Windows Analysis Report
Baylor.pdf

Overview

General Information

Sample name:	Baylor.pdf
Analysis ID:	1467117
MD5:	99cd2b314f1efedc6fbf0e4746f3c6c2
SHA1:	d4c6a1e0bffe4cb6db12e033f116a0ca8386b150
SHA256:	8c1b09d8a47947361705cfe14d7505bab9a9c5328b919d6e6b1f9701814c350b
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected BlockedWebSite

AI detected suspicious PDF

Detected non-DNS traffic on DNS port

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Signatures

AV Detection

Antivirus detection for URL or domain

Source: https://docs.doc2rprevn.buzz?username=

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://share-eu1.hsforms.com

LLM: Score: 7 brands: Microsoft Reasons: The URL 'https://share-eu1.hsforms.com' does not match the legitimate domain 'microsoft.com' associated with Microsoft. The page uses social engineering techniques by asking users to confirm authorization to access confidential documents, which is a common phishing tactic. The button 'Access Secured Document with Microsoft Cloud' is designed to mislead users into thinking it is a legitimate Microsoft service. The domain 'hsforms.com' is suspicious and not associated with Microsoft. There is no prominent login form or CAPTCHA, but the presence of a suspicious link and the use of social engineering techniques indicate a high risk of phishing. DOM: 1.1.pages.csv

Yara detected BlockedWebSite

Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_288, type: DROPPED

Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:51035 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.4:53461 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:51001 -> 1.1.1.1:53

IP address seen in connection with other malware

Source: Joe Sandbox View	IP Address: 172.65.255.172 172.65.255.172
Source: Joe Sandbox View	IP Address: 172.65.198.19 172.65.198.19
Source: Joe Sandbox View	IP Address: 172.65.240.166 172.65.240.166
Source: Joe Sandbox View	IP Address: 172.65.202.201 172.65.202.201

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wRXsxUwLsUpPVyr&MD=gPsWgmO6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.4545/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /144978769.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js-eu1.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/144978769/banner.js HTTP/1.1Host: js-eu1.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1720022100000/144978769.js HTTP/1.1Host: js-eu1.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022131934&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132322&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132348&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022131934&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=MZxNcVCG0WW3RUn8gB2mWuM86GLxYUekBst7gOSLbao-1720022133-1.0.1.1-ckscrf8Lad2D6Oz1xG2CMCOJvdHdkVyBjQotTrgXdnpMW6WXAU6Q5Z0ZTJtgmKVi3uZ058GMMAWJruOyl4yw1Q; _cfuvid=vKpWkpzWG1fvGiNCP1s7cNzl_QP8Wtqj1cQvH3E.oE8-1720022133517-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132348&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GZ3fAweErJ1giZEDHR_qkbXv6BfG815EqkX6EdPEZAc-1720022133-1.0.1.1-RI28IovT1WqGCjCYH9HNPYz79vZg8G6fpUEtNR7zeba1xIvFCGRmdNsmYsa7NrF.vu7n04_wxV5HeQPAu70OLA; _cfuvid=03S3KeShUqgf4ESa0a7BtJguwjuZIp8hOcRRK2wHM.o-1720022133819-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132322&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923If-Modified-Since: Fri, 21 Jun 2024 12:13:43 UTC
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js-eu1.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kPXge3bR432XnTHMnoOzsrvgb7aFEBoE0Eew6V_pGqk-1720022131-1.0.1.1-RZvX4JBfp17BnViCFxqOvc26F9wB1nGhZ59yJEnCjTjs5HehqAH986Z_9GWLYcOp2tTJ8Ng0VeMuW.rzoHO_6wIf-None-Match: W/"faad68d91ea96917719131c9e680d412"If-Modified-Since: Thu, 06 Jun 2024 13:36:59 UTC
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7d377a186677c174f204d466b8fa5fdb"If-Modified-Since: Wed, 15 May 2024 14:34:44 UTC
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022142436&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022142436&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143559&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143541&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143559&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143541&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wRXsxUwLsUpPVyr&MD=gPsWgmO6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923If-Modified-Since: Fri, 21 Jun 2024 12:13:43 UTC
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7d377a186677c174f204d466b8fa5fdb"If-Modified-Since: Wed, 15 May 2024 14:34:44 UTC
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206557&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206734&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206756&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206557&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206734&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206756&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022280614&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022280614&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /submissions/v3/public/submit/formsnext/multipart/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: share-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: track-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev

Source: unknown

HTTP traffic detected: POST /submissions/v3/public/submit/formsnext/multipart/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveContent-Length: 2924sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryCbyOPNp4a4uIERgxsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A0.1.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_272.10.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_286.10.dr, chromecache_289.10.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_287.10.dr, chromecache_284.10.dr	String found in binary or memory: https://docs.doc2rprevn.buzz?username=
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hs-analytics.net/analytics/1720022100000/144978769.js
Source: chromecache_286.10.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2/144978769/banner.js
Source: chromecache_289.10.dr	String found in binary or memory: https://js-eu1.hs-scripts.com/144978769.js
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hscollectedforms.net/collectedforms.js
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js
Source: Baylor.pdf	String found in binary or memory: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1)
Source: chromecache_288.10.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_288.10.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51029
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51023
Source: unknown	Network traffic detected: HTTP traffic on port 51064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51021
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51027
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51025
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51026
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51030
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51038
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51039
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 51047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51040
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51044
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51049
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51051
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51057
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51055
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51059
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51060
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51062
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51067
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51066
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51071
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 51027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51005
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51006
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51004
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51011
Source: unknown	Network traffic detected: HTTP traffic on port 51063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51016
Source: unknown	Network traffic detected: HTTP traffic on port 51024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51017
Source: unknown	Network traffic detected: HTTP traffic on port 51007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51020
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51018 -> 443

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:51035 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.winPDF@48/81@56/14

Source: Baylor.pdf	Initial sample: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1
Source: Baylor.pdf	Initial sample: https://share-eu1.hsforms.com/1ifqlh1epsxeegyv0ofdb5a2ebec1

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-07-03 11-55-05-225.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Baylor.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1556,i,3276697783917647603,3070842491392566807,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,4647754721772036237,11842864204794463739,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1556,i,3276697783917647603,3070842491392566807,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,4647754721772036237,11842864204794463739,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Baylor.pdf	Initial sample: PDF keyword /JS count = 0
Source: Baylor.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A91l2xtw8_1sef8d9_5pc.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A91l2xtw8_1sef8d9_5pc.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Baylor.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Persistence and Installation Behavior

AI detected suspicious PDF

Source: PDF shot

LLM: Score: 9 Reasons: The PDF contains a visually prominent button labeled 'VIEW DOCUMENTS' which could mislead the user into clicking it. The text 'You have a document to view and sign.' creates a sense of urgency and interest. The email address 'randy_woodruff@baylor.edu' and the name 'Baylor University' are used to impersonate a well-known educational institution, which adds credibility to the phishing attempt. The sense of urgency is directly connected to the prominent button, increasing the likelihood of the user clicking on it without verifying its authenticity. Additionally, the instruction 'Please complete Document with your electronic signature by following the link above.' further pressures the user to act quickly.

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.65.255.172	44e2b8ccc74e48939e2e27783a94a157.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.198.19	3eeb7d48131e40729c87ea3a6955657f.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.240.166	e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.202.201	7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
172.65.238.60	18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.176.91	static.hsappstatic.net	United States	13335	CLOUDFLARENETUS	false
172.65.232.43	4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.65.192.122	15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev	European Union	13335	CLOUDFLARENETUS	false
172.65.208.22	2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.4

Contacted Domains

Name	IP	Active
3eeb7d48131e40729c87ea3a6955657f.pacloudflare.com	172.65.198.19	true
4b32bb64ce554875ae3f8836479c89d4.pacloudflare.com	172.65.232.43	true
15e49451d4884c2582b2c780d1077dd0.pacloudflare.com	172.65.192.122	true
static.hsappstatic.net	104.17.176.91	true
20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev	188.114.97.3	true
7c7b02d4bc3d48dd81a7c7738d4de1ab.pacloudflare.com	172.65.202.201	true
e5de3d23065c4748b155c28e6fa36f3e.pacloudflare.com	172.65.240.166	true
www.google.com	142.250.185.164	true
44e2b8ccc74e48939e2e27783a94a157.pacloudflare.com	172.65.255.172	true
18ea70d2d9a945cfb97d818ba71817dc.pacloudflare.com	172.65.238.60	true
2acdb9b66bb242618283aadb21ede6c1.pacloudflare.com	172.65.208.22	true
track-eu1.hubspot.com	unknown	unknown
forms-eu1.hscollectedforms.net	unknown	unknown
js-eu1.hsforms.net	unknown	unknown
js-eu1.hs-banner.com	unknown	unknown
js-eu1.hs-analytics.net	unknown	unknown
forms-eu1.hsforms.com	unknown	unknown
share-eu1.hsforms.com	unknown	unknown
js-eu1.hs-scripts.com	unknown	unknown
js-eu1.hscollectedforms.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759	false	Avira URL Cloud: safe	unknown
https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1	true		unknown
https://forms-eu1.hsforms.com/embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206557&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132322&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://js-eu1.hs-banner.com/v2/144978769/banner.js	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1	false	Avira URL Cloud: safe	unknown
https://share-eu1.hsforms.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://js-eu1.hs-analytics.net/analytics/1720022100000/144978769.js	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206756&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://static.hsappstatic.net/forms-submission-pages/static-1.4545/bundles/share-legacy.js	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hsforms.com/submissions/v3/public/submit/formsnext/multipart/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1	false	Avira URL Cloud: safe	unknown
https://js-eu1.hscollectedforms.net/collectedforms.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022131934&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hscollectedforms.net/collected-forms/v1/config/json?portalId=144978769&utk=	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hsforms.com/embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759	false	Avira URL Cloud: safe	unknown
https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://js-eu1.hs-scripts.com/144978769.js	false	Avira URL Cloud: safe	unknown
https://js-eu1.hsforms.net/forms/embed/v3.js	false	Avira URL Cloud: safe	unknown
https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6	false		unknown
https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=18&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022280614&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143559&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206734&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022142436&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://forms-eu1.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1	false	Avira URL Cloud: safe	unknown
https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/cdn-cgi/styles/cf.errors.css	false	Avira URL Cloud: safe	unknown
https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	true		unknown
https://track-eu1.hubspot.com/__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132348&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown
https://track-eu1.hubspot.com/__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143541&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	2776223DFC052A3D1DD500607A630CF0	B8D797D4F8E8853CE632BB7CA49C11A30B8F8964	F95272D1E3B435F634D8FE83B48FAA7307B2484A9D25C85EAB36DA5327EEF8F8
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	2776223DFC052A3D1DD500607A630CF0	B8D797D4F8E8853CE632BB7CA49C11A30B8F8964	F95272D1E3B435F634D8FE83B48FAA7307B2484A9D25C85EAB36DA5327EEF8F8
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	5DA57DDC2FB27A3B892EAA44C3402FD6	08457F4DB0B332A2C5672904988DC6384571183D	0418D65D6693BAD351E833078E8451FBB6A0022D7B5D6187A1D6949A2A670858
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	5DA57DDC2FB27A3B892EAA44C3402FD6	08457F4DB0B332A2C5672904988DC6384571183D	0418D65D6693BAD351E833078E8451FBB6A0022D7B5D6187A1D6949A2A670858
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\004d3410-3d7e-4b15-a75c-29185af2ea52.tmp	JSON data	EB33091D2BD72B63CBA5A849DC49146B	C47864AE8A4BBC0A738A771964DE8624BC470AD3	A2D1EECA9933A9B55647A496B3624C0ABEA68DB571C52577F18E62389862470C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	EB33091D2BD72B63CBA5A849DC49146B	C47864AE8A4BBC0A738A771964DE8624BC470AD3	A2D1EECA9933A9B55647A496B3624C0ABEA68DB571C52577F18E62389862470C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	8092D962F10F0C748C0C60CFBE58E47B	8FF15CD0CCD9D61A6138CA3679741E49083CF980	FEB10E46B39B990A7ADC96A0B9C22B2B1C0358606B36DE7D0955CC2E1348D4D4
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	273C890D6FC574C3D8397D7B90C02BF9	7151A9615AB05FD10FA983B1AF7F63DC05AF1FBE	4BC6A4B4BDFCB3759504A435F9F1770351E8DA21DC8030DAE9EC6020C4705F73
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	273C890D6FC574C3D8397D7B90C02BF9	7151A9615AB05FD10FA983B1AF7F63DC05AF1FBE	4BC6A4B4BDFCB3759504A435F9F1770351E8DA21DC8030DAE9EC6020C4705F73
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240703155507Z-158.bmp	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54	61657E4E44B956E2138A35CEB3079B33	A93A6BC3809D2036D4A87664F51CA15CCF09E395	E76BA87734AD71A2A137DF49D672D89D7466C16DC6BB1E14F6B40D205CB08496
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15	97342B68D16BEA7352F2AFE88D643900	A93E6F5084EFA094FDB8BD43699A92B742ACD96A	C9AC658918C16CC40EB9CB2D94704F2425B70C3C08DE73B2CE4460BC85DA0256
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	6ECFF92C5A29E7953CA7703F36C4401B	A8C41C61DC8D963EE8E573E2A0BF1869277A3DE6	0F146C10EE9D05F787BDE1AC6CCEEEE469CCC256402AF0CACACC57730F5EA7EB
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression	49AEBF8CBD62D92AC215B2923FB1B9F5	1723BE06719828DDA65AD804298D0431F6AFF976	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	D4AE187B4574036C2D76B6DF8A8C1A30	B06F409FA14BAB33CBAF4A37811B8740B624D9E5	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	A9087781153A791FFD8AA4A33E2C7DB4	8E4EE0136554B4FCBCA892023044F8EF95263443	D04DE542FE4FBD9F35A091EC0CF02E8FF6446819DFAE658C04EFCEEE29C65661
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	32EE139F570EF77A9851D6D968DD74EC	7F540D9F1B962FBFE1D7F76383E92BC1CBB233B1	11351DAAD0B71F26FBAC1C5E93B18E47D9858FE84C4222D72DA2A46DC2F4843C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7392	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	F5567C4FF4AB049B696D3BE0DD72A793	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	BE1722B5BB15C317175A7E4B52328140	9087DB8E9D67EA4617E3733CB36F3776542A06D3	E09FEEB597BA7D78C5D9FB8BD1C80391622C7E1B03B3AD0F83A8294E500EA445
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	6227C4B187FFB5982D1A8E4487D578B5	AF7E7060DDEF75FCAB0A1816301D7EEEE4D810AC	4816B42CC195C77A883AE9FB7EB5B5876E1E545FBCB8221E31A99DB800106548
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	1B0D6B2DAD0ECB10250DBAA17ACF3EDD	DF7F5EFA31CC0F076C8AEA80569E024C5E3B9F3A	30EFE224D957233C7A88737808CA49A2E5AB272092454AB6569ECFA603503870
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	C3F7C3EA70757BD790E6BC22C26E1F0C	E3836EE1F9ADA1B3CBB4266F02D07D7398AF19EB	90D629F2B658F790F1B1DFE745FD97E510C02DA97C453DB433E080AF8F2DD240
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	93DA9EBC81271AA8E968FD8B59CCC987	27AFF6A3E0E506CC4CCD7E9FB5F1C61E90C965FD	BD3D6E454C576E4120BA0E4966B27C0D8B3A4644415202A236FE8B530C5E7C9F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	51BAF27A4F497002098909098A0E9025	C0053942330058AF260C04E822A557E2F84221EF	C269B6BBD398B3635448C0F6D4D060337CB79B30EDCA99571FEDC75AAAD4901F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	6EABCD42D410C55F36E865C2B0786116	7E369BA8F44EA8D5E05918811B8B4258C56AA524	F2079306854A9DA5301B73B8B177DD03028B159A6E93756E45A90B92BC2DF528
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	91CE1FAF8165F7612FB8A757B0B58D96	78B7180F9468782F9D8D7A51C5FFDB1C5478AE73	69ACDAE22C751FE0E5777ACBD0CD7B2E9563E71F2455E877DF41535CB32BEC14
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	99F334863C877D57F4DC2161568C5539	8BD7AFAE8DE686D37249278AEC010B99805A025C	8F6F41AB486F9D3F11F019BC62DAC42E25C8B4AF27C232BBFAFAFE9FA18DB50C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	A273EB22D73A1406A4FAB55C5FD4ECF3	7325CB207CB62DF31C91AC6B72D66353EF944AD2	13A7D302A4EB5BBEFD3AD554C9DC6C1DC9BA3A601B0B45A0B6DFAB89A97602BB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	3C006032FB5E42C4DA65EF251118AEE7	1860AE19E555678F57A76F9FC8641C0E9B896FE3	0844E0B59454C9B09D6C4DCC181F3F319B455F1B4F90CB46612E78965BDF2EE1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	F6D2C189595B1AAE3D343FC6A01624DD	4BF11D4F805F286F27BAA44DD7A290BC5DC5C124	2CAF9180254AB8FCDA9315E37D1BA32E7679B7532EBBCAEDAC88B962A26428D9
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	D4291CCF3CB90C13C51377831C488D60	039A25C16CFAB0EEC74188DDF4B187428A077879	8EF2AB1381988DE8A6666C4A0F889D83F8281A34632CF1947660E76C1F64D869
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	DC14163F9182F931F2C91528B3F39F3B	1EF4DBD2BA81601DED107DD836EB0A22112FA262	11329B773CCE12CC0351FEFAC3576DA6FC8834ECE3961CAEEA8CC383AE027E6B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	E43F5DD0638111B1B4093B2D2CB03879	B06C39190F2EB72E53AAADFA24CD18DD7D8697DE	6E8A7A464024BF6EE8611DE3D7ABB060128DD3600BCAEB8C5EA2A5896BF82D69
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	ADD8AF992394513BDE8E2D2A1E6B5EAE	5646EDEAB837E5A435B348395D2DD3FF38EEBBA5	B76E27D0668B90AF7E581F17C528C415670779A8DC84307D12DD9FB44B9D2561
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	E80C008B23C30A16F477FB22D1AA9311	ED6DCF718044B6F345CC70C33A1F3003B2E73E37	C326D555D27219100A6CECF24CBF75A87E5F46B6573C033E0BCBEAE4AC2BB0EC
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25	D91676079DDFA23754B4C14824160122	C8907066534E516D7BFD94CE9ECA109DF2F41517	56187F72338AE8F388D5922C1979B552ADDB39C0CE52590E6ACFBCEC9DE96EB4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	DAEF02F9890366A577CA8C265BA421C6	338736993311B885CC03662C46E527ACBFEFFC66	9C75B274CDFB24A66DB6D0A6ADD4C419E9CD221C6B12CE3D7AEEAC9890BF41A8
C:\Users\user\AppData\Local\Temp\MSI107a9.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	E8EC429EC9610DD6BA2469737EFD564E	5A9B8E1DDB3BA2974B338BA944AC21F40C88AF6D	EC2338551EBDBEFF422948F8DD79A1F34CDB4F1764416CFB82B5C5DB5C3F03D9
C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91l2xtw8_1sef8d9_5pc.tmp	PDF document, version 1.6, 0 pages	CEBC7A9460DE0F9791D59B2C41EC67E3	6311E573A8A504963CF77816C94B91213DC0CBBD	C5911F1876FCE2AF2155CCDE227BE5AD4FDAEF68B6F46904E83E1BE46D8965D0
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-07-03 11-55-05-225.log	ASCII text, with very long lines (393)	8947C10F5AB6CFFFAE64BCA79B5A0BE3	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	6DABAEE440E1909CFB92C68A8F8B0BA5	73257BD8A3B09DBA1573260556B5C96EBB771C3D	F6CB67E92BFAD2BFCE3D1267F5D52E53EA58D8821F382EE1B2D30E0FF65573AC
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	92B2D14EA08D830C245FAB4BE2B6A596	2EDF47CEE42180B90723542DB5FA6362A87DF2FD	50FFB0D5BF46B644D3C1DD090BB050CB147D54F8E30115245A18E4E5AFB8E6C6
C:\Users\user\AppData\Local\Temp\acrocef_low\010767be-cc54-4c20-87ff-ae41723bfd9b.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\39f6d9fa-e913-402e-9cac-f8a1df62bfc4.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	18E3D04537AF72FDBEB3760B2D10C80E	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
C:\Users\user\AppData\Local\Temp\acrocef_low\5fa979c0-d43f-48d4-a9ad-0f57f48b64d0.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\ba67f37f-a691-4407-8138-a8a8f6e85cf6.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	A0CFC77914D9BFBDD8BC1B1154A7B364	54962BFDF3797C95DC2A4C8B29E873743811AD30	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
Chrome Cache Entry: 271	HTML document, ASCII text, with very long lines (1150)	FFC504E5E58EA82DB191C946E97FA349	CDF841C1C1AAB59BC98F8B5F33096E4F9A4FED34	40FC7EAC8CB9D2908B758FD08753E2392A5F2CF4FC95E195D727907ACB81E270
Chrome Cache Entry: 272	ASCII text, with very long lines (549)	97005D7E796A7F7451D397D3321047BB	86D09A7A68A8D2D9D1E24467F127FB9111E4E43B	9A7EE6D7DA38B624DE6C01EE7BC282874D3DFB2F7FC4819AD15E8B4B3EBA651E
Chrome Cache Entry: 273	ASCII text, with very long lines (65536), with no line terminators	FAAD68D91EA96917719131C9E680D412	ABA8DE7C192F19B022E23A27A3CAAEE8BE227079	0A4C3A97EF407F3241805C5D8DFEEF2E50683A04EEBAEC655588E184B84AFC38
Chrome Cache Entry: 274	JSON data	4777242193D80E81DC66EC3A20609654	14581E8E282D3B4E0E2F4562F04958E005FCE1F0	0B1D4FFF1728DEB24F06178B82C1943658A030294B8D3DAEBDC997B7C4C033AE
Chrome Cache Entry: 275	PNG image data, 54 x 54, 8-bit colormap, non-interlaced	C33DE66281E933259772399D10A6AFE8	B9F9D500F8814381451011D4DCF59CD2D90AD94F	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
Chrome Cache Entry: 276	HTML document, ASCII text, with very long lines (1150)	FFC504E5E58EA82DB191C946E97FA349	CDF841C1C1AAB59BC98F8B5F33096E4F9A4FED34	40FC7EAC8CB9D2908B758FD08753E2392A5F2CF4FC95E195D727907ACB81E270
Chrome Cache Entry: 277	JSON data	4777242193D80E81DC66EC3A20609654	14581E8E282D3B4E0E2F4562F04958E005FCE1F0	0B1D4FFF1728DEB24F06178B82C1943658A030294B8D3DAEBDC997B7C4C033AE
Chrome Cache Entry: 278	PNG image data, 54 x 54, 8-bit colormap, non-interlaced	C33DE66281E933259772399D10A6AFE8	B9F9D500F8814381451011D4DCF59CD2D90AD94F	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
Chrome Cache Entry: 279	JSON data	4777242193D80E81DC66EC3A20609654	14581E8E282D3B4E0E2F4562F04958E005FCE1F0	0B1D4FFF1728DEB24F06178B82C1943658A030294B8D3DAEBDC997B7C4C033AE
Chrome Cache Entry: 280	ASCII text, with very long lines (24050)	5E8C69A459A691B5D1B9BE442332C87D	F24DD1AD7C9080575D92A9A9A2C42620725EF836	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
Chrome Cache Entry: 281	JSON data	4777242193D80E81DC66EC3A20609654	14581E8E282D3B4E0E2F4562F04958E005FCE1F0	0B1D4FFF1728DEB24F06178B82C1943658A030294B8D3DAEBDC997B7C4C033AE
Chrome Cache Entry: 282	ASCII text, with very long lines (4747)	1978B0030483B19C4E209A8B346CC6BD	271D7269ABC7D7A7106A37AF9A187AC0291EB439	CD9B9B4EE414A1281B3491BAD5121C33DD7126CE4F4A7E88EBF6334D2D184B2E
Chrome Cache Entry: 283	HTML document, ASCII text, with very long lines (1150)	FFC504E5E58EA82DB191C946E97FA349	CDF841C1C1AAB59BC98F8B5F33096E4F9A4FED34	40FC7EAC8CB9D2908B758FD08753E2392A5F2CF4FC95E195D727907ACB81E270
Chrome Cache Entry: 284	HTML document, ASCII text, with CRLF line terminators	2ACE564D0D238F3D9293E4DC013D3C97	19F4C76AE18E668B4757270899F9AF6308799A35	60B2E4FA637E49F27D2E3860A7A2EB8B5961FA9C035895E530B92ED0C23F1D36
Chrome Cache Entry: 285	Unicode text, UTF-8 text, with very long lines (65392), with no line terminators	7D377A186677C174F204D466B8FA5FDB	6C61538EB51F862543A042098AF7154B6297B936	53A3DC763A0BD679523A77F5610E4AB27231FE6763D7089C1C92966DAA1663F7
Chrome Cache Entry: 286	ASCII text, with very long lines (64983)	DBA8938EB79B33771E9D23F9FD16D620	7E317C9B720DFD8799E99543CECC944B5A38964E	39AF3BA81FB9E5ADA412DFA48782C36441176F4DD24B97F7F819DDF918A45B7D
Chrome Cache Entry: 287	HTML document, ASCII text, with CRLF line terminators	2ACE564D0D238F3D9293E4DC013D3C97	19F4C76AE18E668B4757270899F9AF6308799A35	60B2E4FA637E49F27D2E3860A7A2EB8B5961FA9C035895E530B92ED0C23F1D36
Chrome Cache Entry: 288	HTML document, ASCII text, with very long lines (394)	6F8705126F4EB48F749C635E909DBBA0	56DE1B815AEBC63EDC7C171E37D0E9B6CADC71DA	FBD4DBBFC6662EACC41712CAA3AF3C86C3A439E5C6DE915DC794E87FC4B079EA
Chrome Cache Entry: 289	ASCII text, with very long lines (64667)	9EBF492681C2D7E8079CFD854FB1D3C4	257B588299F1AAA5A7751A0449892695FBDC804B	7FBA875C51836D59F826CCC76A52D110BAE8D50F9E47B4D21DBFE70CEA2AC16A

AV Detection

Antivirus detection for URL or domain

Source: https://docs.doc2rprevn.buzz?username=

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://share-eu1.hsforms.com

Yara detected BlockedWebSite

Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_288, type: DROPPED

Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1#main	HTTP Parser: No favicon
Source: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:51035 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.4:53461 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:51001 -> 1.1.1.1:53

IP address seen in connection with other malware

Source: Joe Sandbox View	IP Address: 172.65.255.172 172.65.255.172
Source: Joe Sandbox View	IP Address: 172.65.198.19 172.65.198.19
Source: Joe Sandbox View	IP Address: 172.65.240.166 172.65.240.166
Source: Joe Sandbox View	IP Address: 172.65.202.201 172.65.202.201

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wRXsxUwLsUpPVyr&MD=gPsWgmO6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.4545/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /144978769.js HTTP/1.1Host: js-eu1.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js-eu1.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/144978769/banner.js HTTP/1.1Host: js-eu1.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1720022100000/144978769.js HTTP/1.1Host: js-eu1.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022131934&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132322&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132348&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk= HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022131934&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=MZxNcVCG0WW3RUn8gB2mWuM86GLxYUekBst7gOSLbao-1720022133-1.0.1.1-ckscrf8Lad2D6Oz1xG2CMCOJvdHdkVyBjQotTrgXdnpMW6WXAU6Q5Z0ZTJtgmKVi3uZ058GMMAWJruOyl4yw1Q; _cfuvid=vKpWkpzWG1fvGiNCP1s7cNzl_QP8Wtqj1cQvH3E.oE8-1720022133517-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132348&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=GZ3fAweErJ1giZEDHR_qkbXv6BfG815EqkX6EdPEZAc-1720022133-1.0.1.1-RI28IovT1WqGCjCYH9HNPYz79vZg8G6fpUEtNR7zeba1xIvFCGRmdNsmYsa7NrF.vu7n04_wxV5HeQPAu70OLA; _cfuvid=03S3KeShUqgf4ESa0a7BtJguwjuZIp8hOcRRK2wHM.o-1720022133819-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=cde0f426-55b7-481b-b7ea-ddaa418f0dec&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&t=Form&cts=1720022132322&vi=aaacea36d982e582317f0d8bd0e23759&nc=true&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.1.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.1.1720022131923If-Modified-Since: Fri, 21 Jun 2024 12:13:43 UTC
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js-eu1.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=kPXge3bR432XnTHMnoOzsrvgb7aFEBoE0Eew6V_pGqk-1720022131-1.0.1.1-RZvX4JBfp17BnViCFxqOvc26F9wB1nGhZ59yJEnCjTjs5HehqAH986Z_9GWLYcOp2tTJ8Ng0VeMuW.rzoHO_6wIf-None-Match: W/"faad68d91ea96917719131c9e680d412"If-Modified-Since: Thu, 06 Jun 2024 13:36:59 UTC
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7d377a186677c174f204d466b8fa5fdb"If-Modified-Since: Wed, 15 May 2024 14:34:44 UTC
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022142436&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022142436&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143559&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143541&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143559&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=f63a60f1-bcc4-4521-b9c8-93ab76e2ac6d&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022143541&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.2.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wRXsxUwLsUpPVyr&MD=gPsWgmO6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1Ifqlh1EPSxeEGyV0ofDb5A2ebec1 HTTP/1.1Host: share-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.2.1720022131923If-Modified-Since: Fri, 21 Jun 2024 12:13:43 UTC
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share-eu1.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"7d377a186677c174f204d466b8fa5fdb"If-Modified-Since: Wed, 15 May 2024 14:34:44 UTC
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206557&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share-eu1.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387&hutk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206734&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206756&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206557&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=144978769&utk=aaacea36d982e582317f0d8bd0e23759 HTTP/1.1Host: forms-eu1.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206734&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022206756&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022280614&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=21faa587-510f-4b17-841b-2574a1f0dbe4&fci=9ab50da6-ebc2-4400-bfc0-a5c353a8d768&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=144978769&ccu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1&pu=https%3A%2F%2Fshare-eu1.hsforms.com%2F1Ifqlh1EPSxeEGyV0ofDb5A2ebec1%23main&t=Form&cts=1720022280614&vi=aaacea36d982e582317f0d8bd0e23759&nc=false&u=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&b=251652889.3.1720022131923&cc=15 HTTP/1.1Host: track-eu1.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=u_CvgpLpyL_2uWZGZ__fkB.uIVfipt0CvxEEE2oT0.w-1720022133-1.0.1.1-P02Ayjb6hOQOSD_RktF7aeFZ_rt5z10x.Or8bnDEoKIW8CYDoLjWmsMK5Q8JxOavNxMK6_rgqJb2aADgFmEKyw; _cfuvid=grX3XEZGwUeCTVj212L6IY9lDPJdVJFsCaQlhBSAeAI-1720022133822-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://share-eu1.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /submissions/v3/public/submit/formsnext/multipart/144978769/21faa587-510f-4b17-841b-2574a1f0dbe4/json?hs_static_app=forms-embed&hs_static_app_version=1.5387&X-HubSpot-Static-App-Info=forms-embed-1.5387 HTTP/1.1Host: forms-eu1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=48vJTYCdw5u3sR9bj5JjYsa0Us.hgq08fd1uei58Mpo-1720022130-1.0.1.1-goqQp1vFQMva2V9_xNV5ORXjD6Lml442HOoJeLb2b61X.4T9DoEdBjGFyRTuP8_CSW9UdVpHAWcNCDxRdalCBg; _cfuvid=pToDzUqIg_swt5LA1fZTMeNHKmzgvbg_KcWgM9R9jrE-1720022130165-0.0.1.1-604800000; __hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1; hubspotutk=aaacea36d982e582317f0d8bd0e23759; __hssrc=1; __hssc=251652889.3.1720022131923
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev/?__hstc=251652889.aaacea36d982e582317f0d8bd0e23759.1720022131923.1720022131923.1720022131923.1&__hssc=251652889.3.1720022131923&__hsfp=471034161&submissionGuid=a93e3b54-ade7-47aa-b44a-301aca36fbe6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: share-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: js-eu1.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: forms-eu1.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: track-eu1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 20240207fil787858989597857823784289239doc47837878233893pdf.pages.dev

Source: unknown

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A0.1.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_272.10.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_286.10.dr, chromecache_289.10.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_287.10.dr, chromecache_284.10.dr	String found in binary or memory: https://docs.doc2rprevn.buzz?username=
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hs-analytics.net/analytics/1720022100000/144978769.js
Source: chromecache_286.10.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hs-banner.com/v2/144978769/banner.js
Source: chromecache_289.10.dr	String found in binary or memory: https://js-eu1.hs-scripts.com/144978769.js
Source: chromecache_272.10.dr	String found in binary or memory: https://js-eu1.hscollectedforms.net/collectedforms.js
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0
Source: chromecache_283.10.dr, chromecache_271.10.dr, chromecache_276.10.dr	String found in binary or memory: https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js
Source: Baylor.pdf	String found in binary or memory: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1)
Source: chromecache_288.10.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_288.10.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51029
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51023
Source: unknown	Network traffic detected: HTTP traffic on port 51064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51021
Source: unknown	Network traffic detected: HTTP traffic on port 51029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51027
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51025
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51026
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51030
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51038
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51039
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 51047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51040
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51044
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51049
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51051
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51057
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51055
Source: unknown	Network traffic detected: HTTP traffic on port 51042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51059
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51060
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51062
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51067
Source: unknown	Network traffic detected: HTTP traffic on port 51002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51066
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51071
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 51027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51005
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51006
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51004
Source: unknown	Network traffic detected: HTTP traffic on port 51046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51011
Source: unknown	Network traffic detected: HTTP traffic on port 51063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51016
Source: unknown	Network traffic detected: HTTP traffic on port 51024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51017
Source: unknown	Network traffic detected: HTTP traffic on port 51007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51020
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51018 -> 443

Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:51035 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.winPDF@48/81@56/14

Source: Baylor.pdf	Initial sample: https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1
Source: Baylor.pdf	Initial sample: https://share-eu1.hsforms.com/1ifqlh1epsxeegyv0ofdb5a2ebec1

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-07-03 11-55-05-225.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Baylor.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1556,i,3276697783917647603,3070842491392566807,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://share-eu1.hsforms.com/1Ifqlh1EPSxeEGyV0ofDb5A2ebec1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,4647754721772036237,11842864204794463739,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1556,i,3276697783917647603,3070842491392566807,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,4647754721772036237,11842864204794463739,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Baylor.pdf	Initial sample: PDF keyword /JS count = 0
Source: Baylor.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A91l2xtw8_1sef8d9_5pc.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A91l2xtw8_1sef8d9_5pc.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Baylor.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Persistence and Installation Behavior

AI detected suspicious PDF

Source: PDF shot

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

ID:	1467117
Product:	CloudBasic
Start time:	17:54:10
Start date:	03.07.2024
Sample:	Baylor.pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	99cd2b314f1efedc6fbf0e4746f3c6c2
SHA1:	d4c6a1e0bffe4cb6db12e033f116a0ca8386b150
SHA256:	8c1b09d8a47947361705cfe14d7505bab9a9c5328b919d6e6b1f9701814c350b
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Windows Analysis Report
Baylor.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report Baylor.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
Baylor.pdf