f 72 28 68 3d 6c 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 68 3b 68 2d 2d 29 30 3d 3d 3d 6c 5b 68 5d 3f 28 61 3d 61 2e 64 69 66 66 41 64 64 28 64 2c 74 68 69 73 29 2c 64 3d 64 2e 64 62 6c 28 29 29 3a 28 64 3d 61 2e 64 69 66 66 41 64 64 28 64 2c 74 68 69 73 29 2c 61 3d 61 Data Ascii: n this.curve.point(l,d)};k.prototype.mul=function(a){var h=a.clone();a=this;for(var d=this.curve.point(null,null),l=[];0!==h.cmpn(0);h.iushrn(1))l.push(h.andln(1));for(h=l.length-1;0<=h;h--)0===l[h]?(a=a.diffAdd(d,this),d=d.dbl()):(d=a.diffAdd(d,this),a=a
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 29 3b 69 66 28 61 26 26 74 68 69 73 2e 70 72 65 63 6f 6d 70 75 74 65 64 29 7b 61 3d 74 68 69 73 2e 70 72 65 63 6f 6d 70 75 74 65 64 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 67 28 29 7d 3b 64 2e 70 72 65 63 6f 6d 70 75 74 65 64 3d 7b 6e 61 66 3a 61 2e 6e 61 66 26 26 7b 77 6e 64 3a 61 2e 6e 61 66 2e 77 6e 64 2c 70 6f 69 6e 74 73 3a 61 2e 6e 61 66 2e 70 6f 69 6e 74 73 2e 6d 61 70 28 6c 29 7d 2c 64 6f 75 62 6c 65 73 3a 61 2e 64 6f 75 62 6c 65 73 26 26 7b 73 74 65 70 3a 61 2e 64 6f 75 62 6c 65 73 2e 73 74 65 70 2c 70 6f 69 6e 74 73 3a 61 2e 64 6f 75 62 6c 65 73 2e 70 6f 69 6e 74 73 2e 6d 61 70 28 6c 29 7d 7d 7d 72 65 74 75 72 6e 20 64 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 3d 66 75 6e 63 74 69 6f 6e Data Ascii: );if(a&&this.precomputed){a=this.precomputed;var l=function(a){return a.neg()};d.precomputed={naf:a.naf&&{wnd:a.naf.wnd,points:a.naf.points.map(l)},doubles:a.doubles&&{step:a.doubles.step,points:a.doubles.points.map(l)}}}return d};k.prototype.toJ=function
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 31 31 35 63 31 64 32 31 22 2c 22 62 64 33 37 36 33 38 38 20 62 35 66 37 32 33 66 62 20 34 63 32 32 64 66 65 36 20 63 64 34 33 37 35 61 30 20 35 61 30 37 34 37 36 34 20 34 34 64 35 38 31 39 39 20 38 35 30 30 37 65 33 34 22 5d 7d 29 3b 6b 28 22 70 32 35 36 22 2c 7b 74 79 70 65 3a 22 73 68 6f 72 74 22 2c 70 72 69 6d 65 3a 6e 75 6c 6c 2c 70 3a 22 66 66 66 66 66 66 66 66 20 30 30 30 30 30 30 30 31 20 30 30 30 30 30 30 30 30 20 30 30 30 30 30 30 30 30 20 30 30 30 30 30 30 30 30 20 66 66 66 66 66 66 66 66 20 66 66 66 66 66 66 66 66 20 66 66 66 66 66 66 66 66 22 2c 61 3a 22 66 66 66 66 66 66 66 66 20 30 30 30 30 30 30 30 31 20 30 30 30 30 30 30 30 30 20 30 30 30 30 30 30 30 30 20 30 30 30 30 30 30 30 30 20 66 66 66 66 66 66 66 66 20 66 66 66 66 66 66 66 66 20 66 Data Ascii: 115c1d21","bd376388 b5f723fb 4c22dfe6 cd4375a0 5a074764 44d58199 85007e34"]});k("p256",{type:"short",prime:null,p:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff ffffffff",a:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff f
2024-02-05 19:19:37 UTC	4503	IN	Data Raw: 6f 66 20 67 3f 61 3a 6e 65 77 20 67 28 63 2c 0a 7b 70 75 62 3a 61 2c 70 75 62 45 6e 63 3a 62 7d 29 7d 3b 67 2e 66 72 6f 6d 50 72 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 3f 61 3a 6e 65 77 20 67 28 63 2c 7b 70 72 69 76 3a 61 2c 70 72 69 76 45 6e 63 3a 62 7d 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 67 65 74 50 75 62 6c 69 63 28 29 3b 72 65 74 75 72 6e 20 63 2e 69 73 49 6e 66 69 6e 69 74 79 28 29 3f 7b 72 65 73 75 6c 74 3a 21 31 2c 72 65 61 73 6f 6e 3a 22 49 6e 76 61 6c 69 64 20 70 75 62 6c 69 63 20 6b 65 79 22 7d 3a 63 2e 76 61 6c 69 64 61 74 65 28 29 3f 63 2e 6d 75 6c 28 74 Data Ascii: of g?a:new g(c,{pub:a,pubEnc:b})};g.fromPrivate=function(c,a,b){return a instanceof g?a:new g(c,{priv:a,privEnc:b})};g.prototype.validate=function(){var c=this.getPublic();return c.isInfinity()?{result:!1,reason:"Invalid public key"}:c.validate()?c.mul(t
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 64 69 6e 67 4c 65 6e 67 74 68 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 6e 74 46 72 6f 6d 4c 45 28 61 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 6f 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 0a 74 68 69 73 2e 70 6f 69 6e 74 43 6c 61 73 73 7d 7d 2c 7b 22 2e 2e 2f 2e 2e 2f 65 6c 6c 69 70 74 69 63 22 3a 31 2c 22 2e 2f 6b 65 79 22 3a 31 32 2c 22 2e 2f 73 69 67 6e 61 74 75 72 65 22 3a 31 33 2c 22 68 61 73 68 2e 6a 73 22 3a 31 39 7d 5d 2c 31 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 70 2c 72 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 74 68 69 73 2e 65 64 64 73 61 3d 61 3b 74 68 69 Data Ascii: dingLength)};g.prototype.decodeInt=function(a){return f.intFromLE(a)};g.prototype.isPoint=function(a){return a instanceofthis.pointClass}},{"../../elliptic":1,"./key":12,"./signature":13,"hash.js":19}],12:[function(p,r,n){function g(a,b){this.eddsa=a;thi
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 30 65 38 61 39 34 32 31 63 66 32 63 66 64 35 31 22 5d 2c 5b 22 62 36 34 35 39 65 30 65 65 33 36 36 32 65 63 38 64 32 33 35 34 30 63 32 32 33 62 63 62 64 63 35 37 31 63 62 63 62 39 36 37 64 37 39 34 32 34 66 33 63 66 32 39 65 62 33 64 65 36 62 38 30 65 66 22 2c 22 36 37 63 38 37 36 64 30 36 66 33 65 30 36 64 65 31 64 61 64 66 31 36 65 35 36 36 31 64 62 33 63 34 62 33 61 65 36 64 34 38 65 33 35 62 32 66 66 33 30 62 66 30 62 36 31 61 37 31 62 61 34 35 22 5d 2c 5b 22 64 36 38 61 38 30 63 38 32 38 30 62 62 38 34 30 37 39 33 32 33 34 61 61 31 31 38 66 30 36 32 33 31 64 36 66 31 66 63 36 37 65 37 33 63 35 61 35 64 65 64 61 30 66 35 62 34 39 36 39 34 33 65 38 22 2c 22 64 62 38 62 61 39 66 66 66 34 62 35 38 36 64 30 30 63 34 62 31 66 39 31 37 37 62 30 65 32 38 62 Data Ascii: 0e8a9421cf2cfd51"],["b6459e0ee3662ec8d23540c223bcbdc571cbcb967d79424f3cf29eb3de6b80ef","67c876d06f3e06de1dadf16e5661db3c4b3ae6d48e35b2ff30bf0b61a71ba45"],["d68a80c8280bb840793234aa118f06231d6f1fc67e73c5a5deda0f5b496943e8","db8ba9fff4b586d00c4b1f9177b0e28b
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 34 61 62 39 64 34 64 62 61 65 62 32 38 35 33 31 62 37 37 33 39 66 35 33 30 22 2c 22 65 30 64 65 64 63 39 62 33 62 32 66 38 64 61 64 34 64 61 31 66 33 32 64 65 63 32 35 33 31 64 66 39 65 62 35 66 62 65 62 30 35 39 38 65 34 66 64 31 61 31 31 37 64 62 61 37 30 33 61 33 63 33 37 22 5d 2c 5b 22 34 36 33 62 33 64 39 66 36 36 32 36 32 31 66 62 31 62 34 62 65 38 66 62 62 65 32 35 32 30 31 32 35 61 32 31 36 63 64 66 63 39 64 61 65 33 64 65 62 63 62 61 34 38 35 30 63 36 39 30 64 34 35 62 22 2c 0a 22 35 65 64 34 33 30 64 37 38 63 32 39 36 63 33 35 34 33 31 31 34 33 30 36 64 64 38 36 32 32 64 37 63 36 32 32 65 32 37 63 39 37 30 61 31 64 65 33 31 63 62 33 37 37 62 30 31 61 66 37 33 30 37 65 22 5d 2c 5b 22 66 31 36 66 38 30 34 32 34 34 65 34 36 65 32 61 30 39 32 33 32 Data Ascii: 4ab9d4dbaeb28531b7739f530","e0dedc9b3b2f8dad4da1f32dec2531df9eb5fbeb0598e4fd1a117dba703a3c37"],["463b3d9f662621fb1b4be8fbbe2520125a216cdfc9dae3debcba4850c690d45b","5ed430d78c296c3543114306dd8622d7c622e27c970a1de31cb377b01af7307e"],["f16f804244e46e2a09232
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 31 61 34 62 65 35 64 31 39 36 22 5d 2c 5b 22 31 31 33 39 36 64 35 35 66 64 61 35 34 63 34 39 66 31 39 61 61 39 37 33 31 38 64 38 64 61 36 31 66 61 38 35 38 34 65 34 37 62 30 38 34 39 34 35 30 37 37 63 66 30 33 32 35 35 62 35 32 39 38 34 22 2c 22 39 39 38 63 37 34 61 38 63 64 34 35 61 63 30 31 32 38 39 64 35 38 33 33 61 37 62 65 62 34 37 34 34 66 66 35 33 36 62 30 31 62 32 35 37 62 65 34 63 35 37 36 37 62 65 61 39 33 65 61 35 37 61 34 22 5d 2c 5b 22 33 63 35 64 32 61 31 62 61 33 39 63 35 61 31 37 39 30 30 30 30 37 33 38 63 39 65 30 63 34 30 62 38 64 63 64 66 64 35 34 36 38 37 35 34 62 36 34 30 35 35 34 30 31 35 37 65 30 31 37 61 61 37 61 22 2c 22 62 32 32 38 34 32 37 39 39 39 35 61 33 34 65 32 66 39 64 34 64 65 37 33 39 36 66 63 31 38 62 38 30 66 39 62 38 Data Ascii: 1a4be5d196"],["11396d55fda54c49f19aa97318d8da61fa8584e47b084945077cf03255b52984","998c74a8cd45ac01289d5833a7beb4744ff536b01b257be4c5767bea93ea57a4"],["3c5d2a1ba39c5a1790000738c9e0c40b8dcdfd5468754b6405540157e017aa7a","b2284279995a34e2f9d4de7396fc18b80f9b8

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:36 UTC	830	OUT	GET /logon/LogonPoint/receiver/images/common/wspinner@2x.gif HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:37 UTC	580	IN	HTTP/1.1 200 OK Age: 69 Date: Mon, 05 Feb 2024 19:16:52 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "8af-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 2223 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=96 Content-Type: image/gif Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:37 UTC	2223	IN	Data Raw: 47 49 46 38 39 61 2d 00 2c 00 f5 00 00 64 5a 64 bc ba bc 84 82 84 dc de dc 9c 96 9c 74 72 7c 6c 66 6c d4 d6 d4 94 8e 94 cc c6 cc 94 8a 94 f4 f6 f4 a4 9e a4 8c 82 8c 7c 7a 84 74 6a 74 64 5e 64 c4 be c4 9c 9a 9c 7c 72 7c 6c 6a 74 fc fe fc 84 82 8c ec ee ec 6c 66 74 dc da dc 94 92 9c cc ca cc fc fa fc a4 a2 ac 8c 86 8c 64 5e 6c 9c 9a a4 7c 76 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 01 0d 00 22 00 2c 00 00 00 00 2d 00 2c 00 00 06 ff 40 91 70 48 2c 7e 0a 02 05 01 24 Data Ascii: GIF89a-,dZdtr\|lfl\|ztjtd^d\|r\|ljtlftd^l\|v\|!NETSCAPE2.0!",-,@pH,~$

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	13400
Entropy (8bit):	5.341348683800926
Encrypted:	false
SSDEEP:	192:Zr2U39nkQ/2lDIy5yDLJaescvBPpuEwvf/JlPhZ+lSXt4FGlLNkggH9:ZrbR5YIy5yHp5PovJlPhz94FCLNkf9
MD5:	284CB038482FD3307FB751331514FED0
SHA1:	4D84077BCB62E2CC3EF7ACBCA05D8E96203AA0EB
SHA-256:	147BE0E23C11B020DDFABEEFF3163D4187F19785E5D5E1FC63FB62705A55EDD4
SHA-512:	CF27A2DF5C649BADF533F3913B6AB41C2836F327BFE61B4E67CBE11728C9C949A9D87E3E704380ED4948E47AE8EC1153B07319EBB2BF4E8E74B1FE2FCDEBDD87
Malicious:	false
Reputation:	low
URL:	https://isupplier.gdls.com/logon/LogonPoint/receiver/js/external/jquery-migrate.min.js
Preview:	(function(a){"function"===typeof define&&define.amd?define(["jquery"],function(h){return a(h,window)}):"object"===typeof module&&module.exports?module.exports=a(require("jquery"),window):a(jQuery,window)})(function(a,h){function m(c){var b;a:{var d=/^(\d+)\.(\d+)\.(\d+)/;b=d.exec(a.fn.jquery)\|\|[];d=d.exec(c)\|\|[];for(c=1;3>=c;c++){if(+b[c]>+d[c]){b=1;break a}if(+b[c]<+d[c]){b=-1;break a}}b=0}return 0<=b}function g(c,b){var d=h.console;!a.migrateIsPatchEnabled(c)\|\|a.migrateDeduplicateWarnings&&t[b]\|\|.(t[b]=!0,a.migrateWarnings.push(b+" ["+c+"]"),d&&d.warn&&!a.migrateMute&&(d.warn("JQMIGRATE: "+b),a.migrateTrace&&d.trace&&d.trace()))}function u(c,a,d,e,k){Object.defineProperty(c,a,{configurable:!0,enumerable:!0,get:function(){g(e,k);return d},set:function(c){g(e,k);d=c}})}function z(c,b,d,e,k){var y,f=c[b];c[b]=function(){k&&g(e,k);y=a.migrateIsPatchEnabled(e)?d:f\|\|a.noop;return y.apply(this,arguments)}}function f(c,a,d,e,k){if(!k)throw Error("No warning message provided");return z(c,a,d,

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599)
Category:	downloaded
Size (bytes):	40910
Entropy (8bit):	4.771100263011691
Encrypted:	false
SSDEEP:	768:xlDenYLM0QLvkVJfd7EEoDHzZvnABXKlkpIQbg4jX6CrVqYHLrSAlhn:dNTKJkXKsb6CrVbLrSAlZ
MD5:	2E92344C94F3E46978E0B742FD8BBEED
SHA1:	9367B902006AD0CE6C6919F915CE830CB976122D
SHA-256:	23B1EBE8B71B12ED7E1179861073F7C2C4C08540F7E02F12903A882985466FEC
SHA-512:	24DFDF28FED06921DC5F78CB9BD9D0A28871E5DD1EBD23D969DEF449561665A576411A3BA5DE3EB507528B37AF4E3F5D952D6B5500B40E9C675255358FB8DF4C
Malicious:	false
Reputation:	low
URL:	https://isupplier.gdls.com/logon/LogonPoint/receiver/js/localization/en/ctxs.strings.js?_=1707160776753
Preview:	//note: as string delimiters please use double quotes only.(function ($) {. $.localization.addStringBundle("en", {. About: "About",. AcceptTermsMessage: "Please accept the terms of the licensing agreement before installing Citrix Receiver.",. AccessGatewayChangePasswordWarning: "Logoff is required after a successful password change. You will need to log on again to use your apps.",. ActivateCitrixPlugin: "Activate the Citrix plug-in",. ActivateCitrixPluginBrowser: "Please activate the Citrix plug-in in the browser",. ActivateReceiver: "Activate...",. ActivateReceiverToolTip: "Activate Citrix Receiver on your desktop",. Add: "Add",. AddAll: "Add All",. Added: "Added",. AddedToFavorites: "Remove",. AddFavoritesTitle: "Add Favorites",. AddFavoritesDescription: "Go to Desktops or Apps, click on Details next to your choice and then select Add to Favorites.",. AddFavoritesDescriptionDesktopsO

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:37 UTC	760	OUT	GET /logon/LogonPoint/receiver/js/ctxs.core.min.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:37 UTC	694	IN	HTTP/1.1 200 OK Age: 69 Date: Mon, 05 Feb 2024 19:16:52 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "1b0ec-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 110828 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=96 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:37 UTC	6597	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 22 54 72 75 65 22 3d 3d 43 54 58 53 2e 67 65 74 43 6f 6f 6b 69 65 28 22 69 73 47 61 74 65 77 61 79 53 65 73 73 69 6f 6e 22 29 7d 76 61 72 20 62 2c 61 2c 65 3b 77 69 6e 64 6f 77 2e 43 54 58 53 3d 77 69 6e 64 6f 77 2e 43 54 58 53 7c 7c 7b 7d 3b 43 54 58 53 2e 41 63 63 65 73 73 47 61 74 65 77 61 79 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 3d 62 3d 21 31 3b 65 3d 6e 75 6c 6c 3b 76 61 72 20 63 3d 43 54 58 53 2e 67 65 74 43 6f 6f 6b 69 65 28 22 43 59 43 59 4c 50 22 29 3b 6e 75 6c 6c 21 3d 63 26 26 28 65 3d 63 29 3b 6e 75 6c 6c 21 3d 65 3f 43 54 58 53 2e 73 65 74 43 6f 6f 6b 69 65 28 22 4c 6f 67 6f 6e 50 6f 69 6e 74 22 2c 65 29 3a 65 3d Data Ascii: (function(){function d(){return"True"==CTXS.getCookie("isGatewaySession")}var b,a,e;window.CTXS=window.CTXS\|\|{};CTXS.AccessGateway={initialize:function(){a=b=!1;e=null;var c=CTXS.getCookie("CYCYLP");null!=c&&(e=c);null!=e?CTXS.setCookie("LogonPoint",e):e=
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 63 26 26 61 2e 73 70 6c 69 63 65 28 4d 61 74 68 2e 6d 61 78 28 62 2c 63 29 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 43 54 58 53 2e 5f 69 64 70 4c 6f 67 6f 66 66 55 72 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 76 61 72 20 61 3d 66 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 61 29 7d 7d 77 69 6e 64 6f 77 2e 43 54 58 53 3d 77 69 6e 64 6f 77 2e 43 54 58 53 7c 7c 7b 7d 3b 43 54 58 53 2e 5f 69 64 70 4c 6f 67 6f 66 66 55 72 6c 3d 6e 75 6c 6c 3b 76 61 72 20 68 2c 6c 3d 21 31 2c 6d 3d 7b 45 58 50 4c 49 43 49 54 3a 22 45 78 70 6c 69 63 69 74 46 6f 72 6d 73 22 2c 47 45 4e 45 52 49 43 5f 46 4f 52 4d 53 3a 22 47 65 6e 65 72 69 63 46 Data Ascii: c&&a.splice(Math.max(b,c),1)}function f(){return CTXS._idpLogoffUrl}function k(){var a=f();return function(){window.top.location.replace(a)}}window.CTXS=window.CTXS\|\|{};CTXS._idpLogoffUrl=null;var h,l=!1,m={EXPLICIT:"ExplicitForms",GENERIC_FORMS:"GenericF
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 27 3e 3c 64 69 76 3e 22 29 3b 24 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 63 29 3b 76 61 72 20 63 3d 63 2e 63 73 73 28 22 63 6f 6c 6f 72 22 29 2c 62 3d 22 22 3b 64 28 22 2e 74 68 65 6d 65 2d 68 69 67 68 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 22 29 7c 7c 28 62 2b 3d 22 2e 74 68 65 6d 65 2d 68 69 67 68 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 22 2b 63 2b 22 3b 7d 5c 6e 22 29 3b 64 28 22 2e 74 68 65 6d 65 2d 68 69 67 68 6c 69 67 68 74 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 68 6f 76 65 72 22 29 7c 7c 28 62 2b 3d 22 2e 74 68 65 6d 65 2d 68 69 67 68 6c 69 67 68 74 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f Data Ascii: ighlight-color'><div>");$("body").append(c);var c=c.css("color"),b="";d(".theme-highlight-border-color")\|\|(b+=".theme-highlight-border-color { border-color:"+c+";}\n");d(".theme-highlight-hover-color:hover")\|\|(b+=".theme-highlight-hover-color:hover { colo
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 74 2e 6d 61 74 63 68 28 2f 28 43 72 4f 53 29 2f 69 29 3f 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 3d 62 2e 43 48 52 4f 4d 45 5f 4f 53 3a 74 68 69 73 2e 5f 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 6c 69 6e 75 78 29 2f 69 29 26 26 28 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 3d 62 2e 4c 49 4e 55 58 29 7d 3b 43 54 58 53 2e 44 65 76 69 63 65 49 6e 66 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 50 6c 61 74 66 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 7d 2c 0a 69 73 53 75 70 70 6f 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 21 3d Data Ascii: t.match(/(CrOS)/i)?this._currentPlatform=b.CHROME_OS:this._userAgent.match(/(linux)/i)&&(this._currentPlatform=b.LINUX)};CTXS.DeviceInfo.prototype={getPlatform:function(){return this._currentPlatform},isSupported:function(){return this._currentPlatform!=
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 69 6e 67 2e 70 6e 67 22 2c 63 73 73 43 6c 61 73 73 3a 22 73 74 6f 72 65 61 70 70 2d 69 63 6f 6e 2d 6c 6f 61 64 69 6e 67 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 7d 7d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 6f 61 64 65 64 49 63 6f 6e 73 3d 7b 7d 3b 74 68 69 73 2e 75 6e 69 71 75 65 49 64 73 3d 7b 7d 7d 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 72 65 74 75 72 6e 20 62 3f 43 54 58 53 2e 45 6e 76 69 72 6f 6e 6d 65 6e 74 2e 6c 6f 61 64 53 63 72 69 70 74 28 62 29 3a 24 2e 44 65 66 65 72 72 65 64 28 29 2e 72 65 73 6f 6c 76 65 28 29 7d 77 69 6e 64 6f 77 2e 43 54 58 53 3d 77 69 6e 64 6f 77 2e 43 54 58 53 7c 7c 7b 7d 3b 43 54 58 53 2e 4c 6f 63 61 6c 69 7a 61 74 Data Ascii: ing.png",cssClass:"storeapp-icon-loading-placeholder"}},reset:function(){this.loadedIcons={};this.uniqueIds={}}}})(jQuery);(function(){function d(b){return b?CTXS.Environment.loadScript(b):$.Deferred().resolve()}window.CTXS=window.CTXS\|\|{};CTXS.Localizat
2024-02-05 19:19:37 UTC	4503	IN	Data Raw: 68 26 26 30 3d 3d 43 54 58 53 2e 53 74 6f 72 65 2e 67 65 74 44 65 73 6b 74 6f 70 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 2e 72 65 73 6f 6c 76 65 28 29 2e 70 72 6f 6d 69 73 65 28 29 3b 28 62 3d 3d 43 54 58 53 2e 49 43 41 5f 53 45 53 53 49 4f 4e 5f 4c 4f 47 4f 46 46 5f 41 43 54 49 4f 4e 2e 54 45 52 4d 49 4e 41 54 45 7c 7c 43 54 58 53 2e 53 74 6f 72 65 2e 69 73 55 6e 61 75 74 68 65 6e 74 69 63 61 74 65 64 53 74 6f 72 65 28 29 3f 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 5f 74 65 72 6d 69 6e 61 74 65 49 63 61 53 65 73 73 69 6f 6e 73 2c 74 68 69 73 29 3a 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 5f 64 69 73 63 6f 6e 6e 65 63 74 49 63 61 53 65 73 73 69 6f 6e 73 2c 74 68 69 73 29 29 28 29 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 69 63 Data Ascii: h&&0==CTXS.Store.getDesktops().length)return a.resolve().promise();(b==CTXS.ICA_SESSION_LOGOFF_ACTION.TERMINATE\|\|CTXS.Store.isUnauthenticatedStore()?$.proxy(this._terminateIcaSessions,this):$.proxy(this._disconnectIcaSessions,this))().fail(function(){d.ic
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 23 22 2b 65 2b 22 20 22 2b 61 29 2c 63 5b 65 5d 2e 63 61 6c 6c 62 61 63 6b 3d 62 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 63 5b 65 5d 2e 68 61 73 72 75 6e 3f 64 26 26 63 5b 65 5d 2e 63 61 6c 6c 62 61 63 6b 26 26 28 43 54 58 53 2e 74 72 61 63 65 28 22 72 75 6e 20 73 74 6f 72 65 64 20 70 6c 75 67 69 6e 20 23 22 2b 65 2b 22 20 22 2b 63 5b 65 5d 2e 6e 61 6d 65 29 2c 63 5b 65 5d 2e 63 61 6c 6c 62 61 63 6b 28 63 5b 65 5d 2e 64 61 74 61 29 2c 63 5b 65 5d 2e 68 61 73 72 75 6e 3d 21 30 2c 63 5b 65 5d 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 29 3a 28 43 54 58 53 2e 74 72 61 63 65 28 22 70 6c 75 67 69 6e 20 23 22 2b 65 2b 22 20 22 2b 63 5b 65 5d 2e 6e 61 6d 65 2b 22 20 68 61 73 20 6e 6f 74 20 72 75 6e 20 79 65 74 22 29 2c 64 3d 21 31 29 3b 69 66 28 64 29 66 6f 72 28 Data Ascii: #"+e+" "+a),c[e].callback=b);break}else c[e].hasrun?d&&c[e].callback&&(CTXS.trace("run stored plugin #"+e+" "+c[e].name),c[e].callback(c[e].data),c[e].hasrun=!0,c[e].callback=null):(CTXS.trace("plugin #"+e+" "+c[e].name+" has not run yet"),d=!1);if(d)for(
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 73 3e 69 63 6f 6e 3c 2f 44 65 73 69 72 65 64 44 65 74 61 69 6c 73 3e 5c 6e 22 29 3b 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 69 63 6f 6e 69 6e 66 6f 2c 22 29 26 26 28 62 2b 3d 22 20 20 20 20 20 3c 44 65 73 69 72 65 64 44 65 74 61 69 6c 73 3e 69 63 6f 6e 2d 69 6e 66 6f 3c 2f 44 65 73 69 72 65 64 44 65 74 61 69 6c 73 3e 5c 6e 22 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 6e 75 6c 6c 21 3d 0a 63 3b 63 3d 63 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 29 69 66 28 63 2e 74 61 67 4e 61 6d 65 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 20 Data Ascii: s>icon</DesiredDetails>\n");-1!=a.indexOf("iconinfo,")&&(b+=" <DesiredDetails>icon-info</DesiredDetails>\n");return b}function a(a,b){if(null==a)return null;for(var c=a.firstElementChild;null!=c;c=c.nextElementSibling)if(c.tagName==b)return c;return
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 75 62 73 63 72 69 70 74 69 6f 6e 70 72 6f 70 65 72 74 69 65 73 29 3b 28 22 73 75 62 73 63 72 69 62 65 22 3d 3d 61 7c 7c 22 75 70 64 61 74 65 22 3d 3d 0a 61 26 26 22 73 75 62 73 63 72 69 62 65 64 22 3d 3d 62 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 74 61 74 75 73 29 26 26 62 2e 70 6f 73 69 74 69 6f 6e 26 26 28 63 5b 22 64 61 7a 7a 6c 65 3a 70 6f 73 69 74 69 6f 6e 22 5d 3d 62 2e 70 6f 73 69 74 69 6f 6e 2c 63 2e 70 6f 73 69 74 69 6f 6e 3d 62 2e 70 6f 73 69 74 69 6f 6e 29 3b 64 2e 63 74 78 73 41 6a 61 78 28 7b 73 74 6f 72 65 3a 62 2e 73 74 6f 72 65 2c 74 79 70 65 3a 22 50 4f 53 54 22 2c 75 72 6c 3a 62 2e 73 74 6f 72 65 2e 62 61 73 65 55 72 6c 2b 62 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 75 72 6c 2c 64 61 74 61 3a 63 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f Data Ascii: ubscriptionproperties);("subscribe"==a\|\|"update"==a&&"subscribed"==b.subscriptionstatus)&&b.position&&(c["dazzle:position"]=b.position,c.position=b.position);d.ctxsAjax({store:b.store,type:"POST",url:b.store.baseUrl+b.subscriptionurl,data:c,dataType:"jso
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 61 29 7d 2c 69 73 48 61 73 68 50 61 72 61 6d 44 65 66 69 6e 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 61 29 7d 2c 69 73 55 72 6c 50 61 72 61 6d 44 65 66 69 6e 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 43 54 58 53 2e 69 73 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 44 65 66 69 6e 65 64 28 61 29 7c 7c 43 54 58 53 2e 69 73 48 61 73 68 50 61 72 61 6d 44 65 66 69 6e 65 64 28 61 29 7d 2c 67 65 74 55 72 6c 50 61 72 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 61 29 7c 7c 62 28 Data Ascii: .search.indexOf(a)},isHashParamDefined:function(a){return-1<window.location.hash.indexOf(a)},isUrlParamDefined:function(a){return CTXS.isQueryStringParamDefined(a)\|\|CTXS.isHashParamDefined(a)},getUrlParam:function(a){return b(window.location.search,a)\|\|b(

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:37 UTC	780	OUT	GET /logon/LogonPoint/receiver/css/ctxs.large-ui.min.css HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:37 UTC	639	IN	HTTP/1.1 200 OK Age: 68 Date: Mon, 05 Feb 2024 19:16:54 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "136c4-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 79556 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: text/css; charset=utf-8 Keep-Alive: timeout=15, max=95 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:37 UTC	6652	IN	Data Raw: 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 74 Data Ascii: .slick-slider{position:relative;display:block;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;t
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 35 36 70 78 7d 2e 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 65 61 72 63 68 49 6e 70 75 74 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 65 66 65 66 65 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 34 2c 32 35 34 2c 32 35 34 2c 30 2e 35 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 Data Ascii: x);position:absolute;left:-56px}.search-container{position:relative}.searchInput{-moz-box-sizing:border-box;box-sizing:border-box;-webkit-appearance:none;background:0;border:0;margin:0;font-size:14px;color:#fefefe;color:rgba(254,254,254,0.5);font-family:"
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 65 78 74 2d 62 6f 74 74 6f 6d 7d 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 62 61 63 6b 42 75 74 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 61 63 74 69 6f 6e 53 70 72 69 74 65 2e 70 6e 67 27 29 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 31 30 33 70 78 2c 33 34 70 78 2c 39 31 70 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 30 70 78 3b 6c 65 66 74 3a 2d 35 34 70 78 7d 23 62 75 6e 64 6c 65 41 64 64 41 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 66 6f 6c 64 65 72 56 69 65 77 42 61 63 6b 42 75 74 74 6f 6e 7b Data Ascii: ext-bottom}.high-contrast .backButton:before{content:url('../images/1x/actionSprite.png');clip:rect(0,103px,34px,91px);position:absolute;top:80px;left:-54px}#bundleAddAll{font-size:16px;float:right;line-height:55px;text-align:center}#folderViewBackButton{
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 43 69 74 72 69 78 5f 4c 6f 67 6f 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 35 32 70 78 3b 77 69 64 74 68 3a 31 33 30 70 78 3b 6d 61 72 67 69 6e 3a 31 36 70 78 20 61 75 74 6f 20 35 30 70 78 20 61 75 74 6f 7d 2e 61 62 6f 75 74 42 6f 78 43 6c 6f 73 65 42 74 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 63 6c 6f 73 65 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 Data Ascii: age:url(../images/1x/Citrix_Logo.png);background-position:center;background-repeat:no-repeat;height:52px;width:130px;margin:16px auto 50px auto}.aboutBoxCloseBtn{display:block;background-image:url(../images/1x/ico_close.png);background-position:center;bac
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 69 6e 66 6f 2e 70 6e 67 29 7d 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 2e 65 72 72 6f 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 65 72 72 6f 72 2e 70 6e 67 29 7d 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 2e 65 72 72 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 65 72 72 6f 72 2e 70 6e 67 29 7d 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 63 6f 6e 66 69 72 Data Ascii: info.png)}.credentialform .error:before{background-image:url(../images/1x/ico_error.png)}.high-contrast .credentialform .error:before{content:url(../images/1x/ico_error.png)}.credentialform .confirmation:before{background-image:url(../images/1x/ico_confir
2024-02-05 19:19:37 UTC	4503	IN	Data Raw: 68 6f 76 65 72 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 44 69 73 61 62 6c 65 2d 49 63 6f 6e 31 78 2e 70 6e 67 29 7d 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 3a 64 69 73 61 62 6c 65 64 2b 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 61 64 69 6f 27 5d 3a 68 6f 76 65 72 3a 64 69 73 61 62 6c 65 64 2b 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 63 72 65 64 65 6e 74 69 61 6c 66 6f 72 6d 20 69 6e 70 75 74 Data Ascii: hover:active{background-image:url(../images/1x/Disable-Icon1x.png)}.high-contrast .credentialform input[type='radio']:disabled+label:before,.high-contrast .credentialform input[type='radio']:hover:disabled+label:before,.high-contrast .credentialform input
2024-02-05 19:19:37 UTC	7291	IN	Data Raw: 72 67 65 2e 6c 6f 67 6f 6e 2d 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 20 2e 6c 6f 67 6f 6e 2d 6c 61 72 67 65 2e 6c 6f 67 6f 6e 2d 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6c 6f 67 6f 6e 2d 73 70 61 63 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 39 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 31 30 70 78 29 7b 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 39 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d Data Ascii: rge.logon-logo-container,.high-contrast .logon-large.logon-logo-container{display:none}.logon-spacer{display:none}}@media all and (max-width:1009px) and (min-width:610px){.form-container{display:inline-block}}@media all and (max-width:609px) and (-webkit-
2024-02-05 19:19:38 UTC	7291	IN	Data Raw: 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 6f 70 3a 38 70 78 3b 6c 65 66 74 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 73 65 61 72 63 68 2e 70 6e 67 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2e 6c 61 72 67 65 20 2e 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 31 78 2f 69 63 6f 5f 73 65 61 72 63 68 2e 70 6e 67 22 29 7d 2e 6c 61 72 67 65 20 2e 73 65 61 72 63 68 Data Ascii: solute;display:block;top:8px;left:8px;background-image:url("../images/1x/ico_search.png");background-position:center center;background-repeat:no-repeat}.high-contrast.large .search-container:before{content:url("../images/1x/ico_search.png")}.large .search
2024-02-05 19:19:38 UTC	7291	IN	Data Raw: 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 6c 61 72 67 65 54 69 6c 65 73 20 2e 61 70 70 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 7d 2e 6c 61 72 67 65 54 69 6c 65 73 20 2e 74 72 75 6e 63 61 74 65 64 2e 61 70 70 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 68 65 69 67 68 74 3a 34 36 70 78 7d 2e 6c 61 72 67 65 54 69 6c 65 73 20 2e 61 70 70 49 6e 66 6f 53 6f 63 69 61 6c 44 61 74 61 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 33 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6c 61 72 67 65 20 2e 74 61 62 48 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 34 70 78 7d 2e 6c 61 72 67 65 20 2e 73 74 69 63 6b 79 54 61 62 7b 74 6f 70 3a 31 33 32 70 78 7d 2e 6c 61 72 67 65 54 69 6c 65 73 20 2e 61 70 70 6c 69 Data Ascii: isplay:inline}.largeTiles .app-description{padding-top:9px}.largeTiles .truncated.app-description{height:46px}.largeTiles .appInfoSocialData{padding-top:33px;display:none}.large .tabHeader{padding-bottom:14px}.large .stickyTab{top:132px}.largeTiles .appli
2024-02-05 19:19:38 UTC	7291	IN	Data Raw: 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 6c 61 72 67 65 20 2e 70 74 20 2e 75 73 65 72 2d 64 69 73 70 6c 61 79 2d 6e 61 6d 65 2c 2e 6c 61 72 67 65 20 2e 72 75 20 2e 75 73 65 72 2d 64 69 73 70 6c 61 79 2d 6e 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 36 70 78 7d 2e 6c 61 72 67 65 20 2e 70 74 20 2e 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6c 61 72 67 65 20 2e 72 75 20 2e 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 38 37 35 70 78 29 7b 2e 6c 61 72 67 65 20 2e 65 73 20 2e 74 6f 67 67 6c 65 2d 76 69 65 77 2d 62 75 74 74 6f 6e 2c 2e 6c 61 72 67 65 20 2e 6a 61 20 2e 74 6f 67 67 6c 65 2d 76 69 65 77 2d 62 75 74 74 6f 6e 2c Data Ascii: x;padding-right:20px}.large .pt .user-display-name,.large .ru .user-display-name{max-width:116px}.large .pt .logo-container,.large .ru .logo-container{margin-left:20px}}@media(max-width:875px){.large .es .toggle-view-button,.large .ja .toggle-view-button,

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:37 UTC	763	OUT	GET /logon/themes/Default/css/theme.css HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:38 UTC	636	IN	HTTP/1.1 200 OK Age: 68 Date: Mon, 05 Feb 2024 19:16:54 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "a0e-60f9277464640" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT Accept-Ranges: bytes Content-Length: 2574 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: text/css; charset=utf-8 Keep-Alive: timeout=15, max=95 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:38 UTC	2574	IN	Data Raw: 2e 77 65 62 2d 73 63 72 65 65 6e 7b 20 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 20 3a 20 75 72 6c 28 27 2e 2e 2f 63 75 73 74 6f 6d 5f 6d 65 64 69 61 2f 31 35 38 36 33 32 30 2e 6a 70 67 27 29 3b 20 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 20 0a 7d 20 0a 0a 0a 2e 6c 6f 67 6f 6e 2d 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 20 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 20 3a 20 75 72 6c 28 27 2e 2e 2f 63 75 73 74 6f 6d 5f 6d 65 64 69 61 2f 6c 6f 67 6f 2e 70 6e 67 27 29 3b 20 0a 20 7d 0a 0a 2e 6c 6f 67 6f 6e 2d 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 2e 4e 53 2d 41 41 41 20 7b 20 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 20 3a 20 75 72 6c 28 27 2e 2e 2f 63 75 73 74 6f 6d 5f 6d 65 64 69 61 2f Data Ascii: .web-screen{ background-image : url('../custom_media/1586320.jpg'); background-size:cover; } .logon-logo-container { background-image : url('../custom_media/logo.png'); }.logon-logo-container.NS-AAA { background-image : url('../custom_media/

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:37 UTC	762	OUT	GET /logon/LogonPoint/custom/style.css HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:38 UTC	631	IN	HTTP/1.1 200 OK Age: 68 Date: Mon, 05 Feb 2024 19:16:54 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "0-60f9277558880" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:02 GMT Accept-Ranges: bytes Content-Length: 0 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: text/css; charset=utf-8 Keep-Alive: timeout=15, max=94 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	748	OUT	GET /logon/LogonPoint/custom/script.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:39 UTC	690	IN	HTTP/1.1 200 OK Age: 66 Date: Mon, 05 Feb 2024 19:16:58 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "53d-60f9277464640" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT Accept-Ranges: bytes Content-Length: 1341 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=93 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:39 UTC	1341	IN	Data Raw: 2f 2f 20 43 75 73 74 6f 6d 20 4c 61 62 65 6c 20 48 61 6e 64 6c 65 72 20 66 6f 72 20 53 65 6c 66 20 53 65 72 76 69 63 65 20 4c 69 6e 6b 73 0d 0a 43 54 58 53 2e 45 78 74 65 6e 73 69 6f 6e 41 50 49 2e 61 64 64 43 75 73 74 6f 6d 41 75 74 68 4c 61 62 65 6c 48 61 6e 64 6c 65 72 28 7b 0d 0a 67 65 74 4c 61 62 65 6c 54 79 70 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 22 6e 73 67 2d 63 75 73 74 6f 6d 2d 6c 61 62 65 6c 22 3b 20 7d 2c 0d 0a 67 65 74 4c 61 62 65 6c 54 79 70 65 4d 61 72 6b 75 70 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 6d 65 6e 74 73 29 20 7b 0d 0a 72 65 74 75 72 6e 20 24 28 22 3c 70 20 73 74 79 6c 65 3d 5c 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 5c 22 3e 41 4c 4c 20 55 53 45 52 53 20 4d Data Ascii: // Custom Label Handler for Self Service LinksCTXS.ExtensionAPI.addCustomAuthLabelHandler({getLabelTypeName: function () { return "nsg-custom-label"; },getLabelTypeMarkup: function (requirements) {return $("<p style=\"font-size:14px;\">ALL USERS M

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	830	OUT	GET /logon/LogonPoint/receiver/images/1x/folder_template.png HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:39 UTC	579	IN	HTTP/1.1 200 OK Age: 66 Date: Mon, 05 Feb 2024 19:16:58 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "1b0-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 432 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=93 Content-Type: image/png Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:39 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 52 49 44 41 54 78 da ec db b1 4a c3 40 00 87 f1 3b 53 c5 08 8a 10 aa 9b 28 5d 74 74 72 d0 37 70 70 15 71 f0 01 74 f6 01 1c 2b 74 2a 3e 81 a3 88 38 08 e2 28 fa 00 2e 82 08 59 1c 44 b3 b8 9a 10 bf 83 0c 5d 85 34 3d 72 ff 83 6f 6c 8e 1f 97 5e ae d0 d8 34 4d 4d 48 63 ca 04 36 46 c1 33 74 4c cf f4 43 e5 3f 73 9f 79 a5 4b da 23 eb 23 d8 56 b7 f4 32 dd d1 66 8d d7 7e a4 7d fa f0 6d 85 3b 74 55 33 d6 8d 1d 7a a2 9e 6f e0 03 da 1e d3 f5 57 e8 81 ba 3e 81 0f c7 3c c7 2a dd d2 9c 2f e0 ad 06 e6 71 73 dc d3 9a 0f e0 85 86 e6 72 5f 9b 37 ba a6 23 da a0 Data Ascii: PNGIHDR<<:rtEXtSoftwareAdobe ImageReadyqe<RIDATxJ@;S(]ttr7ppqt+t>8(.YD]4=rol^4MMHc6F3tLC?syK##V2f~}m;tU3zoW></qsr_7#

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	948	OUT	GET /logon/LogonPoint/receiver/js/localization/en/ctxs.strings.js?_=1707160776753 HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 X-Citrix-IsUsingHTTPS: Yes User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:39 UTC	692	IN	HTTP/1.1 200 OK Age: 83 Date: Mon, 05 Feb 2024 19:16:41 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "9fce-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 40910 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=98 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:39 UTC	6599	IN	Data Raw: 2f 2f 6e 6f 74 65 3a 20 61 73 20 73 74 72 69 6e 67 20 64 65 6c 69 6d 69 74 65 72 73 20 70 6c 65 61 73 65 20 75 73 65 20 64 6f 75 62 6c 65 20 71 75 6f 74 65 73 20 6f 6e 6c 79 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 20 20 20 20 24 2e 6c 6f 63 61 6c 69 7a 61 74 69 6f 6e 2e 61 64 64 53 74 72 69 6e 67 42 75 6e 64 6c 65 28 22 65 6e 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 41 62 6f 75 74 3a 20 22 41 62 6f 75 74 22 2c 0a 20 20 20 20 20 20 20 20 41 63 63 65 70 74 54 65 72 6d 73 4d 65 73 73 61 67 65 3a 20 22 50 6c 65 61 73 65 20 61 63 63 65 70 74 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 6c 69 63 65 6e 73 69 6e 67 20 61 67 72 65 65 6d 65 6e 74 20 62 65 66 6f 72 65 20 69 6e 73 74 61 6c 6c 69 6e 67 20 43 69 74 72 69 78 20 52 65 63 65 69 76 65 72 Data Ascii: //note: as string delimiters please use double quotes only(function ($) { $.localization.addStringBundle("en", { About: "About", AcceptTermsMessage: "Please accept the terms of the licensing agreement before installing Citrix Receiver
2024-02-05 19:19:39 UTC	7291	IN	Data Raw: 6e 64 73 2e 20 50 6c 65 61 73 65 20 63 68 6f 6f 73 65 20 7b 30 7d 2e 22 2c 0a 20 20 20 20 20 20 20 20 49 66 4e 6f 57 69 6e 64 6f 77 41 6c 72 65 61 64 79 49 6e 73 74 61 6c 6c 65 64 3a 20 22 49 66 20 6e 6f 20 77 69 6e 64 6f 77 20 61 70 70 65 61 72 73 2c 20 73 65 6c 65 63 74 20 7b 30 7d 2e 22 2c 0a 20 20 20 20 20 20 20 20 49 66 4e 6f 57 69 6e 64 6f 77 44 65 74 65 63 74 41 67 61 69 6e 3a 20 22 49 66 20 6e 6f 20 77 69 6e 64 6f 77 20 61 70 70 65 61 72 73 2c 20 63 6c 69 63 6b 20 7b 30 7d 2e 22 2c 0a 20 20 20 20 20 20 20 20 49 66 4e 6f 57 69 6e 64 6f 77 4f 70 74 69 6f 6e 73 3a 20 22 49 66 20 6e 6f 20 77 69 6e 64 6f 77 20 61 70 70 65 61 72 73 2c 20 73 65 6c 65 63 74 20 66 72 6f 6d 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 62 65 6c 6f 77 2e 22 2c 0a 20 20 20 20 20 20 Data Ascii: nds. Please choose {0}.", IfNoWindowAlreadyInstalled: "If no window appears, select {0}.", IfNoWindowDetectAgain: "If no window appears, click {0}.", IfNoWindowOptions: "If no window appears, select from the options below.",
2024-02-05 19:19:39 UTC	7291	IN	Data Raw: 20 20 20 20 20 20 54 72 79 4c 61 74 65 72 3a 20 22 54 72 79 20 6c 61 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 54 72 79 53 65 61 72 63 68 69 6e 67 49 6e 41 70 70 73 3a 20 22 54 72 79 20 73 65 61 72 63 68 69 6e 67 20 69 6e 20 41 70 70 73 2e 22 2c 0a 0a 20 20 20 20 20 20 20 20 55 6e 62 6c 6f 63 6b 43 69 74 72 69 78 50 6c 75 67 69 6e 3a 20 22 55 6e 62 6c 6f 63 6b 20 74 68 65 20 43 69 74 72 69 78 20 70 6c 75 67 2d 69 6e 22 2c 0a 20 20 20 20 20 20 20 20 55 6e 73 75 70 70 6f 72 74 65 64 44 65 76 69 63 65 3a 20 22 55 6e 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 22 2c 0a 20 20 20 20 20 20 20 20 55 6e 73 75 70 70 6f 72 74 65 64 44 65 76 69 63 65 4d 65 73 73 61 67 65 3a 20 22 50 6c 65 61 73 65 20 75 73 65 20 61 20 73 75 70 70 6f 72 74 65 64 20 70 68 6f 6e 65 Data Ascii: TryLater: "Try later", TrySearchingInApps: "Try searching in Apps.", UnblockCitrixPlugin: "Unblock the Citrix plug-in", UnsupportedDevice: "Unsupported device", UnsupportedDeviceMessage: "Please use a supported phone
2024-02-05 19:19:39 UTC	7291	IN	Data Raw: 20 20 20 20 20 20 20 20 22 54 6f 5f 69 6e 73 74 61 6c 6c 5f 74 68 65 5f 4e 65 74 73 63 61 6c 65 72 5f 41 63 63 65 73 73 5f 47 61 74 65 77 61 79 5f 43 6c 69 65 6e 74 5f 66 6f 72 5f 4c 69 6e 75 78 22 3a 22 54 6f 20 69 6e 73 74 61 6c 6c 20 74 68 65 20 43 69 74 72 69 78 20 47 61 74 65 77 61 79 20 43 6c 69 65 6e 74 20 66 6f 72 20 4c 69 6e 75 78 20 28 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 55 62 75 6e 74 75 20 4f 53 29 22 2c 0a 20 20 20 20 20 20 20 20 22 49 66 5f 74 68 65 5f 41 63 63 65 73 73 5f 47 61 74 65 77 61 79 5f 50 6c 75 67 2d 69 6e 5f 69 73 5f 6e 6f 74 5f 69 6e 73 74 61 6c 6c 65 64 22 3a 22 54 68 65 20 43 69 74 72 69 78 20 47 61 74 65 77 61 79 20 50 6c 75 67 2d 69 6e 20 69 73 20 65 69 74 68 65 72 20 6e 6f 74 20 69 6e 73 74 Data Ascii: "To_install_the_Netscaler_Access_Gateway_Client_for_Linux":"To install the Citrix Gateway Client for Linux (currently supported on Ubuntu OS)", "If_the_Access_Gateway_Plug-in_is_not_installed":"The Citrix Gateway Plug-in is either not inst
2024-02-05 19:19:39 UTC	7291	IN	Data Raw: 65 6e 74 69 63 61 74 69 6f 6e 22 2c 0a 09 22 4e 6f 20 61 63 74 69 76 65 20 70 6f 6c 69 63 79 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 66 61 6c 6c 62 61 63 6b 20 66 72 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 61 69 6c 75 72 65 22 3a 20 22 4e 6f 20 61 63 74 69 76 65 20 70 6f 6c 69 63 79 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 66 61 6c 6c 62 61 63 6b 20 66 72 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 61 69 6c 75 72 65 22 2c 0a 09 22 4e 6f 20 61 63 74 69 76 65 20 70 6f 6c 69 63 79 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 66 61 6c 6c 62 61 63 6b 20 66 72 6f 6d 20 4e 65 67 6f 74 69 61 74 65 2f 4e 54 4c 4d 20 66 61 69 6c 75 72 65 22 3a 20 22 4e 6f 20 61 63 74 69 76 65 20 70 6f 6c 69 63 79 20 77 68 69 6c 65 20 74 72 79 Data Ascii: entication","No active policy while trying to fallback from certificate failure": "No active policy while trying to fallback from certificate failure","No active policy while trying to fallback from Negotiate/NTLM failure": "No active policy while try
2024-02-05 19:19:39 UTC	4503	IN	Data Raw: 6f 6e 5f 66 61 69 6c 65 64 5f 68 65 61 64 65 72 22 3a 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 61 69 6c 65 64 22 2c 0a 20 20 22 70 61 73 73 5f 65 6e 63 5f 65 6e 63 72 79 70 74 69 6f 6e 5f 66 61 69 6c 65 64 5f 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 61 69 6c 65 64 2e 20 54 6f 20 63 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 79 6f 75 72 20 6c 6f 67 20 6f 6e 2c 20 64 69 73 61 62 6c 65 20 70 61 73 73 77 6f 72 64 20 65 6e 63 72 79 70 74 69 6f 6e 2e 22 2c 0a 20 20 22 70 61 73 73 5f 65 6e 63 5f 75 6e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 5f 68 65 61 64 65 72 22 3a 22 55 6e 73 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 72 20 66 6f 72 20 45 6e 63 72 79 Data Ascii: on_failed_header":"The password encryption failed", "pass_enc_encryption_failed_message":"The password encryption failed. To continue with your log on, disable password encryption.", "pass_enc_unsupported_browser_header":"Unsupported Browser for Encry
2024-02-05 19:19:39 UTC	644	IN	Data Raw: 50 20 43 6f 64 65 2e 20 45 6d 61 69 6c 20 41 75 74 68 20 66 61 69 6c 65 64 3b 20 4e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 22 2c 0a 20 20 22 6e 73 67 5f 6b 62 61 5f 71 75 65 73 74 69 6f 6e 22 20 3a 20 22 51 75 65 73 74 69 6f 6e 22 2c 0a 20 20 22 6e 73 67 5f 6b 62 61 5f 61 6e 73 77 65 72 22 20 3a 20 22 41 6e 73 77 65 72 22 2c 0a 20 20 22 64 75 61 6c 61 75 74 68 70 75 73 68 6f 72 6f 74 70 5f 70 6c 65 61 73 65 5f 6c 6f 67 5f 6f 6e 22 3a 20 22 50 6c 65 61 73 65 20 6c 6f 67 20 6f 6e 22 2c 0a 20 20 22 64 75 61 6c 61 75 74 68 70 75 73 68 6f 72 6f 74 70 5f 75 73 65 72 5f 6e 61 6d 65 22 3a 20 22 55 73 65 72 20 6e 61 6d 65 3a 22 2c 0a 20 20 22 64 75 61 6c 61 75 74 68 70 75 73 68 6f 72 6f 74 70 5f 70 61 73 73 77 6f 72 Data Ascii: P Code. Email Auth failed; No further action to continue.", "nsg_kba_question" : "Question", "nsg_kba_answer" : "Answer", "dualauthpushorotp_please_log_on": "Please log on", "dualauthpushorotp_user_name": "User name:", "dualauthpushorotp_passwor

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	609	OUT	GET /logon/LogonPoint/Home/Configuration HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:39 UTC	602	IN	HTTP/1.1 200 OK Date: Mon, 05 Feb 2024 19:18:03 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT ETag: "0-60f9277464640" Accept-Ranges: bytes Content-Length: 2369 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=0 must-revalidate X-Citrix-Application: Receiver for Web Content-Type: application/xml; charset=utf-8 Connection: close Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:39 UTC	2369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 63 6c 69 65 6e 74 53 65 74 74 69 6e 67 73 3e 3c 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 3d 22 32 30 22 20 6c 6f 67 69 6e 46 6f 72 6d 54 69 6d 65 6f 75 74 3d 22 31 30 22 2f 3e 3c 61 75 74 68 4d 61 6e 61 67 65 72 20 6c 6f 67 69 6e 55 52 4c 3d 22 2f 70 2f 75 2f 67 65 74 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 6d 65 6e 74 73 2e 64 6f 22 20 67 65 74 55 73 65 72 6e 61 6d 65 55 52 4c 3d 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2f 47 65 74 55 73 65 72 4e 61 6d 65 22 20 6c 6f 67 6f 66 66 55 52 4c 3d 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2f 4c 6f 67 4f 66 66 22 20 63 68 61 6e 67 65 43 72 65 64 65 6e 74 69 61 6c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><clientSettings><session timeout="20" loginFormTimeout="10"/><authManager loginURL="/p/u/getAuthenticationRequirements.do" getUsernameURL="Authentication/GetUserName" logoffURL="Authentication/LogOff" changeCredential

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	626	OUT	GET /logon/LogonPoint/receiver/images/1x/actionSprite.png HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:40 UTC	580	IN	HTTP/1.1 200 OK Age: 67 Date: Mon, 05 Feb 2024 19:16:58 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "95a-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 2394 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=94 Content-Type: image/png Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:40 UTC	2394	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 86 00 00 00 13 08 06 00 00 00 55 d2 75 61 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e bf 00 00 0e bf 01 38 05 53 24 00 00 00 07 74 49 4d 45 07 df 04 01 0c 0c 2c f5 f7 1f 74 00 00 08 e7 49 44 41 54 68 de dd 9a 7b 6c 5b d5 1d c7 3f bf 6b 3b 76 93 94 32 0d 34 c1 d6 c7 18 65 6c b0 b1 89 56 a2 3c 6c a7 5b 40 45 20 b5 1b 81 b5 25 76 52 3a c2 78 15 21 18 eb 63 69 12 1a 86 e8 c6 63 65 63 40 1f b9 4e 5b 44 cb 4b 62 50 a0 db 6c df 44 b4 83 21 34 8d 32 51 d8 80 16 31 81 40 a5 49 1c d2 d8 f7 fe f6 87 6f 8a 9d 38 89 9d b8 30 ed 48 57 b9 e7 9c 7b 4e ce b9 e7 73 be e7 f7 fb f9 0a ff ef 69 8b 75 1e 5e 4f 2d fd fe bb 68 9a d3 3f bc 5a 55 c7 ed 42 cc 64 33 18 69 8d 5e f0 ab Data Ascii: PNGIHDRUuabKGDpHYs8S$tIME,tIDATh{l[?k;v24elV<l[@E %vR:x!cicec@N[DKbPlD!42Q1@Io80HW{Nsiu^O-h?ZUBd3i^

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-05 19:19:40 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: F4CD5D2592E9446790D4788B4C70CAC5 Ref B: ASHEDGE1419 Ref C: 2024-02-03T18:43:59Z Cache-Control: public, max-age=84296 Date: Mon, 05 Feb 2024 19:19:39 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Notification Detail.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Windows Analysis Report
Notification Detail.html

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-05 19:19:40 UTC	530	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0URSoYgAAAABePpjyRlUAQrduejDbkqt8U0pDRURHRTA1MjAAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=80095 Date: Mon, 05 Feb 2024 19:19:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-05 19:19:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:40 UTC	849	OUT	GET /logon/themes/Default/css/theme.css HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "a0e-60f9277464640" If-Modified-Since: Tue, 23 Jan 2024 01:00:01 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:41 UTC	159	IN	HTTP/1.1 304 Not Modified Connection: Close Date: Mon, 05 Feb 2024 19:16:54 GMT Via: NS-CACHE-10.0: 208 Age: 71 ETag: "a0e-60f9277464640"

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:41 UTC	627	OUT	GET /logon/LogonPoint/custom/strings.en.js?_=1707160776754 HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:41 UTC	689	IN	HTTP/1.1 200 OK Age: 86 Date: Mon, 05 Feb 2024 19:16:41 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "1b6-60f9277464640" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT Accept-Ranges: bytes Content-Length: 438 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=90 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:41 UTC	438	IN	Data Raw: 24 2e 63 74 78 73 41 6a 61 78 28 7b 0a 09 74 79 70 65 3a 20 27 47 45 54 27 2c 0a 09 75 72 6c 3a 20 22 2f 6c 6f 67 6f 6e 2f 4c 6f 67 6f 6e 50 6f 69 6e 74 2f 63 75 73 74 6f 6d 2f 73 74 72 69 6e 67 73 2e 65 6e 2e 6a 73 6f 6e 22 2c 0a 09 64 61 74 61 54 79 70 65 3a 20 27 6a 73 6f 6e 27 2c 0a 09 61 73 79 6e 63 3a 20 66 61 6c 73 65 2c 0a 09 73 75 63 63 65 73 73 3a 20 63 75 73 74 6f 6d 5f 73 74 72 69 6e 67 73 5f 69 6e 69 74 69 61 6c 69 7a 65 2c 0a 09 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 44 61 74 61 2c 20 74 65 78 74 53 74 61 74 75 73 2c 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 20 7b 0a 09 7d 2c 0a 09 72 65 66 72 65 73 68 53 65 73 73 69 6f 6e 3a 20 74 72 75 65 0a 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 75 73 74 6f 6d 5f Data Ascii: $.ctxsAjax({type: 'GET',url: "/logon/LogonPoint/custom/strings.en.json",dataType: 'json',async: false,success: custom_strings_initialize,error: function(responseData, textStatus, XMLHttpRequest) {},refreshSession: true});function custom_

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:41 UTC	761	OUT	GET /logon/LogonPoint/plugins/ns-gateway/nsg-epa.js HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:41 UTC	692	IN	HTTP/1.1 200 OK Age: 66 Date: Mon, 05 Feb 2024 19:17:00 GMT Cache-Control: max-age=0 must-revalidate Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "9f84-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 40836 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=92 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:41 UTC	6599	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 43 54 58 53 2e 45 78 74 65 6e 73 69 6f 6e 41 50 49 2e 61 64 64 50 6c 75 67 69 6e 28 7b 6e 61 6d 65 3a 22 6e 73 67 2d 65 70 61 22 2c 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 43 54 58 53 2e 45 78 74 65 6e 73 69 6f 6e 41 50 49 2e 61 64 64 43 75 73 74 6f 6d 41 75 74 68 4c 61 62 65 6c 48 61 6e 64 6c 65 72 28 7b 67 65 74 4c 61 62 65 6c 54 79 70 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6e 73 67 2d 65 70 61 22 7d 2c 67 65 74 4c 61 62 65 6c 54 79 70 65 4d 61 72 6b 75 70 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 55 6e 73 65 74 43 6f 6f 6b 69 65 28 22 4e 53 43 5f 45 52 52 4d 22 29 3b 76 61 72 20 63 3d 61 28 22 3c 64 69 76 3e 3c 2f 64 69 76 3e 22 29 2c 64 3d 61 28 22 3c 64 69 Data Ascii: (function(a){CTXS.ExtensionAPI.addPlugin({name:"nsg-epa",initialize:function(){CTXS.ExtensionAPI.addCustomAuthLabelHandler({getLabelTypeName:function(){return"nsg-epa"},getLabelTypeMarkup:function(b){UnsetCookie("NSC_ERRM");var c=a("<div></div>"),d=a("<di
2024-02-05 19:19:41 UTC	7291	IN	Data Raw: 26 30 3d 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 32 5d 29 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 22 22 2c 68 3d 30 3b 68 3c 64 2e 6c 65 6e 67 74 68 2d 32 3b 68 2b 3d 32 29 76 61 72 20 6b 3d 31 36 2a 64 5b 68 5d 2b 64 5b 68 2b 31 5d 2c 67 3d 67 2b 28 22 25 22 2b 28 31 36 3e 6b 3f 22 30 22 3a 22 22 29 2b 6b 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 62 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 67 29 29 7d 63 61 74 63 68 28 6c 29 7b 62 28 22 22 29 7d 65 6c 73 65 20 63 2b 3d 31 2c 75 74 69 6c 2e 70 72 6f 62 28 61 2b 22 26 22 2b 63 2c 66 2c 65 29 7d 3b 75 74 69 6c 2e 70 72 6f 62 28 61 2b 22 26 22 2b 63 2c 66 2c 65 29 7d 3b 75 74 69 6c 2e 6d 61 78 41 74 74 65 6d 70 74 3d 32 30 3b 75 74 69 6c 2e 63 75 72 72 65 6e 74 41 74 74 65 6d 70 74 3d 30 Data Ascii: &0==d[d.length-2])try{for(var g="",h=0;h<d.length-2;h+=2)var k=16*d[h]+d[h+1],g=g+("%"+(16>k?"0":"")+k.toString(16));b(decodeURIComponent(g))}catch(l){b("")}else c+=1,util.prob(a+"&"+c,f,e)};util.prob(a+"&"+c,f,e)};util.maxAttempt=20;util.currentAttempt=0
2024-02-05 19:19:41 UTC	7291	IN	Data Raw: 20 22 2b 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 29 2c 74 69 6d 65 72 49 44 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 72 6f 62 65 45 50 41 52 65 73 75 6c 74 28 29 7d 2c 31 45 33 29 2c 75 74 69 6c 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 74 69 6d 65 72 49 44 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 65 74 65 63 74 41 63 74 69 76 65 58 28 29 7b 74 69 6d 65 72 49 44 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 69 6d 65 72 49 44 29 3b 74 72 79 7b 69 66 28 31 3d 3d 6e 73 5f 67 65 74 63 6f 6f 6b 69 65 28 22 45 50 41 5f 56 45 52 4d 49 53 4d 41 54 43 48 22 29 29 7b 31 3d 3d 6e 73 5f 67 65 74 63 6f 6f 6b 69 65 28 22 45 50 41 5f 41 44 Data Ascii: "+navigator.platform,document.title),timerID=window.setTimeout(function(){probeEPAResult()},1E3),util.timers.push(timerID))}function detectActiveX(){timerID&&window.clearTimeout(timerID);try{if(1==ns_getcookie("EPA_VERMISMATCH")){1==ns_getcookie("EPA_AD
2024-02-05 19:19:41 UTC	7291	IN	Data Raw: 69 6d 65 72 73 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 74 65 63 74 4c 69 6e 75 78 50 6c 75 67 69 6e 28 29 7d 2c 31 45 33 29 29 7d 63 61 74 63 68 28 62 29 7b 41 70 70 65 6e 64 44 6f 77 6e 6c 6f 61 64 42 75 74 74 6f 6e 28 29 2c 75 74 69 6c 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 74 65 63 74 4c 69 6e 75 78 50 6c 75 67 69 6e 28 29 7d 2c 31 45 33 29 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 65 74 65 63 74 50 6c 75 67 69 6e 28 29 7b 74 69 6d 65 72 49 44 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 69 6d 65 72 49 44 29 3b 74 72 79 7b 69 66 28 31 3d 3d 6e 73 5f 67 65 74 63 6f 6f Data Ascii: imers.push(window.setTimeout(function(){detectLinuxPlugin()},1E3))}catch(b){AppendDownloadButton(),util.timers.push(window.setTimeout(function(){detectLinuxPlugin()},1E3))}}function detectPlugin(){timerID&&window.clearTimeout(timerID);try{if(1==ns_getcoo
2024-02-05 19:19:41 UTC	7291	IN	Data Raw: 75 67 69 6e 28 29 7d 29 2c 61 2e 61 70 70 65 6e 64 28 62 29 29 3b 24 28 65 70 61 5f 66 6f 72 6d 29 2e 61 70 70 65 6e 64 28 61 29 7d 7d 65 6c 73 65 7b 69 66 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 6f 77 6e 6c 6f 61 64 5f 65 70 61 5f 63 6f 6e 74 65 6e 74 22 29 29 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 41 70 70 6e 65 64 45 70 61 52 65 74 72 79 4c 61 75 6e 63 68 42 75 74 74 6f 6e 28 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 70 70 6e 65 64 45 70 61 52 65 74 72 79 4c 61 75 6e 63 68 42 75 74 74 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 74 72 79 5f 65 70 61 5f 6c 61 75 6e 63 68 5f 63 6f 6e 74 65 6e 74 22 29 3b 69 66 Data Ascii: ugin()}),a.append(b));$(epa_form).append(a)}}else{if(a=document.getElementById("download_epa_content"))a.style.display="none";AppnedEpaRetryLaunchButton()}}function AppnedEpaRetryLaunchButton(){var a=document.getElementById("retry_epa_launch_content");if
2024-02-05 19:19:41 UTC	4503	IN	Data Raw: 75 6c 74 2e 65 70 61 45 72 72 6f 72 73 3d 5b 5d 3b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 5c 6e 22 29 3b 69 66 28 33 3e 63 2e 6c 65 6e 67 74 68 29 75 74 69 6c 2e 65 70 61 46 61 69 6c 52 65 73 75 6c 74 2e 65 70 61 4d 65 73 73 61 67 65 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 31 3c 63 5b 64 5d 2e 6c 65 6e 67 74 68 3b 29 75 74 69 6c 2e 65 70 61 46 61 69 6c 52 65 73 75 6c 74 2e 65 70 61 4d 65 73 73 61 67 65 2e 70 75 73 68 28 63 5b 64 5d 29 2c 64 2b 2b 3b 66 6f 72 28 64 2b 3d 31 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 31 3c 63 5b 64 5d 2e 6c 65 6e 67 74 68 26 26 75 74 69 6c 2e 65 70 61 46 61 69 6c 52 65 73 75 6c 74 2e 65 70 61 45 72 72 6f 72 73 2e 70 75 73 68 28 63 5b 64 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: ult.epaErrors=[];var c=a.split("\n");if(3>c.length)util.epaFailResult.epaMessage.push(a);else{for(var d=0;1<c[d].length;)util.epaFailResult.epaMessage.push(c[d]),d++;for(d+=1;d<c.length;d++)1<c[d].length&&util.epaFailResult.epaErrors.push(c[d])}}function
2024-02-05 19:19:41 UTC	570	IN	Data Raw: 68 6f 73 74 50 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 74 69 6c 2e 66 61 6c 6c 62 61 63 6b 53 74 61 72 74 65 64 3d 21 30 3b 75 74 69 6c 2e 5f 6c 61 75 6e 63 68 53 75 63 63 65 73 73 48 61 6e 64 6c 65 72 3d 6c 61 75 6e 63 68 65 72 45 78 69 73 74 3b 75 74 69 6c 2e 5f 6c 61 75 6e 63 68 45 72 72 6f 72 48 61 6e 64 6c 65 72 3d 75 74 69 6c 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 3b 22 4d 61 63 22 3d 3d 3d 45 50 41 44 61 74 61 2e 4f 53 3f 28 61 67 6d 61 63 5f 63 6f 75 6e 74 3d 75 74 69 6c 2e 6d 61 78 49 6e 61 63 74 69 76 65 41 74 74 65 6d 70 74 73 2c 75 74 69 6c 2e 67 65 74 4e 6f 48 74 74 70 4f 6e 6c 79 43 6f 6f 6b 69 65 73 28 29 2c 45 50 41 44 61 74 61 2e 6c 61 75 6e 63 68 28 22 61 6c 72 65 61 64 79 20 6c 61 75 6e 63 68 65 64 22 29 29 3a 2d 31 21 3d 6e Data Ascii: hostPort=function(){util.fallbackStarted=!0;util._launchSuccessHandler=launcherExist;util._launchErrorHandler=util.emptyFunction;"Mac"===EPAData.OS?(agmac_count=util.maxInactiveAttempts,util.getNoHttpOnlyCookies(),EPAData.launch("already launched")):-1!=n

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:41 UTC	613	OUT	GET /logon/LogonPoint/custom/strings.en.json HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:42 UTC	640	IN	HTTP/1.1 200 OK Age: 67 Date: Mon, 05 Feb 2024 19:17:00 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "93-60f9277558880" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:02 GMT Accept-Ranges: bytes Content-Length: 147 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Citrix-Application: Receiver for Web Keep-Alive: timeout=15, max=89 Content-Type: application/json; charset=utf-8 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:42 UTC	147	IN	Data Raw: 7b 22 4e 65 74 73 63 61 6c 65 72 41 41 41 22 3a 22 47 44 4c 53 20 69 53 75 70 70 6c 69 65 72 22 2c 22 4e 65 74 73 63 61 6c 65 72 47 61 74 65 77 61 79 22 3a 22 47 44 4c 53 20 69 53 75 70 70 6c 69 65 72 22 2c 22 6e 73 67 5f 6c 6f 67 69 6e 48 65 61 64 69 6e 67 22 3a 22 22 2c 22 6e 73 67 5f 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 6e 73 67 5f 70 61 73 73 77 6f 72 64 31 22 3a 22 22 2c 22 6e 73 67 5f 70 61 73 73 77 6f 72 64 32 22 3a 22 22 7d Data Ascii: {"NetscalerAAA":"GDLS iSupplier","NetscalerGateway":"GDLS iSupplier","nsg_loginHeading":"","nsg_username":"","nsg_password1":"","nsg_password2":""}

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:42 UTC	619	OUT	GET /logon/themes/Default/custom_media/1586320.jpg HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:42 UTC	584	IN	HTTP/1.1 200 OK Age: 71 Date: Mon, 05 Feb 2024 19:16:56 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "c14c-60f9277464640" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT Accept-Ranges: bytes Content-Length: 49484 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=100 Content-Type: image/jpeg Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:42 UTC	6707	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff c0 00 0b 08 08 00 08 00 01 01 11 00 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 Data Ascii: JFIFC}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-02-05 19:19:42 UTC	7291	IN	Data Raw: 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	7291	IN	Data Raw: a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	7291	IN	Data Raw: 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	7291	IN	Data Raw: 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	4503	IN	Data Raw: a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	7291	IN	Data Raw: a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-02-05 19:19:42 UTC	1819	IN	Data Raw: 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:42 UTC	594	OUT	GET /nf/auth/getECdetails HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:42 UTC	351	IN	HTTP/1.1 200 OK X-VSERVER: AAA Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 23 Cache-control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/json; charset=utf-8 X-Citrix-Application: Receiver for Web
2024-02-05 19:19:42 UTC	23	IN	Data Raw: 7b 22 65 6e 63 72 79 70 74 22 3a 20 22 44 49 53 41 42 4c 45 44 22 7d Data Ascii: {"encrypt": "DISABLED"}
2024-02-05 19:19:44 UTC	605	OUT	GET /logon/LogonPoint/Resources/List HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:44 UTC	380	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: text/plain; charset=utf-8 Expires: -1 X-Citrix-Application: Receiver for Web CitrixWebReceiver-Authenticate: reason="notoken", location="/cgi/GetAuthMethods" Content-Length: 22 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload {"unauthorized": true}
2024-02-05 19:19:44 UTC	620	OUT	GET /vpn/images/NetScaler-AAA-logo-white-header.png HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:44 UTC	2463	IN	HTTP/1.1 200 OK Age: 89 Date: Mon, 05 Feb 2024 19:16:41 GMT Cache-Control: no-cache Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "742-60f55b0f8dc00" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:36 GMT Accept-Ranges: bytes Content-Length: 1858 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=96 Content-Type: image/png Strict-Transport-Security: max-age=15552000; includeSubDomains; preload PNG IHDR-oitEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CFD526CBE2B311E5A324A96D5959E708" xmpMM:InstanceID="xmp.iid:CFD526CAE2B311E5A324A96D5959E708" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75520103E2B311E5A324A96D5959E708" stRef:documentID="xmp.did:75520104E2B311E5A324A96D5959E708"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>LZIDATxZ0L.A!!33B2B2{x~PKI\|Q\|D'~?}PM_u(g- 'y?'Y#ua~~1z06~'8^j9PsI#"~~q' PSEWWHw\|y 92\|VXcy\A76Jvy5jg :7^>NO)-h@27kdFHaQTtS~Ai~0S3F88s @vc@ \|N1&Q{Mw< OB(,DP3L%Hva;d@Qjckd^C.B@^.0UC{wP8UWaSW\|,\8hexB'<,v@RKCZ;>hniNS3=AyOjsqF&ati~j@-aah:o'bN[vz\|_*@qRV+xHy=s)#U;Y(LTp sS'Xjel'g;<6?REX48ci/B)sa,)D.jlLqJH~\|X7;?gk#v~-O0S&:E/4}^&4V\.eE$YE(TRbciuHSW\\5cuZOo8{IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:44 UTC	592	OUT	GET /cgi/Resources/List HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:44 UTC	374	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: text/plain; charset=utf-8 Expires: -1 X-Citrix-Application: Receiver for Web CitrixWebReceiver-Authenticate: reason="notoken", location="/cgi/GetAuthMethods" Content-Length: 22 X-VSERVER: AAA Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
2024-02-05 19:19:44 UTC	22	IN	Data Raw: 7b 22 75 6e 61 75 74 68 6f 72 69 7a 65 64 22 3a 20 74 72 75 65 7d Data Ascii: {"unauthorized": true}
2024-02-05 19:19:45 UTC	659	OUT	GET /logon/themes/Default/custom_media/logo.png HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
2024-02-05 19:19:45 UTC	4195	IN	HTTP/1.1 200 OK Age: 74 Date: Mon, 05 Feb 2024 19:16:56 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "e1f-60f9277464640" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 23 Jan 2024 01:00:01 GMT Accept-Ranges: bytes Content-Length: 3615 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=89 Content-Type: image/png Strict-Transport-Security: max-age=15552000; includeSubDomains; preload PNG IHDR2v]tEXtSoftwareAdobe ImageReadyqe<IDATx]G4d+u{2[Ado,:;I;@y$ffefe&+fpEP6~>\|H8;@@ :>l<JR<RK({rYk)]+q[\vs/M9H%-y&G}(/C7tuP_}S.sF=~+1 qGXH)nYA&(! }+/ {@!+)0\ul-"CgPQ\dq\|D!=I {tg+ON[{}2 gl-c}A&paslH$\s-Mr~x?I;$irYGX1pJ;EzWh`8yGa"x3Cx/\{yEiw^M_UX@_x?LLLfA:.%qwLKd\|N7$>fuE@=,NON3@&Ma0\|"8{z=oVoMz<>XeWT>d`J1.lyuw(\g2WdGbLz<x&A'g_\|U'g3ZN;\|\^-d'eiMg-vAYd"$'r,2rZiIe5J1]XD"P70&~9>().E{ Na(uq,8om)1X>!kdrdb6<Wp#qejxU%RSnx%#64C\:]Nrs Ovo/;LXk[1\|\=4U!"=)`u1`{#)/w0nCx7eRVtn}x% 8}']%}nQ5]%5.1v])6<Jj>$&uy$L{h`]1v5VpD/;O;S(ebSLu\d=L\|2\|^L!3=t wFx9%z Scrp<yC"i3ln^<kkpkk0uTu\|B?!cWIQ})PB~l]yW"}[Q[\|%.u$zRoniw_\|mMl$,P2wWJ`"j6Q:wOs#2H^E=^MF{GmbF6Om#^F,<IN: EwJ0\|`AQRqRUwS+Ec="bj.^p(8=)6{6!->P ?s:21{'qA$mcH3NtB26%6=29[0Y:'~9TbCf9a&IX+z7s<4wG211R[L`_1&:%cXyo11`kjg!"Q>$]}QmweF_zWe.KuYW-W44p"f,#OHL\|%}ctSDdhd?$sd_&^:(]:9& @ @ @ !!2o^f\|}w9;Y4jQO$8B(@ "y"lU_]kw@ "i@$$lc5!J ^z$ l'c"B<@ -I{R.A33f>?,4/}mkRO~Bdz.,Qd)=^#e<WdxHw.W+.YbRJhXy~lo!A6g zv HPQLkJ%UXQbueDHzgmSULDZ1 5yH?X?{8&2)M7DGH=znp+7G]gsc<C0<2J H4tNi96(LQzDoH2<\|)'QM.jMK?~FlaOpA1#R>CLg7wl!O -=:)u r1]A;N #`^G{x$cG+GCx)u[U[dW-Dxz$}uWoc@tB';eEMtKR6EVt(MkLcoP68wN=.vHv:#P/t6MUHtPG5i!t{BFJw:B]xDQ>/@$<(d(j.<\x`!AT"EC:"SsXA).6]Tw.h+Mj;VP} !L=tH3~h L4&1{3WIHT-wcEY0]+8(]zEyU SubJ^j?]=OYW_B%<gP7p=$M)CeL}f"JJY@)\\B;g1qk-IEeWP_6sCT yvoMTo?yfl{#_3=E \|0@ I";@ %H H^'A4d@ /G8-YIENDB`
2024-02-05 19:19:50 UTC	656	OUT	GET /vpn/media/NetScaler-AAA-logo-center.png HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
2024-02-05 19:19:50 UTC	2638	IN	HTTP/1.1 200 OK Age: 1 Date: Mon, 05 Feb 2024 19:18:13 GMT Cache-Control: no-cache Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "7f1-60f55b0f8dc00" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:36 GMT Accept-Ranges: bytes Content-Length: 2033 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=82 Content-Type: image/png Strict-Transport-Security: max-age=15552000; includeSubDomains; preload PNG IHDRrtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:CFD526CEE2B311E5A324A96D5959E708" xmpMM:DocumentID="xmp.did:CFD526CFE2B311E5A324A96D5959E708"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CFD526CCE2B311E5A324A96D5959E708" stRef:documentID="xmp.did:CFD526CDE2B311E5A324A96D5959E708"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>_IDATxZq050%%8%HPKp%%pWFWOfrwf#:Zyz^L&#___}[;6aI6>a7c&Q[&Q+n_`H3F0~x30ERx}HXlg;Fjx{ARm;E.;aV#d#w%m"M#ChU/O86g{)aItI:2.kS16.6GE_`'K.KJC'<95Xol]Ci!6{\|m+4c/xV2Yfg%X>S+^ =0fWU;<f[+m(>p7P]1Ktag`\e{MN1KLS;"pB<iwbbJM0L+^'RZ/-}lrXB[2pRU"h@,yEv.y.O#Nacr11RKP{)`q?gTOQY"Qa.?f#n$arp>_WqNQi3fxX}b6j06q3yV&ckaYr0D?:]CfMM${,n)o7FcNJajf8%kC.!Tn%1o<1an1>Gu{knjPnv(V{&Jy.P.TGpCrboHl5uZW\|j[J87,yB}} 35:+fMB71`SWOqjD5'P>5#67WeE,G~M}by}j`Ac?IENDB`
2024-02-05 19:19:50 UTC	689	OUT	GET /logon/LogonPoint/receiver/images/common/ReceiverFullScreenBackground.jpg HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
2024-02-05 19:19:50 UTC	7291	IN	HTTP/1.1 200 OK Age: 1 Date: Mon, 05 Feb 2024 19:18:13 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "c676-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 50806 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=93 Content-Type: image/jpeg Strict-Transport-Security: max-age=15552000; includeSubDomains; preload JFIFC %# , #&'))-0-(0%()(C (((((((((((((((((((((((((((((((((((((((((((((((((((@ "$!1QAqa"2?REv9a!PhEX@fP$haQ@djU, 2)Aa $PmvquH,"H@H5+#Q $" #P$R@d$X("9{\EX @PP E ($ $Pi" ,@"(,H($$@^MTQy@ )R@H(* HEPhH,"$Fdi.{(#D` B@HEdRH(4@fAR !FT 2)$PP!B(Q=g9H(+$j$FD DPR EHPP ` ,@@ @@H@;(DQtXGX@B,! "XDhQa(PPDQDH,?DA`EAHH()@"PH,PE`@AR P@d$5X@@ @"3=D @@ HH@ PHDPX($"EH"(E $PTg;]4@@\DyPPPPPaA`)Q"FPPX@A@fFDT(,@ `#H"()R@AAPXP #H," "FT!FY 24t9uQDHj)@H()((-Ab@$H+h HH(H$FdX () A"@R"DH(.(byP@H(((, B"PP#Q $", ! DPX`Ph5+"(/>fqDAa@ $h`EX@B$"EAb@`24"FAbA@$"H+0jsA"40X@dRP@AAQ#@25 EH Dj PP (AEb"("(vh ?F' (B($FX@H" ",!FX@BA@AH,@"ED/24DADXFfa A@AH,@(ARP@AaP"FPX@@!^~QsHbFdR@A@fD@AP&@di H `"P"(,@@ HP)@AP&My6ePE@N0$PTPQD$"A#P D @@B(A@GoQH ," $"5#HE@"E $PTPaPDPR [$PE$"42()Aa 4H,@AYM@ P DQDHAPT2)@ @@P$PT$FdX(@ @@Mh`2 (?K'@!PPXAR (","!D(,HH $P >-M)U 3`j PX@@@A@fdR @3`#FekHhET"PR$X"4"T A@fX$FVF@@(2,@"EDFE$PH* (@AR(dX R( $PT;u@C~G!P@HE 24@T 2)B$A@AR)AP @@(D3#Q $H ,H@A@dDTP #@24P@HF&,HH !B Q,A@Dj$A 24XAPPXPXPB($MVf @B(`E"4 @ "Q"4 "$muP~G!!@HE "H,@PXP()( 8H24X "X@!A40DH"X!@H9?B(+#I $P$hafHf$ FEHHB$X0PX HAY@EDi)@DD"$EE(FDiAP"({xh?Ry8APB PPR(HE@DhE! PH(P Px4 $" !FdR P" 3@H,+"X@HEAR 0=k2aQ!f0$,HE!FdX$YUj"E"FY$idjH@A@@"b w("4@dRH@Ab E4H" E 7n6srMPN EAHEHE75wm`"XH@HEVE $"#H)H 2Ff]8fg"B,VFdhI 30BF D "F@H1#idjDDH B"$j HF@B,@A@@"5qD"E R"B(ETPX$iH"( " 7A ?T(A@@EH$PHAHE "(l}~6Ue$ PEHE "4"X@B, $")B /sHE"FfB" $PAYi@d+0PH2)!U4PH+$X"* 1#iY "E4D"E !T" DP"E\{2B@<@A@PAY@Aa"(,E H24 ARP<[yM/T!QVH#H(Q "E!P !`$\\gEha!XETQFdi!T@AHB50 1+)` $"4$FH5+1#Q(`"5D $,T"4EqD#I` @" w\<i B((-ADXN@@" AB)(@D$F(G~vQ$ PAQfa!a"FFdjF@AaAa$u9u0+l`m"@f@fUf+#P7 #Q $" f$mdjQ$j$`@ARB(Udi $F$j$`X#[AR#Qe)f V`d]E($ R"DhE)@H"F#I@P)@{[z@d((Z." @AQ@@"4PAuDPMQE@AH/:H A<{y $P@HE$"A@A@A@AaX@djVj\B(40B0D"!, "5+0DX@dj#Q 545j$!H(HFB5B(R $X@dR1#B(H5T@VEHAA@Cqb M@EH@4T@b5dTPDxvDPT?T ((("4@T5@dT]<[75k$PPX!XB(QdjF@dB0B0B128Ff@fV "D$jjXARaDTX@HE@A@f+bFE@DHUd 17H$oq 2)Q"@f $M5#H* (APTQ D
2024-02-05 19:19:50 UTC	7291	IN	Data Raw: 69 01 13 71 a4 15 91 a4 dc 51 00 45 41 40 64 58 02 22 82 a2 35 10 10 54 01 22 80 c8 d2 45 10 01 48 8a 02 0b 10 00 05 00 00 00 44 68 06 06 90 44 00 00 00 00 00 05 00 00 00 22 28 08 29 14 73 f2 6c e7 fa e4 df 93 6f 53 e9 86 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 82 88 20 40 00 01 fa a0 1e 4e 11 50 06 86 56 a0 a0 00 00 05 00 51 00 51 29 41 42 80 02 50 51 28 0b 50 14 00 00 00 00 40 01 54 00 00 00 00 11 1a 64 00 00 00 00 01 00 01 35 4d 15 00 00 00 00 11 11 a4 d1 50 00 00 10 00 07 7f 16 de 7f 8e 0e 9e 2d 9d 4f b0 75 84 51 a1 91 a4 88 20 b0 80 82 80 82 80 82 80 82 90 10 58 40 41 61 01 05 8a 0c aa 81 52 11 40 48 45 01 21 14 04 82 80 8a 00 04 20 01 16 02 0b 00 41 40 41 Data Ascii: iqQEA@dX"5T"EHDhD"()sloSt @NPVQQ)ABPQ(P@Td5MP-OuQ X@AaR@HE! A@A
2024-02-05 19:19:50 UTC	7291	IN	Data Raw: 51 48 aa 88 a2 0c a6 e3 40 30 2e e2 2a 80 02 24 69 20 ac 8a 02 44 50 10 58 80 91 8f 2e fa 78 d7 47 1f 3e dd cc fa 41 c6 23 51 11 50 52 2a a0 b0 80 82 c2 02 0a 02 0a 20 82 80 82 c2 0a 82 c2 02 0b 08 08 28 82 0a 02 0a 02 42 28 09 08 a0 10 00 00 00 08 00 b0 80 82 80 82 80 90 8a 0a 90 8a 02 42 28 09 05 01 05 01 05 84 04 08 02 42 28 08 8d 00 cc 16 11 46 46 92 20 82 a0 24 14 04 16 20 a0 0a 04 00 41 48 a3 e9 52 a0 c3 99 69 50 05 a5 40 16 95 00 5a 20 0d 0c a8 28 80 28 94 a0 a2 52 82 89 4a 0a 25 28 28 94 a2 a8 94 a0 a2 00 a3 20 34 32 02 88 02 88 02 88 02 88 03 43 2b 41 44 a5 15 69 52 94 16 95 14 16 88 02 88 02 89 4a 0a b5 04 14 45 a0 2d 40 1a 19 50 55 40 17 15 0c 41 57 10 06 84 c5 05 13 14 17 03 04 45 54 c5 c0 7a 78 db ce 35 8e 3e 1d f7 dc 76 05 03 01 54 c1 05 6b Data Ascii: QH@0.$i DPX.xG>A#QPR (B(B(B(FF $ AHRiP@Z ((RJ%(( 42C+ADiRJE-@PU@AWETzx5>vTk
2024-02-05 19:19:50 UTC	7291	IN	Data Raw: 3a ab 2d 20 ad 63 2d 62 0d 63 58 ce 2e 22 b5 8e fe 2c 9c ff 00 5c 79 cb b1 e8 cf 64 1a 5c 45 c4 1a c6 d8 c6 f3 e1 35 1a c5 c4 c6 b1 95 6b 17 13 17 10 6b 1a c6 71 ac 41 ac 6b 19 c5 45 6f 1b c6 33 e1 ac 4d 1a c6 b1 9c 6b 10 56 b1 96 b1 9d 1a c5 4c 54 1a c5 4c 54 55 6f 18 6b 10 6b 9f 96 b1 9e 5a c4 d5 6b 17 19 c6 b1 05 5c 45 c4 15 a4 c5 03 1a c4 5c 40 53 14 03 05 c4 0c 53 00 17 01 05 00 50 00 33 2a c5 04 08 00 91 1a 37 2a 8c 44 69 04 88 2a 00 40 04 4d 6b 53 55 19 d4 69 14 44 54 d5 41 9d 69 01 93 55 14 46 75 a4 dc 31 18 4d 5d 35 a1 19 d6 91 51 96 5a d4 d5 18 d4 d6 91 46 75 35 77 11 51 9d 4d 69 14 67 59 d6 f5 9d c5 c4 61 1a d4 51 8d 4d 6b 53 55 18 d4 6b 71 9d 5c 19 d4 d6 b5 35 46 13 5a d4 d5 19 d6 5b d6 75 51 96 75 bd 67 57 06 75 9d 6d 9d 51 9d 4d 5d 40 65 35 Data Ascii: :- c-bcX.",\yd\E5kkqAkEo3MkVLTLTUokkZk\E\@SSP37Di*@MkSUiDTAiUFu1M]5QZFu5wQMigYaQMkSUkq\5FZ[uQugWumQM]@e5
2024-02-05 19:19:50 UTC	7291	IN	Data Raw: 53 7e 15 23 20 8a 44 00 11 35 50 12 26 b4 9a a4 64 54 11 35 35 75 35 44 00 07 0f ca ea 73 9c fd bb bc 5f 91 d7 ab c9 bf 59 ec 0e 60 00 00 40 00 48 28 08 45 00 80 00 00 01 15 04 50 01 60 22 a9 82 80 0b 10 30 14 0c 5c 15 14 05 c4 05 c4 5c 05 c5 04 0c 50 05 c5 c1 40 0c 54 51 70 c5 40 8a 60 00 b0 01 48 20 a0 08 62 84 14 16 00 40 51 11 45 41 21 14 04 84 50 11 1a 45 44 45 05 40 d0 12 0a 9a a8 26 a8 0c ea 2a 28 9a 2a 28 9a cb 5a ce 82 68 ba 8a 8c a6 b4 9a 2b 29 ab a3 48 ca 2a 03 3a 9a d6 b2 a2 33 ad 33 aa 26 b3 ad 6a 6a 88 ce b4 9a a3 e4 0a 3d 5e 91 05 02 20 a0 44 14 08 82 80 82 90 10 58 40 41 62 40 02 10 00 84 10 16 00 82 80 84 58 40 48 46 a1 04 66 11 a8 42 8c c2 2c 20 10 21 00 08 b0 10 50 42 00 00 a4 04 51 41 21 14 11 22 80 00 a0 91 40 00 50 20 a4 11 05 80 22 Data Ascii: S~# D5P&dT55u5Ds_Y`@H(EP`"0\\P@TQp@`H b@QEA!PEDE@&((Zh+)H*:33&jj=^ DX@Ab@X@HFfB, !PBQA!"@P "
2024-02-05 19:19:50 UTC	4503	IN	Data Raw: 00 00 14 aa a2 09 44 54 a0 a0 08 0a ca b3 aa 2d 40 10 4d 2a 6a 82 08 20 68 8a 0c ae a6 a8 54 13 55 06 75 75 9d 01 29 a2 89 a9 aa ca a0 86 a6 a8 32 ac ea a1 a9 aa 9a a3 3a 9a a8 a3 da 2c 57 23 b1 20 b0 11 15 40 42 2c 58 0c c2 34 03 31 62 80 82 80 84 52 20 90 8d 42 03 30 8d 42 08 90 8b 05 a2 42 28 09 08 a0 24 22 90 a2 44 8d 42 03 30 6a 10 19 16 0b 44 46 a2 40 48 45 84 51 20 a0 8c 91 a4 08 91 1a 84 08 c8 d2 2a 44 16 10 22 24 50 10 69 22 88 2c 48 22 11 45 11 1a 01 91 61 02 22 34 80 80 08 00 a0 40 04 01 51 22 46 93 54 66 0a 7c 83 a7 87 3d b7 7e dd 0c c9 99 80 40 d1 00 01 40 02 a0 80 51 35 14 5a 88 8a 28 80 00 09 55 22 a0 08 22 80 c8 ba 8a 80 54 a0 a2 02 2a f3 b3 59 01 da a2 66 dc 2a 8a 25 28 28 94 a2 28 94 a0 a2 55 a0 05 28 45 2a 52 82 d2 a0 0b 56 b2 03 55 59 Data Ascii: DT-@Mj hTUuu)2:,W# @B,X41bR B0BB($"DB0jDF@HEQ D"$Pi",H"Ea"4@Q"FTf\|=~@@Q5Z(U""TYf%(((U(E*RVUY
2024-02-05 19:19:50 UTC	7291	IN	Data Raw: 23 55 10 05 a5 40 16 95 00 5a 54 28 2d 12 94 15 59 01 a1 95 05 a5 42 83 43 34 a9 06 86 6a d0 52 a5 28 ad 52 a5 01 68 80 35 55 85 a8 ad 15 33 4a 2a d5 cd 66 80 d8 cd 51 55 6b 22 2b 63 34 a0 d5 56 69 51 5a 5a c8 2b 54 ac d5 41 56 b2 0a d5 56 16 83 55 6b 34 a8 ad 55 ac 50 56 ea d6 0a 83 74 ac 82 b7 4a c2 d4 1a a5 66 ad 15 a1 9b 8b 41 4a 94 a2 b5 4a cd 5a 90 aa ac d2 83 54 ac d2 83 54 a9 4a 2a d2 a5 28 2d 2a 52 82 d2 a5 28 2d 2a 52 82 d2 a0 22 d2 a1 41 5c bf 23 a9 ce 66 7e dd 2b c9 e6 eb d5 e4 df ac f6 44 dd 66 95 05 61 68 94 a0 a1 52 82 89 4a 22 89 54 0a 00 00 08 09 56 80 b5 00 55 64 48 2d 10 22 34 33 56 82 d1 00 68 42 88 b5 50 41 44 5a 00 02 2d 10 41 55 28 0b 56 b2 a2 b4 33 56 a0 ab 52 80 a2 14 1a 2a 51 06 a9 59 5a 0d 0c d5 a0 ab 59 aa 8a b4 40 14 42 83 45 Data Ascii: #U@ZT(-YBC4jR(Rh5U3JfQUk"+c4ViQZZ+TAVVUk4UPVtJfAJJZTTJ(-R(-R"A\#f~+DfahRJ"TVUdH-"43VhBPADZ-AU(V3VR*QYZY@BE
2024-02-05 19:19:50 UTC	3140	IN	Data Raw: ad 66 95 95 a9 06 96 b2 54 56 96 b3 56 83 59 a5 65 6a 2b 55 6b 22 41 a5 ac 55 a2 b5 56 b3 44 56 c6 6a 8a d5 2b 35 6a 0d 55 63 14 56 aa d6 14 56 86 6a a2 b5 46 6a d1 5a 2b 34 a8 ad 2b 35 68 2d 2a 52 8a b4 a8 a2 a8 85 45 51 02 2b 54 66 94 56 a9 59 aa 2a 95 00 5a 21 45 51 28 2a 95 00 16 a0 2a 95 2a 50 5a df 87 2f 7f c7 37 7f 0e 4e 6f d8 d6 3a 8c a8 d8 54 05 02 a0 2d 40 00 13 75 43 52 88 00 15 44 04 02 82 28 a9 a2 00 9a a9 a2 09 aa 8a 09 aa 9a a8 88 68 a8 22 a0 89 a8 ba 8a 20 26 88 6b 2a 8a 08 a8 a8 9a 9a ba 2b 3a c8 0a 89 a8 a8 20 cb 49 aa cb 22 eb 3a a9 04 54 54 40 34 44 4d 51 51 13 55 35 51 0d 01 11 0d 15 91 14 54 39 56 73 db 5b d5 44 4d 51 44 45 41 10 54 10 d4 53 55 94 45 4d 00 05 44 46 93 44 44 34 54 00 50 4d 50 44 0d 04 13 54 06 45 45 40 01 00 00 00 00 Data Ascii: fTVVYej+Uk"AUVDVj+5jUcVVjFjZ+4+5h-REQ+TfVYZ!EQ(**PZ/7No:T-@uCRD(h" &k+: I":TT@4DMQQU5QT9Vs[DMQDEATSUEMDFDD4TPMPDTEE@

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:44 UTC	592	OUT	GET /cgi/GetAuthMethods HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0
2024-02-05 19:19:44 UTC	369	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 143 Cache-control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/vnd.citrix.authenticateresponse-1+xml; charset=utf-8 X-Citrix-Application: Receiver for Web
2024-02-05 19:19:44 UTC	143	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 61 75 74 68 4d 65 74 68 6f 64 73 3e 3c 6d 65 74 68 6f 64 20 6e 61 6d 65 3d 22 45 78 70 6c 69 63 69 74 46 6f 72 6d 73 22 20 75 72 6c 3d 22 2f 6e 66 2f 61 75 74 68 2f 67 65 74 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 6d 65 6e 74 73 2e 64 6f 22 2f 3e 3c 2f 61 75 74 68 4d 65 74 68 6f 64 73 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><authMethods><method name="ExplicitForms" url="/nf/auth/getAuthenticationRequirements.do"/></authMethods>
2024-02-05 19:19:44 UTC	657	OUT	GET /nf/auth/getAuthenticationRequirements.do HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
2024-02-05 19:19:44 UTC	1220	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 1931 Cache-control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Type: application/vnd.citrix.authenticateresponse-1+xml; charset=utf-8 X-Citrix-Application: Receiver for Web <?xml version="1.0" encoding="UTF-8"?> <AuthenticateResponse xmlns="http://citrix.com/authentication/response/1"> <Status>success</Status> <Result>more-info</Result> <StateContext></StateContext> <AuthenticationRequirements> <PostBack>/nf/auth/doAuthentication.do</PostBack> <CancelPostBack>/nf/auth/doLogoff.do</CancelPostBack> <CancelButtonText>Cancel</CancelButtonText> <Requirements> <Requirement><Credential><Type>none</Type></Credential><Label><Text>Pre Sign-In Notification</Text><Type>heading</Type></Label><Input /></Requirement> <Requirement><Credential><Type>none</Type></Credential><Label><Text>W A R N I N G : This is a General Dynamics Land Systems computer system. This computer system is provided for business use by authorized personnel. All information and data on the system/network (including personal information) may
2024-02-05 19:19:44 UTC	1081	IN	Data Raw: 62 65 20 6d 6f 6e 69 74 6f 72 65 64 20 61 6e 64 20 74 68 65 72 65 20 69 73 20 6e 6f 20 65 78 70 65 63 74 61 74 69 6f 6e 20 6f 66 20 70 72 69 76 61 63 79 20 69 6e 20 75 73 69 6e 67 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 41 6e 79 20 75 6e 61 75 74 68 6f 72 69 7a 65 64 20 75 73 65 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 64 69 73 63 69 70 6c 69 6e 61 72 79 20 61 63 74 69 6f 6e 2c 20 6f 72 20 63 69 76 69 6c 20 6f 72 20 63 72 69 6d 69 6e 61 6c 20 69 6e 76 65 73 74 69 67 61 74 69 6f 6e 20 6f 72 20 70 72 6f 73 65 63 75 74 69 6f 6e 2e 20 55 73 65 20 6f 66 20 74 68 69 73 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 20 63 6f 6e 73 74 69 74 75 74 65 73 20 72 65 63 65 69 70 74 20 6f 66 20 6e 6f 74 69 63 65 20 61 6e 64 20 63 6f 6e 73 65 6e 74 20 74 6f 20 74 Data Ascii: be monitored and there is no expectation of privacy in using this system. Any unauthorized use may result in disciplinary action, or civil or criminal investigation or prosecution. Use of this computer system constitutes receipt of notice and consent to t
2024-02-05 19:19:45 UTC	672	OUT	GET /logon/LogonPoint/receiver/images/common/authspinner.gif HTTP/1.1 Host: isupplier.gdls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_TASS=https://isupplier.gdls.com/OA_HTML/RF.jsp?function_id=10535&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=ycdQBW5E0U58OfixBNNToemMMjnmFRTGjsCMG6ucAmnT1F100evztzXXznomQbta&code=85abf7d1be83e9a0; NSC_TMAS=c8c98368910a550c6bd3c74260b176b7
2024-02-05 19:19:45 UTC	1533	IN	HTTP/1.1 200 OK Age: 68 Date: Mon, 05 Feb 2024 19:17:02 GMT Connection: Keep-Alive Via: NS-CACHE-10.0: 208 ETag: "3ba-60f55b1081e40" Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Sat, 20 Jan 2024 00:29:37 GMT Accept-Ranges: bytes Content-Length: 954 Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none' Referrer-Policy: no-referrer X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Keep-Alive: timeout=15, max=90 Content-Type: image/gif Strict-Transport-Security: max-age=15552000; includeSubDomains; preload GIF89aD:D\|r\|\R\TFT~LBLd^lTNTL>L\|v\|dZdTJTlft\N\\|v!NETSCAPE2.0!,'X(3$Qu4h3H, ,H hHGB,/:4fQKdy/qDz# e"V#~o53^Oir@Y@rq=@?ACY244RFP=!!,` XCe9K3$QJG1k`hfWdv5hh v}i~efl{w4E(s%rT"(#]~w kMe\V>ml;x/=?A024PN 0!!,'XCe9K3$QJG{1k`hfWdv5ih v}i~efl{w4E(s%rT"(#"< {uo.yXi<f^a#PRM"DFH#39m *-;!!, ' Ae9K31I]=eQa.Q( :O9D,L!HLGM@_.t.q_rMO/W="Y+?{9s.ilVqad1SUZVFHJ`::<q"!;

Timestamp	Bytes transferred	Direction	Data
2024-02-05 19:19:48 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UE+GEmCtMd9tGWv&MD=FbBOknD2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-02-05 19:19:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e3c03484-fee7-471b-964a-80453a952f57 MS-RequestId: f2d2cafc-2f68-46fc-9197-b06b34ac2c58 MS-CV: okVajnwR70+TnaQR.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 05 Feb 2024 19:19:48 GMT Connection: close Content-Length: 24490
2024-02-05 19:19:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-02-05 19:19:48 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1