IOC Report
https://4smgswwi.r.us-west-2.awstrack.me/L0/https:%2F%2Fm.exactag.com%2Fai.aspx%3Ftc=d9917688bc40b07205bbd26a23a8d2e6b6b4f9%26url=%2568%2574%2574%2570%2525%2533%2541primmacy.com%252Fwinner%252F77663%252F%252FYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==/1/0101019079f53360-ad062f3a-6c08-4c14-8569-

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
ASCII text, with very long lines (61177)
downloaded
Chrome Cache Entry: 101
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 102
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 103
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 104
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 105
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 106
PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 107
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 108
ASCII text, with very long lines (14775)
downloaded
Chrome Cache Entry: 109
PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 110
HTML document, Unicode text, UTF-8 text, with very long lines (1112), with CRLF line terminators
downloaded
Chrome Cache Entry: 111
Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
downloaded
Chrome Cache Entry: 112
PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 113
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
downloaded
Chrome Cache Entry: 114
PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 115
PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 116
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 117
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 118
Unicode text, UTF-8 text, with very long lines (32049)
downloaded
Chrome Cache Entry: 119
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 120
HTML document, ASCII text, with very long lines (3437), with CRLF line terminators
downloaded
Chrome Cache Entry: 121
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 122
PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 123
HTML document, ASCII text
downloaded
Chrome Cache Entry: 124
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 125
ASCII text
downloaded
Chrome Cache Entry: 126
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 127
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 128
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 129
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 130
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 131
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 132
GIF image data, version 89a, 22 x 22
downloaded
Chrome Cache Entry: 133
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 134
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 135
GIF image data, version 89a, 22 x 22
dropped
Chrome Cache Entry: 136
GIF image data, version 89a, 24 x 24
downloaded
Chrome Cache Entry: 137
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 138
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 139
ASCII text, with very long lines (39257), with CRLF line terminators
downloaded
Chrome Cache Entry: 140
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 141
PNG image data, 40 x 3, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 142
ASCII text, with very long lines (23234)
downloaded
Chrome Cache Entry: 143
GIF image data, version 89a, 24 x 24
dropped
Chrome Cache Entry: 144
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 145
PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 146
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 78
HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
dropped
Chrome Cache Entry: 79
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 80
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
dropped
Chrome Cache Entry: 81
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (65329), with CRLF line terminators
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (42690)
downloaded
Chrome Cache Entry: 84
ASCII text, with very long lines (32960)
downloaded
Chrome Cache Entry: 85
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 86
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 87
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 88
JPEG image data, baseline, precision 8, 1920x1080, components 3
downloaded
Chrome Cache Entry: 89
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 90
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 91
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 92
PNG image data, 40 x 3, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 93
PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 94
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 95
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 96
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (994), with no line terminators
downloaded
Chrome Cache Entry: 98
JPEG image data, baseline, precision 8, 1920x1080, components 3
dropped
Chrome Cache Entry: 99
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
dropped
There are 60 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2564,i,477667822564562811,16000836356616911954,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://4smgswwi.r.us-west-2.awstrack.me/L0/https:%2F%2Fm.exactag.com%2Fai.aspx%3Ftc=d9917688bc40b07205bbd26a23a8d2e6b6b4f9%26url=%2568%2574%2574%2570%2525%2533%2541primmacy.com%252Fwinner%252F77663%252F%252FYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==/1/0101019079f53360-ad062f3a-6c08-4c14-8569-269fb9f20297-000000/mkI5299-kBX9yyfDwVrQlybi5Wk=382"

URLs

Name
IP
Malicious
https://4smgswwi.r.us-west-2.awstrack.me/L0/https:%2F%2Fm.exactag.com%2Fai.aspx%3Ftc=d9917688bc40b07205bbd26a23a8d2e6b6b4f9%26url=%2568%2574%2574%2570%2525%2533%2541primmacy.com%252Fwinner%252F77663%252F%252FYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==/1/0101019079f53360-ad062f3a-6c08-4c14-8569-269fb9f20297-000000/mkI5299-kBX9yyfDwVrQlybi5Wk=382
malicious
https://lkallinskyaskergoworks.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2xrYWxsaW5za3lhc2tlcmdvd29ya3MuY29tLyIsImRvbWFpbiI6ImxrYWxsaW5za3lhc2tlcmdvd29ya3MuY29tIiwia2V5IjoibG1SSFA0NkpyRHFBIiwicXJjIjoiYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbSIsImlhdCI6MTcyMDA0MTMzMiwiZXhwIjoxNzIwMDQxNDUyfQ.B7Lc10R3951DMzS2umCE3T8z4715srfQqYqwARzHKuQ
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js
185.143.223.42
 malicious
https://4smgswwi.r.us-west-2.awstrack.me/L0/https:%2F%2Fm.exactag.com%2Fai.aspx%3Ftc=d9917688bc40b07205bbd26a23a8d2e6b6b4f9%26url=%2568%2574%2574%2570%2525%2533%2541primmacy.com%252Fwinner%252F77663%252F%252FYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==/1/0101019079f53360-ad062f3a-6c08-4c14-8569-269fb9f20297-000000/mkI5299-kBX9yyfDwVrQlybi5Wk=382
34.208.184.182
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/favicon.ico
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/?qrc=becky.barckley%40clearwaterpaper.com
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/common/instrumentation/dssostatus
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_fo8rkc18qnhjh4wnzabsdg2.js
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Kjlmc42uL0ATl_21eYcwVg2.js
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
185.143.223.42
 malicious
https://lkallinskyaskergoworks.com/owa/?login_hint=becky.barckley%40clearwaterpaper.com
185.143.223.42
 malicious
http://github.com/jquery/globalize
unknown
https://autologon.microsoftazuread-sso.com/clearwaterpaper.com/winauth/ssoprobe?client-request-id=3b1603bc-ce04-da66-0251-3efe1e310cb1&_=1720041340377
40.126.31.73
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/zfx5f/0x4AAAAAAAc9T98XMh-R8FRu/auto/normal
https://m.exactag.com/ai.aspx?tc=d9917688bc40b07205bbd26a23a8d2e6b6b4f9&url=%68%74%74%70%25%33%41primmacy.com%2Fwinner%2F77663%2F%2FYmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==
85.14.248.71
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1299850252:1720038271:FLQXB6TfjKKWTemLrqFLkm7QM7NIQIUzaojfQkTVozk/89d9e39b4c6a439c/dddee621c398e80
104.17.3.184
https://outlook.office365.com/owa/prefetch.aspx
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flkallinskyaskergoworks.com%2fcommon%2freprocess%3fctx%3drQQIARAAjZE7bNNQFIbtODVtKSQqEmICZDEVHNuJ7cRBReTVJG1Ik5JHE4Qi--Y6TuPkOrYbJ6m6syBVLEgdGRgyAQuoqkRH1AF16FSWjlUHhBBDxYBIxMIG__DpX87R0fkWCM7Hhe-wf-KnJ6RZVeVoACftr5jzs9594vp992f1xJV_8OsmN_d2hN_SbNuwwgyDNm0doZYPqWoTQB9AbQY5MvMBx49w_AzHX7goBYLWwKfIJmjpcPAQ6FA2HdmGpiEb0JyMjFxBMRAShDG4AC8FWSEk8j5QF4AkSeObeFmheU4O0pIIFVoVQCjAskHgD4ITl2c1smlr_gmQ2RzC764ZFZntmoEse5fYxePAjsatdCORiK6xmVVeS6ed6JqSRIKmpTJFI5PnDLZX8Fs9rSeJxTxvd4PSSsFoxmNiLBvrD7v1RjotQLZvIaOcL0EwXCk7TnejOixFBw2x4mTqkVCHdvRILrUs6mpX5aRqr1yrJquCnu0o8fx6rl2DxeSSFaWDIGsPeFk2MylnRPyXgHcEOX5RG3UOCRIZsNOsH7nxUzd-7p5jifD09KwXu4Hdxi7c-KupsaufL4-veTzvl0Yfp_Z3tC_Y4RSTLCHLrA4ZPsUmlvVK198BA6dxN_coXmdLvVguXk1p_cfsSsWfWAyEuR0S3yHJPXJmmvBiFBHLcWck_o3En13C9mb-Jf7oMn4yx8-SQJebbWt-YYtq1ms2asEOFd6i-m2rBsCk9WR9E1pU-Ak13k893d7ePriCXVx9fnrw6fjH66-pc889f4nrRsWOxTARSQkFKkXL3CgmEsVCwVwvt9pdlA2AWCKuWDC0-MaLnXqx3w2&mkt=en-US&hosted=0&device_platform=Windows+10
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89d9e39b4c6a439c/1720041309222/HnYog-_gKEtQyoM
104.17.3.184
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js
104.17.3.184
https://scottgteamallegmach.com/?lhheyeap=88b17e27f071d67cb0a6b3932d6af4e785f293e1421615b6e203a80136e4ffa1d178a9fe226f4ce649ae917140d4c6ee5f6779a3b264f31e482e2cb6097f67eb&qrc=becky.barckley%40clearwaterpaper.com
http://primmacy.com/favicon.ico
103.83.194.55
http://knockoutjs.com/
unknown
http://primmacy.com/winner/77663//YmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==
https://scottgteamallegmach.com/?lhheyeap&qrc=becky.barckley@clearwaterpaper.com
185.143.223.42
https://github.com/douglascrockford/JSON-js
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d9e39b4c6a439c
104.17.3.184
https://login.windows-ppe.net
unknown
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.3.184
http://www.json.org/json2.js
unknown
https://scottgteamallegmach.com/favicon.ico
185.143.223.42
https://login.microsoftonline.com
unknown
http://www.opensource.org/licenses/mit-license.php)
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
104.17.3.184
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89d9e39b4c6a439c/1720041309225/6462f35eb6259c6d9e275f551e287de82e9c4e4c533436185cc277a704b5ad98/2sgfur4PYM85bMd
104.17.3.184
https://aadcdn.msftauthimages.net/dbd5a2dd-e46et3mviuj5hnab0uyh3msgiqsksgiurb-rx0lfuwi/logintenantbranding/0/bannerlogo?ts=636530090129429631
13.107.246.42
http://feross.org
unknown
https://account.live.com/resetpassword.aspx
unknown
There are 37 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
lkallinskyaskergoworks.com
185.143.223.42
 malicious
s-part-0033.t-0009.t-msedge.net
13.107.246.61
tp-emea.exactag.com
85.14.248.71
fp2e7a.wpc.phicdn.net
192.229.221.95
autologon.microsoftazuread-sso.com
40.126.31.73
s-part-0014.t-0009.t-msedge.net
13.107.246.42
bg.microsoft.map.fastly.net
199.232.210.172
ooc-g2.tm-4.office.com
52.97.135.98
challenges.cloudflare.com
104.17.3.184
sni1gl.wpc.omegacdn.net
152.199.21.175
www.google.com
172.217.16.132
primmacy.com
103.83.194.55
baconredirects-elb-mev7rf5mv7m-1287676624.us-west-2.elb.amazonaws.com
34.208.184.182
s-part-0032.t-0009.t-msedge.net
13.107.246.60
scottgteamallegmach.com
185.143.223.42
4smgswwi.r.us-west-2.awstrack.me
unknown
r4.res.office365.com
unknown
aadcdn.msftauth.net
unknown
ajax.aspnetcdn.com
unknown
m.exactag.com
unknown
outlook.office365.com
unknown
aadcdn.msftauthimages.net
unknown
passwordreset.microsoftonline.com
unknown
There are 13 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
185.143.223.42
lkallinskyaskergoworks.com
Russian Federation
malicious
34.208.184.182
baconredirects-elb-mev7rf5mv7m-1287676624.us-west-2.elb.amazonaws.com
United States
13.107.246.42
s-part-0014.t-0009.t-msedge.net
United States
192.168.2.4
unknown
unknown
13.107.246.61
s-part-0033.t-0009.t-msedge.net
United States
104.17.3.184
challenges.cloudflare.com
United States
85.14.248.71
tp-emea.exactag.com
Germany
103.83.194.55
primmacy.com
United States
40.126.31.73
autologon.microsoftazuread-sso.com
United States
239.255.255.250
unknown
Reserved
152.199.21.175
sni1gl.wpc.omegacdn.net
United States
104.17.2.184
unknown
United States
52.97.135.98
ooc-g2.tm-4.office.com
United States
172.217.16.132
www.google.com
United States
There are 4 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://lkallinskyaskergoworks.com/?p53xad2ll=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
 malicious
https://lkallinskyaskergoworks.com/?p53xad2ll=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&sso_reloa
 malicious
https://lkallinskyaskergoworks.com/?p53xad2ll=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&sso_reloa
 malicious
http://primmacy.com/winner/77663//YmVja3kuYmFyY2tsZXlAY2xlYXJ3YXRlcnBhcGVyLmNvbQ==
https://scottgteamallegmach.com/?lhheyeap=88b17e27f071d67cb0a6b3932d6af4e785f293e1421615b6e203a80136e4ffa1d178a9fe226f4ce649ae917140d4c6ee5f6779a3b264f31e482e2cb6097f67eb&qrc=becky.barckley%40clearwaterpaper.com
https://scottgteamallegmach.com/?lhheyeap=88b17e27f071d67cb0a6b3932d6af4e785f293e1421615b6e203a80136e4ffa1d178a9fe226f4ce649ae917140d4c6ee5f6779a3b264f31e482e2cb6097f67eb&qrc=becky.barckley%40clearwaterpaper.com
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/zfx5f/0x4AAAAAAAc9T98XMh-R8FRu/auto/normal
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/zfx5f/0x4AAAAAAAc9T98XMh-R8FRu/auto/normal
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flkallinskyaskergoworks.com%2fcommon%2freprocess%3fctx%3drQQIARAAjZE7bNNQFIbtODVtKSQqEmICZDEVHNuJ7cRBReTVJG1Ik5JHE4Qi--Y6TuPkOrYbJ6m6syBVLEgdGRgyAQuoqkRH1AF16FSWjlUHhBBDxYBIxMIG__DpX87R0fkWCM7Hhe-wf-KnJ6RZVeVoACftr5jzs9594vp992f1xJV_8OsmN_d2hN_SbNuwwgyDNm0doZYPqWoTQB9AbQY5MvMBx49w_AzHX7goBYLWwKfIJmjpcPAQ6FA2HdmGpiEb0JyMjFxBMRAShDG4AC8FWSEk8j5QF4AkSeObeFmheU4O0pIIFVoVQCjAskHgD4ITl2c1smlr_gmQ2RzC764ZFZntmoEse5fYxePAjsatdCORiK6xmVVeS6ed6JqSRIKmpTJFI5PnDLZX8Fs9rSeJxTxvd4PSSsFoxmNiLBvrD7v1RjotQLZvIaOcL0EwXCk7TnejOixFBw2x4mTqkVCHdvRILrUs6mpX5aRqr1yrJquCnu0o8fx6rl2DxeSSFaWDIGsPeFk2MylnRPyXgHcEOX5RG3UOCRIZsNOsH7nxUzd-7p5jifD09KwXu4Hdxi7c-KupsaufL4-veTzvl0Yfp_Z3tC_Y4RSTLCHLrA4ZPsUmlvVK198BA6dxN_coXmdLvVguXk1p_cfsSsWfWAyEuR0S3yHJPXJmmvBiFBHLcWck_o3En13C9mb-Jf7oMn4yx8-SQJebbWt-YYtq1ms2asEOFd6i-m2rBsCk9WR9E1pU-Ak13k893d7ePriCXVx9fnrw6fjH66-pc889f4nrRsWOxTARSQkFKkXL3CgmEsVCwVwvt9pdlA2AWCKuWDC0-MaLnXqx3w2&mkt=en-US&hosted=0&device_platform=Windows+10
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flkallinskyaskergoworks.com%2fcommon%2freprocess%3fctx%3drQQIARAAjZE7bNNQFIbtODVtKSQqEmICZDEVHNuJ7cRBReTVJG1Ik5JHE4Qi--Y6TuPkOrYbJ6m6syBVLEgdGRgyAQuoqkRH1AF16FSWjlUHhBBDxYBIxMIG__DpX87R0fkWCM7Hhe-wf-KnJ6RZVeVoACftr5jzs9594vp992f1xJV_8OsmN_d2hN_SbNuwwgyDNm0doZYPqWoTQB9AbQY5MvMBx49w_AzHX7goBYLWwKfIJmjpcPAQ6FA2HdmGpiEb0JyMjFxBMRAShDG4AC8FWSEk8j5QF4AkSeObeFmheU4O0pIIFVoVQCjAskHgD4ITl2c1smlr_gmQ2RzC764ZFZntmoEse5fYxePAjsatdCORiK6xmVVeS6ed6JqSRIKmpTJFI5PnDLZX8Fs9rSeJxTxvd4PSSsFoxmNiLBvrD7v1RjotQLZvIaOcL0EwXCk7TnejOixFBw2x4mTqkVCHdvRILrUs6mpX5aRqr1yrJquCnu0o8fx6rl2DxeSSFaWDIGsPeFk2MylnRPyXgHcEOX5RG3UOCRIZsNOsH7nxUzd-7p5jifD09KwXu4Hdxi7c-KupsaufL4-veTzvl0Yfp_Z3tC_Y4RSTLCHLrA4ZPsUmlvVK198BA6dxN_coXmdLvVguXk1p_cfsSsWfWAyEuR0S3yHJPXJmmvBiFBHLcWck_o3En13C9mb-Jf7oMn4yx8-SQJebbWt-YYtq1ms2asEOFd6i-m2rBsCk9WR9E1pU-Ak13k893d7ePriCXVx9fnrw6fjH66-pc889f4nrRsWOxTARSQkFKkXL3CgmEsVCwVwvt9pdlA2AWCKuWDC0-MaLnXqx3w2&mkt=en-US&hosted=0&device_platform=Windows+10
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flkallinskyaskergoworks.com%2fcommon%2freprocess%3fctx%3drQQIARAAjZE7bNNQFIbtODVtKSQqEmICZDEVHNuJ7cRBReTVJG1Ik5JHE4Qi--Y6TuPkOrYbJ6m6syBVLEgdGRgyAQuoqkRH1AF16FSWjlUHhBBDxYBIxMIG__DpX87R0fkWCM7Hhe-wf-KnJ6RZVeVoACftr5jzs9594vp992f1xJV_8OsmN_d2hN_SbNuwwgyDNm0doZYPqWoTQB9AbQY5MvMBx49w_AzHX7goBYLWwKfIJmjpcPAQ6FA2HdmGpiEb0JyMjFxBMRAShDG4AC8FWSEk8j5QF4AkSeObeFmheU4O0pIIFVoVQCjAskHgD4ITl2c1smlr_gmQ2RzC764ZFZntmoEse5fYxePAjsatdCORiK6xmVVeS6ed6JqSRIKmpTJFI5PnDLZX8Fs9rSeJxTxvd4PSSsFoxmNiLBvrD7v1RjotQLZvIaOcL0EwXCk7TnejOixFBw2x4mTqkVCHdvRILrUs6mpX5aRqr1yrJquCnu0o8fx6rl2DxeSSFaWDIGsPeFk2MylnRPyXgHcEOX5RG3UOCRIZsNOsH7nxUzd-7p5jifD09KwXu4Hdxi7c-KupsaufL4-veTzvl0Yfp_Z3tC_Y4RSTLCHLrA4ZPsUmlvVK198BA6dxN_coXmdLvVguXk1p_cfsSsWfWAyEuR0S3yHJPXJmmvBiFBHLcWck_o3En13C9mb-Jf7oMn4yx8-SQJebbWt-YYtq1ms2asEOFd6i-m2rBsCk9WR9E1pU-Ak13k893d7ePriCXVx9fnrw6fjH66-pc889f4nrRsWOxTARSQkFKkXL3CgmEsVCwVwvt9pdlA2AWCKuWDC0-MaLnXqx3w2&mkt=en-US&hosted=0&device_platform=Windows+10
There are 5 hidden doms, click here to show them.